Scribd Logo
Upload

Welcome to Scribd!

  • 28 views

    SSL TSL

    Uploaded by

    agit_chaerudin
    The document discusses SSL/TLS (Secure Sockets Layer/Transport Layer Security) and SET (Secure Electronic Transactions). It provides information on: - SSL/TLS, how it was originated by Netscape and standardized by IETF as TLS, and the similarities and differences between versions. - The SSL/TLS record protocol, handshake protocol, and transport layer security specifications. - SET, how it is an open encryption specification to protect credit card transactions on the Internet and involves companies like MasterCard, Visa, and IBM. It provides security services like confidentiality, integrity, and authentication for transactions.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd

    SSL TSL

    Uploaded by

    agit_chaerudin
    28 views20 pages
    The document discusses SSL/TLS (Secure Sockets Layer/Transport Layer Security) and SET (Secure Electronic Transactions). It provides information on: - SSL/TLS, how it was originated by Netscape and standardized by IETF as TLS, and the similarities and differences between versions. - The SSL/TLS record protocol, handshake protocol, and transport layer security specifications. - SET, how it is an open encryption specification to protect credit card transactions on the Internet and involves companies like MasterCard, Visa, and IBM. It provides security services like confidentiality, integrity, and authentication for transactions.

    Original Title

    h 050318973

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PPT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document discusses SSL/TLS (Secure Sockets Layer/Transport Layer Security) and SET (Secure Electronic Transactions). It provides information on: - SSL/TLS, how it was originated by Netscape and standardized by IETF as TLS, and the similarities and differences between versions. - The SSL/TLS record protocol, handshake protocol, and transport layer security specifications. - SET, how it is an open encryption specification to protect credit card transactions on the Internet and involves companies like MasterCard, Visa, and IBM. It provides security services like confidentiality, integrity, and authentication for transactions.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd
    Download as ppt, pdf, or txt
    28 views20 pages

    SSL TSL

    Uploaded by

    agit_chaerudin
    The document discusses SSL/TLS (Secure Sockets Layer/Transport Layer Security) and SET (Secure Electronic Transactions). It provides information on: - SSL/TLS, how it was originated by Netscape and standardized by IETF as TLS, and the similarities and differences between versions. - The SSL/TLS record protocol, handshake protocol, and transport layer security specifications. - SET, how it is an open encryption specification to protect credit card transactions on the Internet and involves companies like MasterCard, Visa, and IBM. It provides security services like confidentiality, integrity, and authentication for transactions.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd
    Download as ppt, pdf, or txt
    of 20

    SSL-TSL

    NS-H0503-02/1104

    Web Security Considerations

    The WEB is very visible. Complex software hide many security flaws. Web servers are easy to configure and manage. Users are not aware of the risks.

    NS-H0503-02/1104

    Security facilities in the TCP/IP

    NS-H0503-02/1104

    SSL and TLS

    SSL was originated by Netscape TLS working group was formed within IETF First version of TLS can be viewed as an SSLv3.1

    NS-H0503-02/1104

    SSL Architecture

    NS-H0503-02/1104

    SSL Record Protocol Operation

    NS-H0503-02/1104

    SSL Record Format

    NS-H0503-02/1104

    SSL Record Protocol Payload

    NS-H0503-02/1104

    Handshake Protocol
    The most complex part of SSL. Allows the server and client to authenticate each other. Negotiate encryption, MAC algorithm and cryptographic keys. Used before any application data are transmitted.

    NS-H0503-02/1104

    Handshake Protocol Action

    NS-H0503-02/1104

    10

    Transport Layer Security


    The same record format as the SSL record format. Defined in RFC 2246. Similar to SSLv3. Differences in the: version number message authentication code pseudorandom function alert codes cipher suites client certificate types certificate_verify and finished message cryptographic computations padding
    NS-H0503-02/1104 11

    Secure Electronic Transactions


    An open encryption and security specification. Protect credit card transaction on the Internet. Companies involved: MasterCard, Visa, IBM, Microsoft, Netscape, RSA, Terisa and Verisign Not a payment system. Set of security protocols and formats.

    NS-H0503-02/1104

    12

    SET Services
    Provides a secure communication channel in a transaction. Provides tust by the use of X.509v3 digital certificates. Ensures privacy

    NS-H0503-02/1104

    13

    SET Overview

    Key Features of SET: Confidentiality of information Integrity of data Cardholder account authentication Merchant authentication

    NS-H0503-02/1104

    14

    SET Participants

    NS-H0503-02/1104

    15

    Sequence of events for transactions


    1. 2. 3. 4. 5. 6. 7. 8. 9. 10. The customer opens an account. The customer receives a certificate. Merchants have their own certificates. The customer places an order. The merchant is verified. The order and payment are sent. The merchant request payment authorization. The merchant confirm the order. The merchant provides the goods or service. The merchant requests payments.

    NS-H0503-02/1104

    16

    Dual Signature
    DS E KRc [ H ( H ( PI ) || H(OI))]

    NS-H0503-02/1104

    17

    Payment processing

    Cardholder sends Purchase Request


    NS-H0503-02/1104 18

    Payment processing

    Merchant Verifies Customer Purchase Request


    NS-H0503-02/1104 19

    Payment processing

    Payment Authorization: Authorization Request Authorization Response Payment Capture: Capture Request Capture Response

    NS-H0503-02/1104

    20

    You might also like