抗授权劫持攻击的安全电子交易方案

抗授权劫持攻击的安全电子交易方案 Anti-Authority Hijack Secure Electronic Transaction 毛剑 MAO Jian 1 first-author 韦韬 WEI Tao 1 陈昱 CHEN Yu 1 邹维 ZOU Wei 1 北京大学计算机科学技术研究所 北京大学计算机科学技术研究所 Institute of Computer Science and Technology,Peking University Institute of Computer Science and Technology,Peking University 针对现有的网络交易安全方案中存在授权与认证分离及与交易相关的敏感操作在复杂、未审计环境下完成等问题,本文提出了一个基于可信计算模块的安全电子交易方案.该方案采用可信设备（如,安全智能手机、安全PDA等）作为安全交易认证与交易授权终端;将交易认证与交易授权绑定,确保安全敏感操作在独立可信强审计计算环境中完成.即使敌手拥有对客户端计算机的完全控制,本方法亦可有效抵抗中间人攻击、浏览器劫持、交易授权劫持、以及keylogger等间谍软件威胁. We propose a trusted computing module based secure electronic transaction architecture,which uses trusted equipment as the identity authentication and transaction authorization terminal.The new framework binds authentication and authorization in e-transaction operations and guarantees the secure sensitive operation is executed properly in an independent,trusted,auditable environment.Our approach thwarts Man-in-the-Middle attacks,protects a user’s account even in the presence of most spywares like keyloggers and fends off the authorization hijack attacks efficiently. 身份窃取 Web欺骗 授权劫持 identity theft Web spoofing authorization hijack TP393.08 国家高技术研究发展计划（863）项目（2006AA01Z402,2006AA01Z422）;国家自然科学基金资助项目（60703044,60672102） 2008-05-01 2021-04-01 5