Research and Implementation of Secure Authentication in E-Commerce System Based on PKI and USB Key

With the development of computer science and information technology, E-Commerce has become a new model for business and it breaks traditional face-to-face transactions, people can do business through the Internet. It also makes how to determine user's identity an indispensable step in the transaction process. In this paper, we'll introduce a secure identity authentication mechanism based on PKI (Public Key Infrastructure) and USB Key device. It provides three-factor protection: username/password, UKey (USB Key for short) device, UKey PIN (Personal Identification Number) code. This set of mechanism can ensure the confidentiality, certainty and non-repudiation of the transmitted information in the network.