loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
18th Annual Computer Security Applications Conference (ACSAC '02)
Protecting Web Usage of Credit Cards Using One-Time Pad Cookie Encryption
San Diego California
December 09-December 13
ISBN: 0-7695-1828-1
Donghua Xu, Georgia Institute of Technology
Chenghuai Lu, Georgia Institute of Technology
Andre Dos Santos, Georgia Institute of Technology
The blooming e-commerce is demanding better methods to protect online users' privacy, especially the credit card information that is widely used in online shopping. Holding all these data in a central database of the web sites would attract hackers' attacks, impose unnecessary liability on the merchant web sites, and raise the customers' privacy concerns. In this paper we introduce and discuss in details the secure distributed storage of sensitive information using HTTP cookie encryption. We are able to employ One-Time Pads to encrypt the cookies, because encryption and decryption are both done by the server, which is an interesting characteristic overlooked by the existing systems. We implemented this protocol and showed that it is simple, fast and easy to program with.
Citation:
Donghua Xu, Chenghuai Lu, Andre Dos Santos, "Protecting Web Usage of Credit Cards Using One-Time Pad Cookie Encryption," acsac, pp.51, 18th Annual Computer Security Applications Conference (ACSAC '02), 2002
Usage of this product signifies your acceptance of the Terms of Use.