(1) data transmission security. The security requirement of data transmission is to ensure that the data transmitted on the public network will not be stolen by the third party. The security protection of data is realized by using data encryption (including secret key encryption and public key encryption). Digital envelope technology is a technology that combines secret key encryption and public key encryption to ensure data security.

(2) data integrity. The requirement of data integrity means that data will not be tampered with during transmission. The data integrity is realized by using secure hash function and digital signature technology. Double digital signature can be used to ensure the integrity of data in multi-party communication.

(3) authentication. Because the two sides of online communication do not meet each other, the real identity of the other side must be confirmed when trading (when exchanging sensitive information); When it comes to payment, it is also necessary to confirm whether the other party's account information is true and valid. Identity authentication is realized by password technology, public key technology or digital signature technology and digital certificate technology.

(4) Non-repudiation of transactions. When transmitting data, all parties in online transactions must bring their own unique information that cannot be copied by others, so as to ensure that there are well-documented disputes in transactions. This is achieved by digital signature technology and digital certificate technology.

The security architecture of e-commerce system includes the following parts:

(1) basic encryption algorithm;

(2) CA system based on basic encryption algorithm and basic security technologies such as digital envelope and digital signature;

(3) Various security application protocols based on basic encryption algorithm, security technology and CA system.

The above parts constitute the security system of e-commerce, and based on this security system, the payment system and various business application systems of e-commerce are established. The implementation of basic encryption algorithm, digital envelope, digital signature and various security protocols should comply with the provisions of relevant standards.

CA authentication system is usually based on various basic encryption algorithms and adopts various basic security technologies to provide certificate authentication function for upper security application protocols.