An embedded DSP hardware encryption module for secure e‐commerce transactions

Abstract

Cryptography is one of the key elements in providing security for modern e-commerce systems. It is well known that software-based encryption has built-in security weaknesses due to storing and managing digital certificates/keys in a highrisk environment such as a local hard disk or software. This makes embedded hardware encryption a superior solution. However, most existing embedded hardware encryption modules need additional dedicated software in order to implement a secure e-commerce application, which increases cost as well as adds complexity. In this paper, a new embedded hardware DSP (digital signal processor) encryption module, using the RSA (Rivest, Shamir, and Adleman) algorithm, is developed for secure e-commerce transactions from the client side. The goal is to seamlessly integrate the embedded DSP hardware encryption module, which combines computational power and flexibility in programming, with a widely available web browser that provides the required e-commerce functions. The integrated system can store and process security sensitive data inside the plug-in hardware. The proposed scheme tries to maximize security strength while limiting overheads by utilizing a widely available web browser to perform e-commerce functions such as product searching, etc. A fully functional web e-commerce system has been developed as a proof of concept. Our major contribution is a design of a functional RSA plug-in encryptor which can store and encrypt sensitive information originated from the e-commerce process using standard web browsers. Implementation details addressing challenging issues such as big integer, large message, and communication components have been provided which have never been reported in the public literature. This can be very useful for real-life industry security applications.

Implementation of Schnorr Signcryption Algorithm on DSP

“…One of the main advantages of using DSP hardware using that it can provide more computing power and higher flexibility than that of VLSI chips or smart cards ,also it provides a low cost due to mass production. Another significant advantage is nearly every computer have a PCI interface and communication ports that support DSP boards [5].…”

“…Embedded hardware, such as smart cards, and especially DSP (digital signal processors) is an ideal solution [5]. One of the main advantages of using DSP hardware using that it can provide more computing power and higher flexibility than that of VLSI chips or smart cards ,also it provides a low cost due to mass production.…”

“…The data confidentiality and data integrity are considered as two of the most important functions of modern cryptography. Confidentiality can be achieved by using encryption algorithms or ciphers, whereas integrity can be provided by the use of authentication techniques [5]. Two of the cornerstones of modern cryptography are public key encryption as implemented via public-key cryptosystems and digital signatures as implemented by signature schemes.…”

“…Any software which requires access to the private key must ensure that the key is protected from hackers. Most of the existing technology fail to keep a strong assurance of the protection of private keys in the software environment [5].…”

“…As an extension of mobile technology, users are able to send and receive data across the world using the mobile communication networks [5].…”