臺灣博碩士論文加值系統

近年來，隨著網際網路的快速發展，電子商務也變得越來越盛行。許多的企業和顧客都利用電子商務來進行商業交易。因此架構一個既安全又有效率的電子付款系統是不可或缺的。現在有許多的電子付款系統，諸如：電子現金、電子支票…等系統都已經被實際運用到網路電子環境之中了。電子現金雖具有和傳統現金一樣的便利性、移轉性和匿名性等功能，但在遺失時持有人須自付責任的情況卻造成持有人的困擾。此時可轉而使用電子支票來替代電子現金使用。電子支票需要銀行與持票人共同簽章才能生效，並且具有掛失止付的功能，可以保障使用者的權利。而電子旅行支票系統結合了電子現金和電子支票各自的優點，所以在使用上更兼具了便利性及安全性。
在此篇論文中，我們首先提出了一個自我簽章金鑰的觀念與方法，並以此為基礎設計一套新的電子旅行支票系統。自我簽章金鑰意味著密鑰所能簽署的對象僅限於產生此密鑰時所用的參數。因此密鑰的來源與密鑰所能簽署的對象相互牽制，這個特性使得設計出來的電子旅行支票系統，能以較少的通訊步驟與較低的儲存成本，來達成電子旅行支票不可偽造、不可重複消費、特定使用者、可重新補發及匿名交易等條件的要求。此外，本系統可以模擬現實環境中支票簿的模式，方便使用者利用不同面額的電子旅行支票來組合出所需付出的帳款金額，這樣對於使用者和商家來說，就更容易接受了。

In recent years, with the rapid development of Internet, Electronic Commerce has become more and more popular. Many companies and customers deal with their business transactions through Internet. Therefore, a secure and efficient electronic payment system is very important. Nowadays, many electronic payment systems such as Electronic Cash (EC) and Electronic Check systems have been applied to electronic environment. Although EC has the properties of convenience, transferability and anonymity as traditional cash, the EC holder has to take the responsibility of losing EC. On the other hand, the Electronic Check must include the payer’s endorsement and the payee’s digital signature to become effective, and it can protect the check holder’s right when losing the Electronic Check by the function of reporting loss and stop payment. Electronic Traveler’s Check (ETC), combining the advantages of both EC and Electronic Check systems, is also safe and convenient for users to use.
In this thesis, a concept of Self-Signed Signature key is introduced and used to design a new ETC system. Self-Signed Signature key means that the secret key can only be used to sign the parameters which are used to generate this secret key. For this reason, the origin of the secret key determines the information this secret key can sign and vice versa. With this property, the ETC system meets the basic requirements such as no forgery, no double spending, specific user, reissuing, and anonymity of ETC system with fewer communication steps and lower storage cost. In addition, our system can simulate the mode of checkbook in real life environment. This is convenient for the user to combine the payment amount from different ETCs with different face value. This is more acceptable for the customer and the merchant.

Acknowledgement
摘要
Abstract
Contents
List of Figures
List of Tables
Chapter 1. Introduction
1.1 Research Background and Motivation
1.2 Security requirements of Electronic Traveler’s Check
1.2.1 No Forgery
1.2.2 No Double Spending
1.2.3 Specific User
1.2.4 Reissuing
1.2.5 Anonymity
1.3 Thesis Organization
Chapter 2. Review of related works
2.1 Comments of Hsien’s system
2.2 Comments of Liaw’s system
2.3 Comments of Tsao’s system
Chapter 3. Proposed method
3.1 Withdraw protocol
3.2 Payment protocol
3.3 Deposit protocol
Chapter 4. Security analysis
4.1 No Forgery
4.2 No Double Spending
4.3 Specific User
4.4 Reissuing
4.5 Anonymity
Chapter 5. Discussions
5.1 Advantages of using the “self-signed signature key”
5.2 Data Maintaining
5.3 Combined Face Value of the Checks
5.4 Efficiency Analysis
5.5 Smart card functions
Chapter 6. Conclusions
Reference

[1]Milton M. Anderson, “The Electronic Check Architecture,” Financial
Services Technology Consortium, 1998
[2]D. Chaum, B.D. Boer, E.V. Heyst, S. Mjlsnes, and A. Steenbeek, “Efficient
Offline Electronic Checks (Extended Abstract),” Proceeding of EUROCRYPT, Lecture Notes in Computer Science, Springer-Verlag, pp. 294-301, 1989
[3]J.E. Hsien and C.Y. Chen, “An Electronic Traveler’s Check
System,” Department of Information Engineering, I-Sou University, 2001
[4]S.O. Hwang, “Electronic Exchange Check System on the Internet,” Parallel
and Distributed Systems, International Conference, pp.454-460, 1998
[5]KIM, S. and H. OH, “An Offline Check System with Reusable Refunds,”
IEICE Transactions on Communications, 86(3), pp. 1136-1139, 2003
[6]H.T. Liaw and S.C. Liu, “An Electronic Traveler’s Check System Based on the Hash Function”, Department of Information Management, Shih Hsin University, 2004
[7]Z.Y. Lee, H.C. Yu and P.J. Kuo, “An Analysis and Comparison of Different Types of Electronic Payment Systems,” Management of Engineering and Technology, PICMET ''01, pp. 38-45, 2001
[8]G. Medvinsky and B. C. Neuman., “NetCash: A design for practical electronic currency on the Internet,” Proceeding of 1st the ACM Conference on Computer and Communication Security, 1993.
[9]B.C. Neuman and G. Medvinsky, “Requirements for Network Payment: The
NetChequeTM Persoective,” Proceeding of IEEE Compcon’95, San Francisco,
pp. 32-36, 1995
[10]R. Song and L. Korba, “How to Make E-Cash with Non-Repudiation and
Anonymity,” Proceeding of ITCC, pp. 167-172, 2004
[11] C.J. Tsao and C.Y. Ku, “An Electronic Bearer Check System”, IEICE Transactions on Communications, 85(1), pp. 325-331, 2002
[12] Y. Yacobi, "Efficient electronic money," Advances in Cryptology, Proceeding of
Asiacrypt''94, LNCS 917, pp. 153-163, 1994
[13] Carnegie Mellon University: “Net Bill: 1994 Prototype,” Technical Report,
Carnegie Mellon University Information Networking Institute, Number 1994-11, 1994
[14] NIST FIPS PUB 180-1, Secure Hash Standard, National Institute of Standards
and Technology, US Department of Commerce, Work in Progress, 1994
[15] DigiCash’s Ecash, http://www.ecash.com/
[16] Electronic Coupon, http://www.ecoupons.com/
[17] Electronic Wallet, http://www.maithean.com/products/wallet.html
[18] SET, http://www.cl.cam.ac.uk/Research/Security/resources/SET/intro.html