A security improved OpenSST prototype combining with smart card

Open system secure transaction (OpenSST) protocol aims to be a secure and transaction-oriented protocol for the unsecured network. OpenSST is an open source project. At present, a simple prototype based on HTTP protocol has been implemented. In this paper, we give firstly an overview of OpenSTT and then we describe the basic architecture of this prototype, as well as make an analysis on its security. Then we introduce a security-enhanced model based on this prototype, which utilizes the tamper-resistant nature of smart card. We discuss several possible ways of integrating smart cards into the OpenSST.