Design of electronic payment system module based on SET protocol

introduction

Internet-based e-commerce is booming in today's world because of its unparalleled advantages in traditional business models. The key issue in the development of e-commerce is the security of transactions, that is, the security of information on the network, that is, the safe realization of online electronic payments. The SET secure electronic transaction protocol was jointly developed by Visa and MasterCard in May 1997. It is an open protocol that guarantees * payment security when trading online on the Internet. The agreement generally serves the e-commerce type of card consumption and online shopping. At home, the Bank of China, China Merchants Bank, China Construction Bank and Industrial and Commercial Bank of China have all opened online banking services, and the electronic payment system has been able to realize online electronic payment in B to C, B to B and G to C. Bank of China's "Great Wall Electronic Debit Card" and "Great Wall International *" are the SET protocols used.

This article analyzes the three major modules of the online electronic payment system (ie shopping platform module, gateway payment module and CA module) according to the e-commerce payment process of the SET protocol . At the same time, it explains how to use the combination of digital certificate, double signature and digital signature technology to implement the system in e-commerce.

1 Electronic payment process of SET protocol

At present, the e-commerce operation process generally involves five directly related subjects: customer S, merchant A, CA certification center, payment gateway P and bank B. Its architecture is shown in Figure 1.

In general, the e-commerce payment process based on the SET protocol is as follows:

(1) Customer S enters online banking to start registration and opens an account;

(2) S enters the CA to apply for a digital certificate and save it to the storage medium;

(3) S enters the website, browses and selects the product to be purchased, enters the user name and password, uploads the customer digital certificate and downloads the merchant digital certificate, and then submits to the CA to verify, after the verification is successful, the product is placed in the shopping basket, the system automatically calculates the price;

(4) S fills in the receipt information, pays at the cashier, and the system generates the order information OI;

(5) Before payment, S uploads his digital certificate to merchant A, payment gateway P to verify, and downloads A and P digital certificates for verification;

(6) When both parties pass the verification, A sends a payment instruction to P, requesting P to transfer the money;

(7) After P accepts the payment instruction, it connects the account bank of S and A to perform the transfer process. Then A is shipped to S, and the payment is completed;

(8) Save the order for inquiry, and the shopping payment is over.

It can be seen from this that the e-commerce payment process based on the SET protocol is: the payment of the customer S passes through the payment gateway P, then to the bank B, and finally to the merchant A, so there is a set of strict security measures to ensure the security of the transaction.

2 Functional analysis of the electronic payment system

From a practical perspective, a secure electronic payment system should have the following functions:

(1) Use digital signatures and digital certificates to achieve authentication of all parties. Before the transaction, both parties must carry out identity authentication and issue a digital certificate through CA to confirm the legitimacy of the identity. Only the authenticated parties can conduct normal online transactions.

(2) Encrypt business using encryption technology. A cryptosystem based on elliptic curves is used to encrypt and decrypt the public key in the SET protocol. And use double signatures to strengthen the confidentiality of data transmission.

(3) Use message digest algorithms and Hash functions to confirm the integrity of data services. If the received message is found to be incomplete, the sender is required to retransmit it to ensure its integrity.

(4) When there is a dispute between the two parties to the transaction, it is necessary to ensure the non-repudiation of the business.

(5) Use double signatures to deal with the issue of multilateral payment for trading business. The order information OI must be connected with the payment instruction, because the merchant S will continue the transaction only after confirming the payment instruction, and the bank B must also confirm and cannot read the merchant S order information OI. This mutual isolation can be achieved by double signatures.

3 module analysis

In order to realize the above functions, according to the e-commerce payment process of the SET protocol, the online electronic payment system can be divided into three major modules, namely the shopping platform module, payment gateway module and CA module. Figure 2 shows the block diagram of the entire system.

Kara offers a wide range of illuminated and non-illuminated Rocker Switches.In this series,Rated current 6A,10A,16A,Ranging from 1 to 6 poles,with many styles of  colors and functions. Certifications include UL, CSA, TUV, CE, and more. 

Why choose us? 

 1)As  a manufacture,  all of our switch parts are made by our own factory in Ningbo. So, price is competitive.

2)We have our own UL testing lab in Taiwan, so quality can be guaranteed.

3) We can provide you with different types of rotary switches for your selection.

4) Various operating force,height and colour for one switch for your choice.

5) Safety, on-time delivery, excellent quality with competitive price.

6) MOQ: 1000pcs,mixed order acceptable, welcome trial order.

 7) OEM and ODM professional design.

8) We can provide free samples for your test.



rocker switchrocker switchrocker switch

Small-sized Rocker Switches

Small-Sized Rocker Switches,Round Rocker Switch,Small Rocker Switch,Mini Rocker Switch

Ningbo Kara Electronic Co.,Ltd. , https://www.kara-switch.com