- 學位論文
可適用於安全交易模型的行動計算之應用研究
A Study on Mobile Computing Applications to Secure Transaction Models
若您是本文的作者，可授權文章由華藝線上圖書館中協助推廣。
摘要
隨著無線網路技術的發展，以及行動裝置在計算與儲存能力的提升，行動計算的相關應用也愈趨於多元化。透過行動裝置，使用者得以不受限於特定地域，使用網際網路所提供的既有服務，同時也進行網路資源的存取。然而，網路的有效性對於行動計算的效能，具有關鍵性的影響力。為了降低行動使用者對於網路有效性的依存度，本研究將行動代理人技術導入行動計算應用中，利用行動代理人的特性—自主性與機動性，協助無線網路環境的行動使用者，進行資料的蒐集與電子交易的執行。 在以代理人為基礎的交易協定中，行動代理人攜帶使用者交付的資料，在網路中的各個主機之間遷移，並且執行任務；完成任務之後，再將執行結果攜回至使用者端。就執行效能而言，這種交易協定提供行動使用者一個省時、省力的交易方式；但就安全性而言，如何確保代理人所攜帶的資料不會遭受非法竄改及竊取，將是一個不容忽視的研究課題。行動網路上的電子交易應用策略，系統的設計除了必須滿足執行上的功能，同時也必須符合安全上的需求。因此，本研究提出兩種安全交易協定，分別針對商品價格蒐集與線上拍賣所設計，這是相當常見的電子交易活動。 由於商品價格蒐集與線上拍賣交易的交易性質各異，為因應其差異性，必須採取不同的數位簽章機制，以達到所需的安全需求。針對商品價格蒐集的交易協定，本研究提出變色龍簽章機制提供商家對商品報價進行簽署。這種簽章方式允許使用者驗證報價及其簽章的合法性，但卻無法向第三方證明該價格是由某一商家所提供，以避免使用者據此要求其他商家提供更低報價的依據，因此可以避免商場上的惡性競爭。針對重複喊價模式的拍賣交易協定，本研究則提出線上/離線簽章機制，提供競標者對不斷更換的競標價進行簽署。在滿足競標不可否認性的同時，即使對計算能力較差的行動裝置而言，也不致於造成太大的計算負擔。 代理人在所提協定中的功能，主要在於協助行動使用者蒐集商品資訊及參與商品拍賣競價；由於量身設計之故，應用系統的安全性更為完整，包括使用者身分的隱私性、交易資料的完整性、交易的不可否認性與公平性，以及資訊傳遞的機密性等，俱可滿足。
並列摘要
Mobile computing applications are becoming increasingly diversified with advances in wireless network technology and the availability of personal mobile devices with enhanced computation and storage capabilities. With mobile devices, users no longer have to be geographically restricted in order to use networked services and access network resources. However, effective network availability plays a critical role in the computing power of mobile devices. To reduce mobile users’ dependence on effective network availability, this study implements mobile agent technology in mobile computing applications, making use of autonomy and mobility features of mobile agents. This allows mobile users to perform data collection and electronic transactions in a wireless network environment. In an agent-based transaction protocol, mobile agents carry information provided by the user and are able to migrate between hosts to execute tasks. After the tasks are completed, the execution results are sent back to the user-end. In terms of execution performance, this transaction protocol provides mobile users with a time-saving and labor-saving trading method. The issue of safety i.e. ensuring the information carried by mobile agents is not modified or eavesdropped on becomes important and cannot be ignored. In designing applied strategies for electronic transactions on a mobile network, safety must be considered along with functionality. This study proposes two secure transaction protocols aimed at two common electronic transaction activities, i.e. price collection and online auction. Price collection and online auction are different kinds of transactions; therefore different digital signature mechanisms must be adopted to meet their security needs. For price collection, this study proposes a chameleon signature scheme for vendors to generate signatures for the pricing of goods. This allows mobile users to verify the validity of the pricing and the legitimacy of the signature. However they are unable to prove to a third party that the price is provided by a certain vendor. Thus, users cannot use the opportunity to request a lower price from other vendors; this prevents market price disruption and vicious competition. For transaction protocols used in online auctions, where repeat biddings occur, this study proposes an on-line/off-line signature scheme which lets bidders generate signatures for the ever-changing bid prices. The bidding process will achieve non-repudiation, and no undue burden will be placed on devices with less computing power. In the proposed protocols, mobile agents help users gather information on goods and participate in online auctions. Since the protocols are tailored to the user’s needs, the security of the application system is comprehensively enhanced. The issues addressed include preserving the privacy of the user’s identity, the integrity of transaction information, non-repudiation and fairness of transactions, and the confidentiality of information exchange.
參考文獻
[2] R.M. Antonio, S.M. Daniel, M.M. Maria and F.G.S. Antonio, “A Survey of Electronic Signature Solutions in Mobile Devices,” Journal of Theoretical and Applied Electronic Commerce Research, Vol. 2, No. 3, pp. 94-109, 2007.
[3] H. Gruber and F. Verboven, “The Diffusion of Mobile Telecommunications Service in the European Union,” European Economic Review, Vol. 45, No. 3, pp. 577-588, 2001.
[4] S. Feldman, “Electronic Marketplaces,” IEEE Internet Computing, Vol. 4, No. 4, pp. 93-95, 2000.
[7] A. Gunasekaran and E. Ngai, “Special Issue on Mobile Commerce: Strategies, Technology and Applications, MCSTA,” Decision Support System, pp. 1-3, 2003.
[10] T. Selker, “Coach: A Teaching Agent that Learns,” Communications of the ACM, Vol. 37, No. 7, pp. 92-99, 1994.