7

Henric Johnson

Blekinge Institute of Technology, Sweden

http://www.its.bth.se/staff/hjo/
henric.johnson@bth.se
Henric Johnson



(SSL)
(TLS)

(SET)

Henric Johnson

Henric Johnson


TCP/IP

7.1
Henric Johnson

SSL TLS
SSL Netscape
TLS
IETF
TLS
SSLv3.1

Henric Johnson

 SSL

7.2
Henric Johnson

 SSL

7.3
Henric Johnson

 SSL

7.4
Henric Johnson


SSL

7.5
Henric Johnson


SSL.

.

, MAC,
.

.
Henric Johnson

10

7.6
Henric Johnson

11

 (TLS)

SSL.
RFC 2246.
SSLv3.
:

certificate_verify finished

Henric Johnson

12

 (SET)

.

.
:
MasterCard, Visa, IBM, Microsoft,
Netscape, RSA, Terisa Verisign
.

.
Henric Johnson

13

 SET

.


X.509v3.
.

Henric Johnson

14

 SET
SET:
()

Henric Johnson

15


SET

7.8
Henric Johnson

16


1.
2.
3.
4.
5.
6.
7.
8.
9.
10.

.
.
.
.
.
.
.
.
.
.

Henric Johnson

17


DS EKRc [ H ( H ( PI ) || H(OI))]

7.9

Henric Johnson

18

7.10

Henric Johnson

19

7.11

Henric Johnson

20


:


:


Henric Johnson

21

Drew, G. Using SET for Secure Electronic

Commerce. Prentice Hall, 1999
Garfinkel, S., and Spafford, G. Web
Security & Commerce. OReilly and
Associates, 1997
MasterCard SET
Visa Electronic Commerce
SETCo ( )
Henric Johnson

22