《SET协议和3DSecure协议的比较与分析》由会员分享，可在线阅读，更多相关《SET协议和3DSecure协议的比较与分析（3页珍藏版）》请在金锄头文库上搜索。
1、l:2004-07-08;R:2004-12-22:国家自然科学基金资助项目(60173056)SETxp3-D Securexp1s*,(西安电子科技大学计算机网络与信息安全教育部重点实验室, 陕西西安 710071)K1:简要介绍了用于在线交易的卡支付规范 SET协议和 3-D Secure协议。主要在安全性方面对这两个协议进行了比较与分析。分析结果表明,由于 3-D Secure协议精简了 SET协议中复杂的加密技术,导致安全性减弱,针对这一点提出了一个安全性加强方案。1oM:SET协议;3-D Secure协议;安全性;数字签名;口令mEs|:TP393.08DSM:AcI|:1001
2、-3695(2005)11-0114-03Com pare and Analysis of SET Protocol and 3-D Secure ProtocolW ANG Dan-hu i, LIHu i, LI Lin(Key Labora tory ofCom pu terN etworksInforma tion S ecurity ofM in istry E duca tion, X id ian Un iversity, X i an Shanxi 710071, Ch ina)Abstract:The paper briefly introduces SET protocol
3、 and 3-D Secure p rotocol, the card paym ent criterions for on-line transac-tion. These tw o protocols are com pared and analyzed m ain ly in security. The results show that 3-D secu re protocol reducescomp lex encryption technology used in SET protocol, so it is w eaker in secu rity, thus a scheme
4、is proposed to strengthen it.Key words:SET Protocol;3-D Secure Protocol;Security;Digital Signatu re;PasswordY/?Zy+#P073,70vLH,vI。5Cf/, V isaM asterCardv5F;7?SET(Secure E lec-tron ic Transaction)xp,7V isaS=F-oS=wB3-D Secure(Th ree-Dom ain Secure)xp。xpB2CT,PKIO/VZ7b?S,54vp,74hnLi,0?Z。1SETxpeSETxp,1lFE
5、、hT、hT、hhT#Whxp。 SET1):5;E;hp;q;h。BSETm1U。SET,V?3hp/Y、qghp/Y、hghp/Y、|hp/Y、|ghp/Y、1hp/Y、5hp/Yh,7OhV8f。23-D Securexpe3-D Securexp1c5s。15LC:?5、lT。?5cL8:5、5、F5q、?5e(ACS)。lcL8:E、Eq(M PI)、l。TcL8:c、?、?、Nqd。755?5=。en,sL8, 3-D Securem2U。3-D Securexp,?.PIETF RFC 2246lTLSxp(Transport Layer Security Protocol),x
6、pSSL 3. 0(Netscape Secu re Sockets Layer v3),ETLSyHVSSL 3. 09。 3-D SecureTLSP114 92005M*qTLS_RSA_W ITH_3DES_EDE_CBC_SHA(A!)TLS_DH_RSA_W ITH_3DES_EDE_CBC_SHA(V)。31sSETxp3-D Securexp0)S5。, SETxpW%,1Z4?,G.,LdLZT;73-D SecurexpMe,|SETxp5ZLSM|ZFS,G.,LZT。/1Zxpe11s。3. 11SSETxp3-D Secu rexp1SV1U。V1SET3-D Sec
7、ure1SSET 3-D SecurehTASN.1 XMLIEDER Base 64FEDES 3DESdFERSA RSA /DH-RSAHMAC HMACFhESPKCS PKCSXESHA-1 SHA-1TX. 509v3 X.509v3i,PMYS,o9BM,SETxp, DERIhxp;3-D Securexp, Base64Ihp/Y(PAReq /PARes)hXM L&。N,xpS,M IM E(M u ltipurpose InternetM essage Ex-tensions)。 3-D Securexp, M IM E4B ase64IE;SETxp, M IM EBSETh3SETSh#Yh,74Base64IE。3. 2S3. 2.1机密性SETxp3-D SecurexpPdF/。SETxpP3/,h5B3F,lF,T3,|Fh3?l。l551-73,P7Fh。hpcEU(OI)U(PI)s,PI7!(CDM F)EyFE.1,EE7PI3*7|5l|,5l|E7,EJ。H,51O IPI3B553BsKdFA(OAEP)*hK1。3-D Securexp5TLSxp。?5lF3,|?Z,ZPME9h。xzY,?|hh3DESF?l,7F-,51CBCT1pA。xpV,51l|、lSM5r1EVn,SETxpM1, 3-D Secu rexp
