行为原语自动生成的电子商务协议可组合设计策略及应用研究  

ON COMPOSITIONAL DESIGN STRATEGY OF ELECTRONIC COMMERCE PROTOCOL AUTOMATICALLY GENERATED BY BEHAVIOUR PRIMITIVE AND ITS APPLICATION

作　　者：李晓乐[1] 翁鸣[1] 庞原红[2] 

机构地区：[1]广西财经学院实验教学中心,广西南宁530003 [2]广西职业技术学院,广西南宁530226

出　　处：《计算机应用与软件》2015年第6期24-29,共6页Computer Applications and Software

基　　金：广西高等学校科学技术研究项目(2013YB215);广西财经学院科研项目(2013B047)

摘　　要：针对电子商务协议设计复杂度较高且手动组合设计效率较低的问题,构建了行为原语自动生成的可组合设计策略:利用自动生成工具从挑战/应答、现时值/秘密创建、加密/解密的角度描述电子商务活动各阶段的核心安全行为,根据身份认证、信息保密、信息完整、不可否认性、可追究性、客户隐私的可组合性设计规则规范消息项结构,通过多事件顺序、安全属性组合以及信息精简等规则将多个原语组合为复合协议。经过应用研究,设计出一个新的安全支付协议,实现了多个客户和商家对同时交易的电子商品和实物商品的在线支付安全。从安全性和设计效率的角度与现有的组合设计方法进行比较,分析表明,该策略是一种更加便捷安全的电子商务协议组合设计新策略。Aiming at the problems of electronic commerce protocol in high design complexity and low manual combination design efficiency,we constructed a combinational design strategy generated automatically by the behaviour primitive.It utilised automatic generation tool to describe the core security behaviours in different stages of electronic commerce activities in terms of challenge-response,creation of nonce and secret,encryption and decryption,normalised the structure of message item according to compositional design rules such as identity authentication,information secrecy and information integrity,non-repudiation,traceability and customer privacy,and combined multiple primitives to the composite protocol through the rules of multiple events sequence,security attributes combination and messages simplification, etc.We studied its application and designed a secure payment protocol,realised the online payment security for multiple customers and merchants on their simultaneous transactions of both electronic and physical goods.Comparing with current compositional design method from the perspectives of security and design efficiency,the analysis shown that new strategy provided a more convenient and secure way for electronic commerce protocol composition design.

关 键 词：行为原语 自动生成 可组合规则 组合设计 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]