Trusted e-Commerce User Agent Based on USB Key

With the development of e-commerce, the client-side security becomes more and more important. In order to assure that the transactions behave as what users expect, be aware of and approved, a trusted e-commerce user agent based on USB Key and Java Card platform is designed and implemented in this paper. E-commerce providers can develop and load user agent applets on this framework to execute authentication and establish secure channel between server and client, etc. At fist, design principles are given based on analysis of known attacks today.