| 摘要: | 隨著寬頻網路逐漸普及、全球數位內容產值持續攀升等因素下，未來線上交易市場規模可望大幅成長，要如何有效確保涉入交易行為各成員之權益不受損害，線上交易機制的完善與否具有決定性之影響。此外處於現今知識密集時代下，多位彼此擁有相關知識的個體，可集體創作數位內容產品進行販售，該產品交易後之收入應能即時正確地分配予各創作者及賣方，以期對創作者產生較高的激勵效果。基於上述，本研究欲設計兼具下列特性之線上交易機制：(1)確保交易公平性及交易隱私性、(2)防堵詐欺行為發生及(3)支援多受款者即時付款。 本研究以隨機式RSA部分盲簽章、可轉換簽章DR Signature及多重簽章概念等加解密技術為基礎，設計四階段之線上付款機制：(1)初始階段、(2)提取電子現金階段、(3)交易及分配款項階段及(4)TTP涉入階段。於「初始階段」中，系統成員須向TTP進行註冊、銀行須產生RSA公私鑰、數位內容產品所屬各受款者須製作款項分配協議；顧客透過「提取電子現金階段」及「交易及分配款項階段」完成交易行為；系統成員可藉由「TTP涉入階段」，請求TTP進行仲裁，以維護自身權益。藉由加解密技術配合交易流程設計，本付款機制能確保交易公平性及隱私性、對不法詐欺行為進行反制，以及可支援多受款者付款。 As the broadband internet is popularized and the output value of digital content continues increasing, the market of online transaction is expected to grow dramatically in the future. How to assure rights and interests of participants don’t be damaged when they make online transaction? The dependable online payment scheme is the critical factor. Meanwhile, under the knowledge-intensive era, a digital content can be created by several individuals who have interrelated knowledge. The selling revenue of the digital content should be correctly assigned to each payee (authors and merchants) in real time, so that creators may have stronger motivation to create more digital content. Base on the above-mentioned, the purpose of this paper is to design an online payment scheme which has three features, include (1) assuring the payment security and transaction privacy, (2) preventing frauds from being made, and (3) supporting multiple payees payment. In this paper, we combine the concepts of randomized RSA partially blind signature, DR-signature (a kind of convertible signature), and multi-signature, to propose a four phase online payment scheme, include (1) initializing phase, (2) withdrawing phase, (3) purchasing phase, and (4) requesting phase. In the initializing phase, all members (customers, merchants, and authors) register to the third trust party (TTP), bank needs to generate RSA-based private/public keys, and all payees belong to one digital content should make a multi-signature of a proportion of apportionment (PROPp_id). Customers, merchants, bank, and TTP complete an online transaction in withdrawing phase and purchasing phase. If someone finds his rights is damaged, he can request TTP to arbitrate to safeguard himself in the requesting phase. Base on cryptographic skill and design of transaction process, our proposed payment scheme can assure payment security and transaction privacy, prevent frauds, and support multilateral payment. |
