基于PKI的电子商务信任研究
摘要
信任作为建立社会关系的基础,其目的之一就是为了突破个体之间的关系。电子商务最终是人际关系的表现,电子商务信任最终也表现为人际信任和社会信任。当然技术的参与,使得电子商务信任具有特殊涵义,在表现为人际信任和社会信任的同时,也引出了技术信任。正是由于技术的参与,使得传统交易方式中的钱物当面交换模式衍变为钱物在时间和空间上分离的交换模式,虽然大大增加消费者购买物品(或服务)的便捷性,但也增加了交易的复杂性,使得信任问题更加突出。
电子商务信任主要涉及三个方面——环境、交易双方和第三方。环境主要提供法律支撑、征信和评信、建立社会信用体系、建立电子商务标准和监督电子商务运行;交易双方,努力增强综合素质,提高信用等级;第三方主要提供电子商务交易平台、escrow服务、反馈系统、信用卡保证和trust seals等服务。通过三方面共同努力,保障电子商务稳定有序的发展。
本文主要研究基于PKI的电子商务信任,针对目前电子商务信任存在的问题,如网上银行和电子商务平台的数字证书的安全和法律保障问题、第三方的介入深度和广度问题等。提出解决办法,研究基于PKI的电子商务,构建基于声誉的电子商务信用计算模型。
首先总结国内外PKI的发展现状,对PKI应用案例进行剖析,提出国内PKI发展的相关对策;其次介绍电子商务信任模型,全面的归纳和总结多方参与的电子商务实体信任模型;再次,研究本文提出基于PKI的,由合法CA和电子商务参与者(主要为电子商务平台和网上银行)共同构建具备个性化特征的子CA模式的电子商务,来建设和维护用户数字证书体系;再者,在总结相关电子商务信任模型基础上,提出B2C电子商务简化信任模型,并做相关实证分析——网络调查问卷,通过调查结果,对网络调查问卷进行信度和效度分析;另外,针对当今网络消费者网络购物时最为关心的指标——声誉,提出基于声誉的电子商务信用计算模型,模型综合考虑了交易商品价值、评分人的声誉状况、评分的时间权重等因素;最后总结本文的研究内容,提出今后进一步的研究工作。
Being the basis of social relationship establishment,trust is existed for breaking through the relationship between individuals.The electronic commerce is the represent of human relations finally,and in corresponding the electronic commerce trust is also the represent of human trust and social trust.Of course,the electronic commerce trust is given a special meaning after the participation of technique,in which the technique trust is also introduced besides the human trust and social trust meanings.As the participation of technique,the face-to-face money-goods transaction model of the traditional transaction way is changed into the time-space separate money-goods transaction model, but along with increasing the convenience of goods/service purchase by the consumers, the increasing complexity of the transaction also makes the trust issue much more obvious.
The electronic commerce trust mainly refers to these three parts:the circumstance, the two transaction parties;and the third party.The circumstance mainly offers the legal support,the credit investigation and evaluation,the social trust system establishment,the electronic commerce standard establishment and the electronic commerce operation monitoring;the two transaction parties need to improve the comprehensive qualities and raise the credit rating;and the third party mainly provides the services such as the transaction platform of the electronic commerce,the escrow service,the feedback system, the credit card assurance and the trust seals.With the mutual effort of the above three parts,the stable and ordered development of the electronic commerce is guaranteed.
Aimed at the current existing problems of the electronic commerce,such as the digital certificate safety and legal protection problems of the internet banking and the electronic commerce platform,and the depth and width problems of the intervention of the third party,this article mainly investigates the electronic commerce trust based on PKI,proposes the solutions and establishes an electronic commerce trust calculation model based on reputation.
First of all,the PKI development status at home and abroad is summarized,and the PKI application cases are analyzed,by which the relating decisions of domestic PKI development is proposed;secondly,the electronic commerce trust model is introduced, and the multi-party participating electronic commerce entity trust model is concluded and summarized comprehensively;thirdly,the PKI-based electronic commerce is investigated, and the sub-CA is established by the PKI and the electronic commerce participants (mainly are the electronic commerce platform and the internet banking) together to build and maintain the user digital certificate system;fourthly,on the basis of summarizing the relating electronic commerce trust model,the simplified B2C electronic commerce trust model is proposed and the corresponding verification analysis is done:the website investigation questionnaire.By this questionnaire result,the reliability and validity of the questionnaire is analyzed;furthermore,according to the most concerning index during website shopping by the network consumers:the reputation,a reputation-based electronic commerce trust calculation model is proposed,in which the elements such as the value of the goods for transaction,the reputation situation of the marker,and the time weighting of the marks are considered comprehensively,the process only with two transaction parties assumed and the electronic commerce transaction process with the third party assumed are gaming analyzed to get solutions for the electronic commerce faith breaking problem;lastly,the investigation content of this article is summarized,and the further investigation job is explained.
电子商务信任主要涉及三个方面——环境、交易双方和第三方。环境主要提供法律支撑、征信和评信、建立社会信用体系、建立电子商务标准和监督电子商务运行;交易双方,努力增强综合素质,提高信用等级;第三方主要提供电子商务交易平台、escrow服务、反馈系统、信用卡保证和trust seals等服务。通过三方面共同努力,保障电子商务稳定有序的发展。
本文主要研究基于PKI的电子商务信任,针对目前电子商务信任存在的问题,如网上银行和电子商务平台的数字证书的安全和法律保障问题、第三方的介入深度和广度问题等。提出解决办法,研究基于PKI的电子商务,构建基于声誉的电子商务信用计算模型。
首先总结国内外PKI的发展现状,对PKI应用案例进行剖析,提出国内PKI发展的相关对策;其次介绍电子商务信任模型,全面的归纳和总结多方参与的电子商务实体信任模型;再次,研究本文提出基于PKI的,由合法CA和电子商务参与者(主要为电子商务平台和网上银行)共同构建具备个性化特征的子CA模式的电子商务,来建设和维护用户数字证书体系;再者,在总结相关电子商务信任模型基础上,提出B2C电子商务简化信任模型,并做相关实证分析——网络调查问卷,通过调查结果,对网络调查问卷进行信度和效度分析;另外,针对当今网络消费者网络购物时最为关心的指标——声誉,提出基于声誉的电子商务信用计算模型,模型综合考虑了交易商品价值、评分人的声誉状况、评分的时间权重等因素;最后总结本文的研究内容,提出今后进一步的研究工作。
Being the basis of social relationship establishment,trust is existed for breaking through the relationship between individuals.The electronic commerce is the represent of human relations finally,and in corresponding the electronic commerce trust is also the represent of human trust and social trust.Of course,the electronic commerce trust is given a special meaning after the participation of technique,in which the technique trust is also introduced besides the human trust and social trust meanings.As the participation of technique,the face-to-face money-goods transaction model of the traditional transaction way is changed into the time-space separate money-goods transaction model, but along with increasing the convenience of goods/service purchase by the consumers, the increasing complexity of the transaction also makes the trust issue much more obvious.
The electronic commerce trust mainly refers to these three parts:the circumstance, the two transaction parties;and the third party.The circumstance mainly offers the legal support,the credit investigation and evaluation,the social trust system establishment,the electronic commerce standard establishment and the electronic commerce operation monitoring;the two transaction parties need to improve the comprehensive qualities and raise the credit rating;and the third party mainly provides the services such as the transaction platform of the electronic commerce,the escrow service,the feedback system, the credit card assurance and the trust seals.With the mutual effort of the above three parts,the stable and ordered development of the electronic commerce is guaranteed.
Aimed at the current existing problems of the electronic commerce,such as the digital certificate safety and legal protection problems of the internet banking and the electronic commerce platform,and the depth and width problems of the intervention of the third party,this article mainly investigates the electronic commerce trust based on PKI,proposes the solutions and establishes an electronic commerce trust calculation model based on reputation.
First of all,the PKI development status at home and abroad is summarized,and the PKI application cases are analyzed,by which the relating decisions of domestic PKI development is proposed;secondly,the electronic commerce trust model is introduced, and the multi-party participating electronic commerce entity trust model is concluded and summarized comprehensively;thirdly,the PKI-based electronic commerce is investigated, and the sub-CA is established by the PKI and the electronic commerce participants (mainly are the electronic commerce platform and the internet banking) together to build and maintain the user digital certificate system;fourthly,on the basis of summarizing the relating electronic commerce trust model,the simplified B2C electronic commerce trust model is proposed and the corresponding verification analysis is done:the website investigation questionnaire.By this questionnaire result,the reliability and validity of the questionnaire is analyzed;furthermore,according to the most concerning index during website shopping by the network consumers:the reputation,a reputation-based electronic commerce trust calculation model is proposed,in which the elements such as the value of the goods for transaction,the reputation situation of the marker,and the time weighting of the marks are considered comprehensively,the process only with two transaction parties assumed and the electronic commerce transaction process with the third party assumed are gaming analyzed to get solutions for the electronic commerce faith breaking problem;lastly,the investigation content of this article is summarized,and the further investigation job is explained.
引文
[1]第23次中国互联网络发展状况统计报告[R].北京:中国互联网络信息中心,2009,1.
[1]胡伟雄等.电子商务安全认证系统.武汉:华中师范大学出版社,2005.
[2]http://www.cnnic.cn/index/OE/00/11/index.htm
[1]http://www.cs.com.cn/ssgs/04/200812/t20081212 1681200.htm,央行将发放10张电子支付牌照
[1]Andrew Nash,will iam Duane.公钥基础设施(PKI)实现和管理电子安全[M].北京:清华大学出版社,2002.
[2]吴以四.CA行业几多肯定几多忧[J].信息系统工程.2006,(151):55-58.
[3]任金强.国际PKI发展现状[R].北京:国家信息中心,2003.
[4]国务院信息办国家PKI体系研究课题组.国家PKI体系总体框架研究[R].北京:国家信息中心,2003.
[5]刘海龙.利用桥CA实现PKI域间互操作[J].Net info Security.2005,(1).
[6]周凌云,陆际光.PKI体系互操作性现状[J].信息网络安全,2004,(4):6-11.
[7]杜小利.电子商务时代的PKI[J].电子商务,2008,(9):15-16.
[8]董才生.信任在经济生活中的作用[J].社会科学战线,2002,(2):34-36.
[9]董才生,张宝祥.引发社会信任危机倾向的制度分析[J].长白学刊,2004,(2):44-45.
[10]董才生.信任本质与类型的社会学阐释[J].河北师范大学学报,2004,(1):22-25.
[11]郑伯醺.企业组上下级信任关系的建立[J].社会学研究,1999,(2):13-16.
[12]张维迎.信息、信任与法律[J].生活读书新知三联书店,2003,(5):68-71.
[13]鲁兴虎.网络信任虚拟与现实之间的挑战[M].南京:东南大学出版社,2003.
[14]史漫飞.制度经济学社会秩序与公共政策[M].北京:商务印书馆,2000.
[15]Matt Blaze,Joan Feigenbaum,and Jack Lacy.Decentralized trust management.In Proceedings of the 1996 IEEE Symposium on Security and Privacy,pages 164-173,Los Alamitos,USA,May 1996.AT&T.
[16]Marco Carbone,Mogens Nielsen.A formal model for trust in dynamic networks.In Proceedings of the International Conference on Software Engineering and Formal Methods,pages 54-63,Brisbane,Australia,September 2003.
[17]胡伟雄.电子商务安全认证系统[M].武汉:华中师范大学出版社,2005.
[18]袁时金.信任管理关键技术研究[D].上海:复旦大学,2005.
[19]2007中国网上银行调查报告[R].北京:中国金融认证中心,2008,(1).
[20]鲁耀斌,周涛.电子商务信任[M].武汉:华中科技大学出版社,2007.
[21]张冀明.全球电子商务安全法制之研究[D].北京:中国政法大学,2001.
[22]肖祖平.信用卡保证的法律问题分析[J].Smart Cards World,2003.
[23]魏明侠.电子商务中信用图章经济功能分析[J].科技管理研究,2005.
[24]裴剑平.“网上信用图章”避减在线信用风险的作用机理研究[J].商场现代化,2008,(11):33-35.
[25]魏明侠,肖开红.电子商务信用图章经济功能:基于中国背景样本的实验研究[J].商业经济与管理,2006,(5):25-26.
[26]王守中.影响我国B2C消费者初始信任因素的实证分析[D].成都:西南交通大学,2007.
[27]庞川,陈忠民,罗瑞文.消费者网络信任影响因素的实证分析[J].系统工程理论方法应用,2004,(4):55-57.
[28]晏鹏,张宁.电子商务网的信用度与链接分析——以淘宝网为例[J].科技与社会,2008,(6):13-15.
[29]胡伟雄,程南针.电子商务交易中信任度计算模型研究[J].电子商务,2007,(9):61-65.
[30]张巍,刘鲁,朱艳春.基于多影响因素的网上拍卖信任模型[J].清华大学学报(自然科学版),2006,(9):16-19.
[31]车纯,李华.电子商务中信用的博弈分析[J].电子科技,2004,(12):43-45.
[32]张维迎.博弈论与信息经济学[M].上海:上海人民出版社,2004.
[33]潘恒.电子商务环境下基于PKI的信任问题研究[D].成都:信息工程大学,2006.
[34]李沁芳.电子商务用户信任影响因素建模及实证研究[D].上海:同济大学,2007.
[35]车纯,李华.电子商务中信用的博弈分析[J].电子科技,2004,(12):43-45.
[1]胡伟雄等.电子商务安全认证系统.武汉:华中师范大学出版社,2005.
[2]http://www.cnnic.cn/index/OE/00/11/index.htm
[1]http://www.cs.com.cn/ssgs/04/200812/t20081212 1681200.htm,央行将发放10张电子支付牌照
[1]Andrew Nash,will iam Duane.公钥基础设施(PKI)实现和管理电子安全[M].北京:清华大学出版社,2002.
[2]吴以四.CA行业几多肯定几多忧[J].信息系统工程.2006,(151):55-58.
[3]任金强.国际PKI发展现状[R].北京:国家信息中心,2003.
[4]国务院信息办国家PKI体系研究课题组.国家PKI体系总体框架研究[R].北京:国家信息中心,2003.
[5]刘海龙.利用桥CA实现PKI域间互操作[J].Net info Security.2005,(1).
[6]周凌云,陆际光.PKI体系互操作性现状[J].信息网络安全,2004,(4):6-11.
[7]杜小利.电子商务时代的PKI[J].电子商务,2008,(9):15-16.
[8]董才生.信任在经济生活中的作用[J].社会科学战线,2002,(2):34-36.
[9]董才生,张宝祥.引发社会信任危机倾向的制度分析[J].长白学刊,2004,(2):44-45.
[10]董才生.信任本质与类型的社会学阐释[J].河北师范大学学报,2004,(1):22-25.
[11]郑伯醺.企业组上下级信任关系的建立[J].社会学研究,1999,(2):13-16.
[12]张维迎.信息、信任与法律[J].生活读书新知三联书店,2003,(5):68-71.
[13]鲁兴虎.网络信任虚拟与现实之间的挑战[M].南京:东南大学出版社,2003.
[14]史漫飞.制度经济学社会秩序与公共政策[M].北京:商务印书馆,2000.
[15]Matt Blaze,Joan Feigenbaum,and Jack Lacy.Decentralized trust management.In Proceedings of the 1996 IEEE Symposium on Security and Privacy,pages 164-173,Los Alamitos,USA,May 1996.AT&T.
[16]Marco Carbone,Mogens Nielsen.A formal model for trust in dynamic networks.In Proceedings of the International Conference on Software Engineering and Formal Methods,pages 54-63,Brisbane,Australia,September 2003.
[17]胡伟雄.电子商务安全认证系统[M].武汉:华中师范大学出版社,2005.
[18]袁时金.信任管理关键技术研究[D].上海:复旦大学,2005.
[19]2007中国网上银行调查报告[R].北京:中国金融认证中心,2008,(1).
[20]鲁耀斌,周涛.电子商务信任[M].武汉:华中科技大学出版社,2007.
[21]张冀明.全球电子商务安全法制之研究[D].北京:中国政法大学,2001.
[22]肖祖平.信用卡保证的法律问题分析[J].Smart Cards World,2003.
[23]魏明侠.电子商务中信用图章经济功能分析[J].科技管理研究,2005.
[24]裴剑平.“网上信用图章”避减在线信用风险的作用机理研究[J].商场现代化,2008,(11):33-35.
[25]魏明侠,肖开红.电子商务信用图章经济功能:基于中国背景样本的实验研究[J].商业经济与管理,2006,(5):25-26.
[26]王守中.影响我国B2C消费者初始信任因素的实证分析[D].成都:西南交通大学,2007.
[27]庞川,陈忠民,罗瑞文.消费者网络信任影响因素的实证分析[J].系统工程理论方法应用,2004,(4):55-57.
[28]晏鹏,张宁.电子商务网的信用度与链接分析——以淘宝网为例[J].科技与社会,2008,(6):13-15.
[29]胡伟雄,程南针.电子商务交易中信任度计算模型研究[J].电子商务,2007,(9):61-65.
[30]张巍,刘鲁,朱艳春.基于多影响因素的网上拍卖信任模型[J].清华大学学报(自然科学版),2006,(9):16-19.
[31]车纯,李华.电子商务中信用的博弈分析[J].电子科技,2004,(12):43-45.
[32]张维迎.博弈论与信息经济学[M].上海:上海人民出版社,2004.
[33]潘恒.电子商务环境下基于PKI的信任问题研究[D].成都:信息工程大学,2006.
[34]李沁芳.电子商务用户信任影响因素建模及实证研究[D].上海:同济大学,2007.
[35]车纯,李华.电子商务中信用的博弈分析[J].电子科技,2004,(12):43-45.