利用晶片卡加強網路安全機制

Abstract

網路盛行的今天，許多人的消費行為已經紛紛改變，例如利用網路訂票、網路購物、網路銀行轉帳等行為，因為某些網路駭客利用一些技巧，而造成網路安全問題。例如：帳號被竊取、身分被冒用等等。如何在網路上驗證身份，而且不會被別人冒用，則是網路安全的唯一條件。而利用晶片卡來替代使用者直接輸入使用者姓名及使用者密碼的話，則會大大提升網路安全。但是目前網路利用晶片卡來做一些作業，例如網路銀行轉帳，所有的運作皆必須在Windows作業系統，而且必須使用 Microsoft Internet Explorer 才可以做轉帳功能，而其它的瀏覽器如Mozilla Firefox 則要另外安裝Plugin方能使用網路轉帳，花費許多時間做設定，但是許多人還是無法使用Firefox來做轉帳功能。所以建置一個系統使用晶片卡來作網路驗證身份，並且可以使用各種瀏覽器來讀取晶片卡的資料，使用政府發行的自然人憑證，便可以在網站證明自己身份，進而開始操作，如此便可以加強網路安全。而經測試之後，確實可行，並且不限制單一瀏覽工具。藉由此系統，可以加強網路安全機制，並且不限單一瀏覽器來使用系統。

Along with the popularization of the Internet, many consumers have changed their consuming model from physical stores to cyber shops such as online ticketing, web shopping, web bank transferring, etc... However, hackers would employ techniques like identity theft or account fraud to interfere with Internet security. Hence, to maintain Internet security, the verification of Internet identity would be the basic requirement. The internet would be more secure with the use of inputting username and password directly by user. But when we use smart card to operate, for example, transfer account in banking in the Internet, we should execute all operations on the Windows and Microsoft Internet Explorer. Using another explorer, like Mozilla Firefox, we need to install a Plugin to use it, and it takes much time to setup. Finally, there are a lot of people who still cannot use it. Now, the question is: With the Citizen Digital Certificate issued by the government, can we identify ourselves in the Internet to enhance the security mechanism and function safely? This certificate is tested as workable; furthermore, it is compatible with more than one web browser and platform. The mechanism of Internet security can be enhanced throughout this system.