A sophisticated cryptographic system is a combination of a symmetric cryptographic algorithm (secret key algorithms), is used for solving / cover electronic transactions in large numbers by using a secret key known only by the sender and receiver, and a cryptographic algorithm is not symmetric ( public key algorithm), is used as a secure channel to send a secret key to the ongoing transaction.
Although the symmetric algorithm is faster than public key algorithms (approximately 1000 times), the use of the large companies are not recommended; rely on cryptography to be symmetrically alone will not solve the problem, for this purpose dihasilkanlah a new encryption algorithm that combines both previous algorithm, namely the use of symmetric algorithms to deliver a secret key and asymmetric algorithms to the recipient, the algorithm is called an alloy with a session key algorithm. Recipient of the key code will first unload the received key code by using the asymmetric algorithm using a private key owned by the recipient, then open the encrypted transaction using a session key and symmetric cryptographic algorithms. Public key for distribution via the Internet still need protection. Protection is provided in the form of public key certificates and digitally sign the trusted party who gave the certificate authorities, such as Indosign, Verisign, and Wisekey.
Will not guarantee occurrence of denial of an electronic transaction is appropriate for securing the exchange of EDI between business partners. A digital signal is made by using a private key owned by the sender of a message using asymmetric cryptographic algorithm that has the ability to generate “signature”. Message and the digital signal will be sent to the recipient that ensure the truth of the message using asymmetric cryptographic algorithms are the same as using the public key that has dkirimkan by the sender. Because the calculation to solve the public key takes a long time, the data indicated that the transaction is not alone, but a hash-code one-way hash function (OWHF) is a hash function that is difficult to intervene, in this case is very difficult to obtain the same code on a given input, so the security of these keys is very high. Use of this hash function to determine if a document has undergone changes during the transmission, by comparing the hash code when sending and receiving, and to ensure a digital signal. A digital signal can be made prior to the third party to ensure the authenticity of an electronic transaction, if a digital signal can be determined through a public key, the transaction can only be ascertained by the private key holder as the sole owner .. In this case the digital signal not only provides proof of the origin and integrity of data for EDI, but also assurance is not the denial of an electronic transaction.
Format ANSI-X12 and EDIFACT-EDI has its own security system. ANSI-X12.58 provide security systems that can be added to form a collection or set of transactions and forms related to the transaction form. Security services provided by ANSIASC-X12.58 is the data authentication, data integrity, and / or confidentiality of data, with additional support for the justification of the transaction (if not using Macs, but uses a digital signal). Security protection on the frame are not attached to EDI communication media (Internet or VAN). If EDI is passed through the Internet, system security protocol standards will also be included in the header or the ANSI-ASCX12.58 option of EDIFACT security, such as specifications Secure Multipurpose Internet Mail Extensions (S / MIME) or PGP. PGP and S / MIME use all the security services through the use of complex cryptographic algorithms. The use of protection from outside the system itself, it is advisable to remember the internal EDI system has not adequately protected because of the limitations of the design intent EDI itself.
