8.1 8.1.1 8.1.2 8.1.3

8.1.1 e-payment

1-2 - 3 4 8.1.1

8.1.1 ATM POS

8.1.2

8.1.3 1 2 3 4

8.2 8.2.1 8.2.2 SSL 8.2.3 SET 8.2.4 SSLSET

8.2.1

SSLSSLSSL SSL

1SSL

CommerceNet consortium90HTTPS-HTTPMosaic90NetscapeSSLCommerceNetNetscapeSSLSSL199411SSL2.01996SSL 3.0

2SSL2.1 SSLNetscape 3.0I.E.NetscapeSSL

*SSLSSL Record ProtocolSSLSSLSSL SSLSSL Handshake ProtocolSSLSSLSSL2.2 SSL 2SSL

SSLTCPSSLHTTPSSLSSLX.509RSARC4-128RC-128DESIDESSSLISO 2.2 SSL 2SSL

HTTPSSL 2.2 SSL 2SSLHTTPSSLHTTPSHTTPHTTPS443HTTP80TCP/IP

2.2 SSL 2SSLhttpssslhttpshttp://www.cmbchina.com/ https://pbsz.ebank.cmbchina.com/CmbBank_GenShell/UI/GenShellPC/Login/Login.aspx HTTPSHTTPSSSL

Google Googlehttps://www.google.comGoogle Google SSLlogobetaGoogleGoogleSSLGoogle

Googlehttps://www.google.com SSLGoogle

GooglegooglehttpsGoogleSSL

*2.3 SSL 2SSL1 2 3

*2.3 SSL 2SSL .

2.4SSL

SSLSSL SSL SSL CA 2.4SSL

SSL CA CA CA CRL 2.4SSL

SSL SSL SSL SSL SSL 2.4SSL

SSL SSLSSL 2.4SSL

SSL SSLSSLSSL Internet 2.4SSL

SSLWebSSLSSL

3SSL SSL 1CA 2WEB 3WEBSSL 4WEBCA

3SSL 3.1IIS//windowswindows

Web(CA)

CAwindowsCACA

CACAIP10.91.30.455

system32certlog

IIS

windows2000

windows

3SSL IIS 3.2

3SSL 3.2

WEB3SSL 3.2

3SSL 3.2

3SSL 3.2

5123SSL 3.2

3SSL 3.2

localhost 3SSL 3.2

3SSL 3.2

.3SSL 3.2

IIS3SSL 3.2

3SSL 3.3IIS IIS(Certificate ServicesIISInternet Explorerhttp://localhost/CertSrv/default.aspMicrosoft BASE64 CMCPKCS10

3SSL 3.4 IIS IIS d:cce.cer

3SSL 3.5IIS IIS IISSSL443.

3SSL 3.6 IIS IISSSLIIS SSL128

SETSETSETSSL SET

SSL SSLSSL3.0WebSSLSSL1 SET

SSLVisa MasterCardSET

1 SET

2 SET SETSecure Electromc Transaction Visa MasterCardInternetIBMHPMicrosoftNetscapeVeriFoneGTEVCrisign

2.1SET

2.2 SETWEB

2.2 SET

Source: Michael I. Shamos2.3 SET

Source: Michael I. Shamos

2.4 SET SSL

2.4 SSLSET1SETSSL2SSLSET3SETInternetSSLWeb

2.4 SSLSET4SSLSETSET5SET6SET

2.4 SSLSETSSL1234SSL

2.4 SSLSET12 SETSSL3 SETSSL4 SETSSL

8.3 8.3.1 8.3.2 8.3.3 8.3.4 8.3.5

8.3.1 CA

8.3.2 (1) (RS) (2) (RA) (3) (CA)

8.3.3 (1) (2) (3) (4) (5)

E-key

E-key IC

(Internet

X.509 E-key

CA CA Internet Internet 32-bit .exe .cab .ocx .class

X.509 IE Netscape IE WINDOWS NETSCAPE WEB (https )

CA CA Internet Internet 32-bit .exe .cab .ocx .class

SSLSETSSLSET

8.4 8.4.1 8.4.2

8.4.1 1 4

8.4.1 1.(Payment Gateway)Internet

8.4.1 1 2 3 4 5 6 7 8 9

8.4.1

1.

8.4.1

2. Payment Gateway

8.4.1 3. PCRPayment Gateway Certificate RegistrationPACSETPayment Gateway Authorize & Capture ProcessPAIPayment Gateway Administrator InterfacePBPayment Gateway Bank InterfaceSET

8.4.1 2.3. Internet

8.4.1

8.4.1

8.4.2 SET 1 2 3 4 5

1

8.4.2 SET(2) SETSET

8.4.2 SET(3)

8.4.2 SET4

8.4.2 SET5

http://www.bank-of-china.com

8.5 1979 1985CFCA www.cfca.com.cn BJCAwww.bjca.org.cn

:

:SSLSET(CA)SSLSET

:12345SSL

:SHECAhttp://www.sheca.org.cn

*90NetscapeSSLNetscapeCommerceNetNetscapeSSLSSLSSLHTTPFTPTELNETSSL Visa MasterCardSET SETSET 1Web 2 3 4SET 5SET 6Gateway 7 8 9 SETSETSETCA SSLSETSETSETSSLWEBSETSSLSETSSL****