Improved scheme of double-direction signature in SET protocol

摘要

SET is an international standard applied to e-business security. The introduction of a double-direction signature avoids deception between the merchant and the bank, and establishes the authenticity of the customer. However, it doesn't consider the merchant-bank undeniability. Also, the hash algorithm employed is SHA-1 which, with improvements in computer performance and execution speed, is becoming increasingly insecure. In this paper, a new hash function and time stamp are introduced and the undeniability of the sender and receiver is realized. Through the theoretical analysis and test, it is concluded that the scheme has a good measure of security.