loading...
Protecting Web Usage of Credit Cards Using One-Time Pad Cookie Encryption
San Diego California December 09-December 13
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CSAC.2002.117627818th Annual Computer Security Applica ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Donghua Xu, Georgia Institute of Technology
Chenghuai Lu, Georgia Institute of Technology
Andre Dos Santos, Georgia Institute of Technology
The blooming e-commerce is demanding better methods to protect online users' privacy, especially the credit card information that is widely used in online shopping. Holding all these data in a central database of the web sites would attract hackers' attacks, impose unnecessary liability on the merchant web sites, and raise the customers' privacy concerns. In this paper we introduce and discuss in details the secure distributed storage of sensitive information using HTTP cookie encryption. We are able to employ One-Time Pads to encrypt the cookies, because encryption and decryption are both done by the server, which is an interesting characteristic overlooked by the existing systems. We implemented this protocol and showed that it is simple, fast and easy to program with.
Citation:
Donghua Xu, Chenghuai Lu, Andre Dos Santos, "Protecting Web Usage of Credit Cards Using One-Time Pad Cookie Encryption," acsac, pp.51, 18th Annual Computer Security Applications Conference (ACSAC '02), 2002
Usage of this product signifies your acceptance of the Terms of Use.


Suggestions