The Model of Trusted Computing for Online Payment of B2C E-Business Website Based on Trusted Third Party

摘要

The system of trusted third party(TTP) is the main trust technology for online-payment of B2C e-business, but it is not sufficient to support the trusted security in a world of virtual and widely distributed organizations. It needs to safeguard the security and durative of service based on the demands of users. So we need to protect confidentiality of user, maintain integrity of bargaining data, assure availability of every deal. The model of trusted computing for online payment of B2C e-business website based on TTP can offer the unified identity authentication and access control. Based on the framework of PKI, the model of trusted network connection (TNC) can resolve the identity authentication of terminal, the model of temp security domain (TSD) can resolve the identity authentication of website transfer, the model of trusted access control based PMI/RBAC can support agile privilege and role management based on e-business domain knowledge.