A smart card based framework for securing e-business transactions in distributed systems

In the recent years, we have seen the emergence and the growing of the e-business via the internet. Many organizations are extending their business transactions by using the Web. This will allow them to reach more customers in a cost effective way and to make their business transactions fast and efficient. Meanwhile, sending sensitive information via the Web must satisfy integrity, privacy, authentication and non-repudiation. Organizations are implementing various infrastructures that allow them to have secure e-business transactions. Many protocols and frameworks have been proposed and implemented to provide secure and trusted exchange between parties involved in the transaction. These frameworks store credentials such as keys in local computers which make them subject to piracy or misuse. In this paper, we propose a framework based on smart card that allows partners to realize secure transactions. The proposed solution use smart cards to store keys and perform cryptographic algorithms.