Security analysis of E-bank online-payment based on UCON
Wang Changd · Computer Engineering and Applications Journal · 2014
By the analysis about current e-bank online-payment features and its security mechanisms, the problems of identity imitation, privileges disclosure and transaction unfriendly are still be found in the payment process. To solve these problems, access control model is proposed based on usage control(UCON), dynamic authorization rules and flexible payment strategies are also developed and described in detail. The safety analysis by using of NuSMV model checking tool proved that the given strategies achieve the access control requirements of e-banking in security and convenience,and fill the lack of existing system in authentication mechanism and usage control of payment behavior.