? With the needs of modern life, people's e-commerce through the Internet has become the focus of attention of people from all walks of life. Due to the openness of the Internet and other factors, e-commerce information security has become a very important part of many technologies in e-commerce. Therefore, e-commerce information security needs technology to guarantee, and e-commerce information security mainly includes confidentiality, integrity, authentication, non-repudiation and effectiveness.

? First, keep it secret. As a means of trade, e-commerce information directly represents the commercial secrets of individuals, enterprises or countries. The traditional paper trade is kept secret by mailing sealed letters or sending commercial messages through reliable communication channels. E-commerce is based on a relatively open network environment (especially the Internet is a more open network), and keeping business secrets is an important guarantee for the comprehensive popularization and application of e-commerce. Therefore, it is necessary to prevent illegal access to information and illegal theft of information during transmission. Privacy is usually achieved by encrypting the transmitted information through encryption technology.

? Second, honesty. E-commerce simplifies the trade process, reduces human intervention, and at the same time brings the problem of maintaining the integrity and unity of business information of all parties in trade. Due to unexpected errors or fraud in data entry, the information of the parties may be different. In addition, information loss, information repetition or different information transmission sequence in the process of data transmission will also lead to information differences between the parties to the transaction. The integrity of the transaction information will affect the transaction and business strategy of the transaction party, and maintaining the integrity of the transaction information is the basis of e-commerce application. Therefore, it is necessary to prevent the random generation, modification and deletion of information, prevent the loss and repetition of information in the process of data transmission, and ensure the unity of information transmission order. Integrity can usually be obtained by extracting the abstract of the information message.

? Third, certification. Due to the particularity of online e-commerce transaction system, the transactions of enterprises or individuals are usually carried out in a virtual network environment, so the identification of individuals or business entities has become a very important part of e-commerce. Identify the identity of a person or entity to ensure the authenticity of the identity, that is, the two parties to the transaction can confirm each other's identity without meeting. This means that when someone or an entity claims to have a specific identity, the authentication service will provide a way to verify the correctness of its claim, which is usually achieved through a certificate authority CA and a certificate.

? Fourth, there is no denying. E-commerce may be directly related to the commercial transactions between two parties. How to determine the party to be traded is the expected party of the exchange is the key to ensure the smooth progress of e-commerce. In traditional paper transactions, both parties identify the transaction object by signing or stamping written documents such as transaction contracts, contracts or trade documents by hand, so as to determine the reliability of contracts, contracts and documents and prevent the occurrence of repudiation. This is what people often say "in black and white". In the paperless e-commerce mode, traders cannot be identified by handwritten signatures and seals. Therefore, in the process of transaction information transmission, it is necessary to provide reliable identification for individuals, enterprises or countries involved in the transaction. Non-repudiation can be obtained by digitally signing the sent message.

? V. effectiveness. Electronic commerce replaces paper in electronic form, so how to ensure the validity of this electronic form of trade information is the premise of developing electronic commerce. As a form of trade, the effectiveness of e-commerce information will directly affect the economic interests and reputation of individuals, enterprises or countries. Therefore, it is necessary to control and prevent potential threats caused by network failures, operational errors, application errors, hardware failures, system software errors and computer viruses, so as to ensure that transaction data is valid at a specific time and place.

? At present, with the rapid development of computer and Internet technology, the processing and transmission of information has broken through the limitations of time, space and region. The rapid development of Internet not only accelerates the economic globalization, but also opens up a new business model-e-commerce, which has a revolutionary impact on the traditional business transaction methods and rules. Therefore, with the continuous development of information technology and the increasingly serious threat of network security, people's concerns about the security of electronic transactions have also seriously hindered the development of e-commerce. Therefore, the information security of e-commerce is bound to become the focus of attention.