针对在线支付系统存在的安全隐患,提出了一种基于WPKI体系结构的解决方案,设计并实现了一套加油站在线支付系统。该系统采用SSL协议、数字签名以及数字证书实现支付过程中的身份认证,保证了信息的完整性,其中CA利用OpenSSL库进行开发。系统采用三层Web体系结构模式,表现层采用MVC设计模式完成,业务层采用JDK动态代理封装事务,持久层采用DAO设计模式完成。实验结果表明,基于WPKI体系结构的在线支付系统实现了支付过程中的保密性、真实性、完整性及不可否认性。
Aimed at the security problems that exist in the online payment system,a solution based on WPKI is proposed,and then a gas station on-line payment system is designed and implemented.The SSL protocol,digital signature and digital certificate are used in the system to realize user authentication and ensure the integrity of information.CA is developed using OpenSSL library.The system is three-tier web application architecture,using MVC design pattern in the web layer,dynamic proxy of JDK in the logic layer,and DAO design pattern in the persistence layer.The conclusion is drawn that the online payment system based on WPKI realizes the data privacy,authenticity,integrality and non-repudiation in on-line payment process.