On the basis of some conceptions relating to ec security such as encrpytion techniques and identity - authentication , we mainly discuss the disadvantages of using ssl in online payment . to solve these disadvantages of ssl , i try to add bilateral - identity - authentication to give the customs more equitable circumstance to do ec businesses . for the reason of confronting the hacking , the management of cryptogram must to be improved 针对这些不足，作者尝试在ssl协议的基础上，添加双向身份认证，保证客户获得和商家平等的交易环境，同时对密钥的管理进行了改进，限制了同一密钥的生存周期，使得密文拥有更高的随机性，以对抗中间人黑客的监听和破解。
Biometric recognition technology develops very fast recently , which recognize people by means of some sole and stable features . the operation of this technology is convenient and rapid . meanwhile , there does n ' t exist problems such as cryptogram got out or card lost which is present in cryptogram identification and card identification respectively 生物识别技术是近年来兴起的身份识别技术，由于它利用了人体的某些具有终生不变性与唯一性的特征，使得这种技术不但具有极高的可靠性，而且操作方便快捷，同时，它不存在诸如密码、卡片式身份鉴别方式中的密码泄露或卡片遗失的隐患，因而具有极高的可靠性与安全性。
