SSL using public key encryption could be easily understood with the following scenario “kumar orders a mobile phone from an online store (abc. com).” . Kumar connects to abc.com website through a secure connection, from his computer browser. .
The abc.com website sends Kumar an digital certificate and a public key (P). This digital certificate issued by a certification authority (CA) proves the identity of abc.com. . Kumar’s browser checks the certificate.
It (browser) then agrees with the remote server on a symmetric cryptographic system to use. Then it randomly choose a key for this algorithm (session key K). . Kumar’s browser sends P (K) to abc.com.
Using its secret key S, the abc.com server calculates S (P (K)) = K. Thus, Kumar’s browser and abc.com server are in possession of the same key. . Kumar enters his credit card number and other data.
They constitute the “information”. The browser sends these “information” to abc.com, encrypted using the key K. It also sends a summary of this “information”, using a mathematical function called hash function. .
With the K key, the abc.com server can dencrypt the “information”. It also calculates the summary of information, and compares with the summary sent by Kumar’s browser. If they coincide, it is assumed that the data has been correctly transmitted. Chapter E-Commerce Security Systems version CHAPTER version CHAPTER - - - - Chapter E-Commerce Security Systems -D Secure An additional security layer for online credit and debit card transactions.
Ciphertext It is the encrypted data usually the output of an encryption algorithm Cracker A person who breaks computer network’s security maliciously to gain access to critical data. Cryptanalysis Analyzing a suspecting document for hidden data or chiphertext Cyber Squatting Is the illegal practice of registering an Internet domain name that might be wanted by another person in an intention to sell it later for a profit Decipher A standard algorithm for decrypting data Domain name The website address of an online store, e.g. Encryption A method of scrambling data using an algorithm to protect