以社群網為基礎之交易信任第三方研究

Securing P2P Transactions with a Trusted Third Party in Social Networks

蔡宜芳(Yi-Fang Cai)

指導教授 ： 薛夙珍

朝陽科技大學/資訊學院/資訊管理系/碩士(2014年)

摘要

隨著時代進步，網際網路的普及帶動社群的發展，社群成員使用社群比率的也相當頻繁，藉由結合社群功能以及電子商務，來發展出互動式的商業模式，可稱為社群商務（Social commerce）。用戶往往透過社群來分享彼此的生活資訊或是購買商品的經驗，由此可知，用戶具有喜歡在社群平台上推薦商品和愛分享的的特性，也正因為現在社群人口普及，人口數量較多，所以，本論文以社群來做為背景。
在社群中，有高度意願在社群裡頭完成買賣交易的社群成員，會擔心在進行交易的過程中產生安全問題，發生買方付款拿不到商品或是賣方送出商品卻拿不到貨款的問題。所以，需要具安全性且信任的支付方式是有其必要性。也因為社群中信任好友之間的關係，可藉此有效提升彼此的信任程度，進而提高找朋友的需求。社群中，不同的用戶有不同的興趣和資料，透過資料探勘其中的分類（Classification）概念，將資料做分類，再對分類做條件的設定，經交集跟聯集的執行過程，以動態的方式在社群朋友中找到需要的可信任第三方人選。
本研究設計一個以社群網為基礎之交易信任第三方支付協議。為了協助雙方在社群裡頭完成P2P的買賣行為，以一個動態的社群成員(第三方)來擔任見證人，協助買賣雙方確保交易過程之間的可信任性，提高社群成員在社群中進行交易的過程是可被信任的。如果雙方交易有問題時，可以從第三方那邊找到交易時的過程記錄。為了讓社群成員可以透過社群平台做直接的交易行為，也避免直接的金錢往來，以結合憑證的付款機制來增加買賣雙方的交易付款之安全性和不可否認性。
最後，為了避免三方（買方、賣方、第三方）訊息在傳輸的過程中可能會遭到不法的用戶做偽造、竄改等安全性問題，本方法將結合密碼技術，來保障通訊時的隱私與安全。

關鍵字：社群商務、資訊安全、分類、適地性服務

關鍵字

資訊安全 ； 分類 ； 適地性服務 ； 社群商務

並列摘要

As time is in progress, the popularization of the Internet brings the development of the social networking websites. The social networking websites using rate for the members is quit often. By combining the social networking websites’ function and electronic commerce, the interaction business model is developed. We could call it “Social commerce.” The users use the social networking websites to share the life information or the experience of purchasing merchandise to each other. It could be seen that the users have the character of recommending merchandise and sharing on the social networking websites. Also, for the popularization of the social networking websites population, we use the social networking websites as the study background.
In the social networking websites, the members who have high willingness to buy and sell in the social networking websites will have safety concern in the trade. For example, the buyer who paid and do not get the merchandise or the seller who sent the merchandise and do not get the money. So, the safe and trusty payment is necessary. Also, for trust the relationship of good friends, the trusty level for each other would be raised effectively, and then increase the requirement of looking for friends. In the social networking websites, different users will have different interest and information. Through the concept“clssification”of data mining, we classify the information, and then do the conditional setting to the classification. Via the execution process of the intersection and union, we could find out the trusty third party that we need in the friends of the social networking websites with the dynamic way.
This study designs a trusty trade third-party payment deal based on the social networking websites. To assist both sides achieving peer-to-peer buying and selling in the social networking websites, there is a dynamic member (third party) as a witness. It ensures the trustworthiness in the trade process between seller and buyer. Also, it makes sure the confidential of the trading process for the members in the social networking websites. If there is a problem in the trading, we could have the trading process record from the third party. In order to have a direct trading through the social networking websites for the members and also not to have direct money contact, we combine the certificated payment system to increase the security and the non-repudiation of the trading payment between seller and buyer.
Finally, to avoid the messages of the seller, buyer and the third party in the transmission process would be forged and interpolated by the illegal users; this method will combine the technology of data encryption to protect the privacy and safety in the communication.

Keywords: Social Commerce, Information Security, Classification, Location Based service

並列關鍵字

Location Based service ； Classification ； Social Commerce ； Information Security

參考文獻

[2] 張家翰（2010），行動社群分享之研究，碩士論文，朝陽科技大學資訊管理研究所，台中。

[6] A. Armstrong and J. Hagel （1996）, “The Real Value of On-Line Communities,” Harvard Business Review, Vol. 74, No. 3, pp. 134-141.

[8] C. M. Chiu, H.-Y. Huang, C. H. Yen（2010）, “Antecedents of trust in online auctions,” Electronic Commerce Research and Applications, Vol. 9, No. 4, pp. 148-159.

[9] J. Gao, K. Edunuru, J. Cai, and S. Shim（2005）, “P2P-Paid: A peer-to-peer Wireless Payment System,” Proceedings of the 2th IEEE International Workshop on Mobile Commerce and Services, pp. 103-111.

[11] M. Koch, G. Groh, and D. Hillebrand （2008）, “Mobile P2PSIP Peer-to-Peer SIP Communication in Mobile Communities,” Proceedings of the 5th International IEEE Consumer Communications and Networking, pp. 1159-1165.