尽管电子商务具有降低开销、拓展市场、不受地域空间限制等优势,但是其安全问题阻碍了它更广泛地应用。电子商务系统必须利用安全技术(如加密、电子签名、电子信封、电子证书和防火墙等)为参与者提供鉴别服务、访问控制服务、机密性服务和不可否认服务等可靠的服务,其安全体系结构包括支持服务层、传输层、交换层和商务层。目前安全方案主要有安全通信协议、支持安全交易的商用服务器、电子支付系统,但仍有一些问题尚待解决。 Although e-commerce has the advantages of reducing overhead, expanding the market and not being limited by geographical space, its security problems have hindered its wider application. E-commerce systems must provide secure services such as authentication services, access control services, confidentiality services and undeniable services to participants using security technologies such as encryption, electronic signatures, electronic envelopes, e-Cert and firewalls. The security architecture Including support service layer, transport layer, exchange layer and business layer. At present, security solutions mainly include secure communication protocols, commercial servers supporting secure transactions, and electronic payment systems. However, some problems remain to be solved.