| Along with popularity of computer and high-speed development in computer network and increasing demand on quick and convenient business, e-commerce is improved tremendously in the world. E-commerce is gradually pervading to the full extent, and is impacting drastically some kinds of traditional commerce. Meanwhile, security of bargain is emerging in multitude in the course of e-commerce. It is very effective to solve the problem by using payment protocol with high security. As one of payment protocol with high security, SET protocol is a hot research topic now.The paper put forward a design concept and its realization for applying XML security technology to SET protocol, in which the advantages of XML compensate the shortage existing in SET protocol. A large amount numbers are involved in SET protocol, which should be strictly formatted, that is, Message Wrapper having rigidly format. So this is a complex and less flexible job, which limits SET protocol widely spreading. XML technology is a flexible data processing technology, which has some attracting features such as structured and extensible and suits to process complex and anomalous data. Absorbing XML technology enhances the processing flexibility and extensible capacity of SET protocol.Although SET protocol possesses very high security, it pays a lot of cost in algorithmic spending. Through introducing security ranking system (in other words, setting down different security rank, so that users can chose security intensity in the light of their demand) both sides are balanced the furthest. The most difficult still existing is the conferring between algorithms and encrypt. This puzzle is settled down perfectly by using XML signature and encrypt technology.Some security risks still lie in concrete transactions though SET protocol possesses pretty high security. Confirmed order information, before cardholders present buy demands, does not gain merchants authentication promise. So once merchants change something, cardholders will encounter security risks. Security of SET protocol is improved and cardholders' risks are decreased by adding merchants' authentication to order information during cardholders buy initial stage.Important information processing is less considered in SET protocol. Through introducing in third-party storage of important data, SET possesses higher security and more suits for law intervening e-commerce so that the hard problem of collecting evidence about important data in e-commerce is settled down.In this paper, firstly actual SET protocol is analyzed. In the section the emphasis is put on explaining the workflow and key security technology of SET protocol, which is mainly concerned about encryption. According to analyzing SET protocol we canfind its weakness. Then the paper focuses on analyzing basic structure and deal flow of XML security technology, especially on explaining the scheme of XML encryption and signature in detail, and analyzing the advantages of XML encryption. In the end, this paper introduces XML technology into SET protocol and puts forward the improvement scheme on SET protocol. As a result, deal flow of SET protocol is optimized and its security, flexibility and implement were improved. The paper presents specific implement method for exchanging information between customer and business, also interprets the information structure and primary function modules. Furthermore, the author analyzes security and efficiency of the system. |
