Incorporating Robust Authentication Scheme in P2P E-Commerce Applications

應用安全強固的驗證機制於對等互聯網路電子商務環境

隨著點對點式（P2P）的技術崛起，使用者已運用這種互聯網的架構快速與便利的從事各種電子商務（EC）上的應用。雖然這種網路架構具有自我組織的能力和彈性，不過仍面臨來自開放通訊環境的威脅及挑戰，例如動態的拓撲結構、無線的連結、自主漫遊的環境，均暴露其危險與弱點。如何辨識身份及使用端互相確認，實為重要的安全議題。本文提出了一種運用橢圓曲線密碼學的計算原理，並植基於身分加密的認證機制，適用於這類P2P 無線及有線電腦通訊網路的環境，亦提供了增進安全強度、快速且低耗量效果的優點，藉由本文認證機制加值於P2P 的架構，可以強固EC 環境的安全性顧慮。

Due to lack of effective trust management mechanism, heaps of deceptions exist in peer-to-peer (P2P) e-commerce (EC) environments, which seriously damage authenticity and availability of the systems. There are various challenges that are faced in the open autonomous environments. These existing challenges are mostly owing to the scarcity of correct authentication in P2P networks. Generally speaking, structured P2P networks are assumed to be accessible by allowing heterogeneous nodes or clients to interact and share one another. The identity (ID) authentication problem for this type of network has now become important. The paper presents a specific authentication key exchange scheme for P2P networks. Theoretic analysis shows that, a robust evaluation scheme based on elliptic curve cryptography (ECC) is proposed for P2P e-commerce networks with better secure identifying-and-authenticating features.