臺灣博碩士論文加值系統

行動化電子票券已成為行動商務交易的重要媒介之一，從單一的電子票券服務的交易流程，演變到水平社群及垂直供應鏈整合的多張電子票券多樣性服務的交易流程環境。複合式行動電子票券不僅可提供使用者可以自由選購商品及服務，減少本身票務成本，進而擴展電子票券的商業應用。考慮到行動裝置的隨時隨地的可適性優勢，及行動裝置記憶體與計算能力的限制，因此提出將多張相關聯性的單一的電子票券組合成複合式電子票券，減少使用者本身持票數量，達到交易的便利性及有效的多張票券管理。因為複合式電子票券組合多張單一電子票券的交易流程，交易的商家增加，造成複合式票券兌現的複雜度提高，複合式電子票券對交易流程及安全性控管要求也相對提高，本研究採取四種做法，達到安全性控管 (1)視覺化電子票券(VSS E-Ticket)的方法，讓票券的加解密更簡單，方便商家驗票，讓使用者方便管理票券，減少遺失的風險 (2) 利用工作流程(Workflow)的安全控管概念，讓複合式電子票券的交易流程可獲得交易控管，解決複雜交易流程問題 (3)利用角色存取控制(Role-based Access Control)的方法，建立每一流程的驗票階層權限，增加商家驗票控管，防止商家內部偽交易。(4)本研究利用Web Service平台設計架構，整合眾商家(B2B)的資訊平台，作一個有效且實用的複合式電子票券的平台及機制，達到整個E化的實現。

The portable M-ticket is becoming more important transaction media for the mobile commerce. The transaction process is changed from the 1-to-1 transaction process to the multiple transaction ones. The management cost can be decreased dramatically by the M-ticket business model. That is because it provides integration for the vertical supply chain and horizontal community. With this M-ticket, it can not only offer the users to choice their products and services but also to expand the ticket business. The main benefit of the mobile commerce is that has anytime and anywhere features. However, the limited of the mobile or portable device are computing power and memory. Therefore, we proposed a complex M-ticket system to support these requirements. The workflow concept is introduced to manage the relationship of the multiple tickets for decreasing customers’ and merchants’ effort. It can reach the practicable and well management. With the workflow concept, it can support more complex ticket transactions since it can combine multiple tickets from many merchants into a complex M-ticket. To make the validation process more accurate and safety, we proposed four methods as follows to approach the requirements. (1). We proposed a VSS E-ticket to make the decrypt and encrypt as simpler as possible. The user is easy to manage their tickets and to decrease the risk of ticket lost or stolen. On the other hand, it is very easy verification for merchant. (2) Get the Workflows security concept to control the ticket transaction process and to solved the complex transaction process problem. (3)The Role-based Access Control function is established the process validation level to stronger for the inner security. It provided double security. (4).In this study, we also use the Web Service platform to design the B2B information platform structure. We have proposed an effect and practicable complex ticket platform.

誌謝 I
摘要 II
ABSTRACT III
目錄 IV
圖錄 VI
一、緒論 1
1.1研究背景 1
1.2研究動機 4
1.2研究目的 5
二、文獻探討 7
2.1視覺化電子票券設計 7
2.2工作流程 8
2.1.1工作流程 9
2.1.2工作流程管理系統 10
2.1.3工作流程安全性 12
2.3角色存取控制 13
2.4 Web Service之技術探討 18
2.4.1 Web Service技術 18
2.4.2 Web Service架構及流程 20
三、複合式電子票券之交易流程控管機制 23
3.1複合式電子票券交易流程架構 23
3.2複合式電子票券水平整合 26
3.2.1商家登入註冊服務機制 26
3.2複合式電子票券垂直控管 28
3.3.1複合式電子票券-購票機制 28
3.3.2複合式電子票券-開票機制 31
3.3.3複合式電子票券-發票機制 35
3.3.4複合式電子票券-驗票機制 39
3.3.5複合式電子票券-例外處理機制 41
四、複合式電子票券系統設計與實現 43
4.1複合式電子票券系統流程 43
4.1.1商家水平整合 43
4.1.2票券垂直控管 46
4.2複合式電子票券系統實現 52
4.2.1商家資訊整合系統實現 52
4.2.1開票流程系統實現 58
4.2.3驗票流程系統實現 61
4.2.3交易例外處理系統實現 63
4.3複合式電子票券安全分析 64
4.3.1視覺化複合式電子票券安全分析 64
4.3.2票券流程安全機制分析 65
五、結論 68
參考文獻 70

[1] 李俊傑、許成之、洪宗貝，"整合角色和工作為基礎的動態存取控制架構研究"，台灣電子商務學會EC2002資訊系統與技術，2002年，頁1-12。
[2] 陳俊德、陳澤世，"一種適用在行動裝置上的改良式視覺密碼"，第四屆2002年「網際空間：資訊、法律與社會」學術研究暨實務研討會。桃園:中央警察大學主辦，2002年，頁506-511。
[3] 陳俊德、劉得仲、陳澤世，"視覺化時間戳旅遊行動電子票券"，第十四屆國際資訊管理學術研會。嘉義：國立中正大學資訊管理學院主辦，2003年，頁663-670。
[4] 陳俊德、黃進參、葉建鴻，"以工作流程控管之視覺化複合式電子票券"，EC 2004 電子商務與數位生活研討會，2004年，頁202。
[5] 陳俊德、黃進參，"以工作流程安全控管及驗票權限控管機制之視覺化複合式電子票券" ，第五屆2003年「網際空間：科技、犯罪與法律社會」學術研究暨實務研討會。桃園:中央警察大學主辦，2003年，頁180~191。
[6] 張思源，"Web 服務安全標準及實務應用"，財團法人資訊工業策進會，駱賢齊、陳麗安(編)，2003年，頁1~26。
[7] 戚玉樑，"Web Services探索與應用"，全華科技圖書公司，2003年，頁5~26，頁38~49。
[8] Dimitrios Buhalis、Maria Christina Licata，"The Future of Etourism Iintermediaries"，Tourism Management 23，2002，pp207-220。
[9] Edward C.Cheng ，"An Object-oriented organizational model to support dynamic role-based access control in electronic commerce"，Decision Support Systems 29，2000，pp357-369。
[10] Ehud Gudes、Aharon Tubman，"AutoWF-a secure Web workflow system using autonomous object "，Data & Knowledge Engineering 43(2002)，2002，pp1-27。
[11] Feng bao 、Lakshminarayanaa Anantharaman、Robet Deng，" Design of Portable Mobile Device Based E-payment System and E-Ticketing System with Digital Signature" ，the InfoComm Security Department，2001，pp1~6。
[12] F.Malamateniou、G.Vassilacopoulous，"Develop a virtual patient record using XML and web-based workflow technologies"，International Journal of Medical Informatics(2003) 70，2003，pp131-139。
[13] Gail-Joon Ahn 、Ravi Sandhu 、Myong Kang、Joon Park ，"Inject RBAC to Secure a Web-based Workfolw System"，In 5th ACM Workshop on Role-Based Access Control，2000，pp1~10。
[14] Gregory Mentzas、Christos Halaris、Stylianos kavadias，" Modelling business Process with workflow systems: An evaluation of alternative approaches"，International Journal of Information Management 21，2001，pp123-135。
[15] Gunter Preuner、Michael Schrefl，"Integration of Web Service into Workflows through a Multi-Level Schema Architecture"，Proceedings of the 4th IEEE International Workshop on Advanced Issues of E-Commerce and Web-Based Information Systems (WECWIS 2002)，2002。
[16] Hai Zhuge，"Component-based workflow systems develop"， Decision Support Systems 35，2003，pp517-536。
[17] Havard D Jorgensen，" Interaction as a framework for Flexible Workflow Modelling", ACM 2001 International Conference on Supporting Group Work，2001。
[18] Hua Wang, Yanchun Zhang, Jinli Cao, " Archieving Secure and Flexible M-services Through Tickets", IEEE Transaction on system, MAN,AND CYBERNETICS, VOL.33 NO.6,NOVEMBER 2003。
[19] Jie Meng、Raja Krithivasan，Stanley Y.W.Su，Sumi Helal，" Flexible Inter-enterprise Workflow Management using E-Service"，Computer and Information Science and Engineering 2002，2002。
[20] Kael R.ph Leung、Lucas C.K Hui，" Multiple Signature Handling in Workflow System"，Processing of the 33rd Hawaii Interational Conference on the System-2000，2003，pp1~7。
[21] Irina Noninska，"Access Control and Management in B2C model of Electronic Commerce"，International Comference of Computer system and technologies—Compsystech 2003，2003，pp1~4。
[22] Myong H . Kang、Joon S .Park、Judith N.Froscher ，"Access Control Mechanisms for inter-organization Workflow"，Proceedings of the 6th ACM Symposium on Access Control Model and Technologies (SACMAT) ，2001，pp1-9。
[23] Reinhart A.Botha、Jan H.P Eloff，"Access Control in Document-centric Workflow Systems An agent-Based Approach "，computer & security Vol.20 NO.6，2001，pp525-532。
[24] Shirly Siu、Zhen Sheng Guo、Simon Fong、Sofia Zhuang ，Extending E-ticket Service With Mobile Transactions"，FIRST INTERNATIONAL CONFERENCE ON INFORMATION TECHNOLOGY & APPLICATIONS (ICITA)，2002，pp1~5。
[25] Vijay Atluri、Rutgers University，"Security for Workflow Systems"，Information Security Technical Report，Vol 6，No.2，2001，pp59-68。
[26] Workflow Management Coalition，"Workflow Security Consideration-while paper"，The Workflow Management Coalition Specification，1998，pp3-15。
[27] Ravi Sandhu，"Future Directions in Role-Based Access Control Models"，Proceedings of the First ACM Workshop on Role-Based Access Control，1995。
[28] Robert Tolksdorf，"Workspaces:A Web-based Workflow Management"，IEEE Internet Computing，2002。
[29] Ying Huang、Jen-Yao Chung，"A Web Services-based framework for business integration solutions"，Electronic Commerce Rearch and Application 2，2003，pp15-26。