SECURITY SYSTEM FOR P3P AND METHOD THEREOF

摘要

A security system for P3P is provided to transmit and receive data according to P3P policy by transmitting encoded personal information, interactive authentication between users, and a function of non-repudiation about reception. A security system for P3P, whose security problem between a server and a user is solved, comprises an application server(20) providing a service through network to an authenticated client, a client(10) taking advantage of a service by providing user privacy information to an authenticated application server and the authentication server(30) issuing a certificate to the application server or the client by using public key infrastructure. The application server or the client converts a message into hash-value by using a one-way hash function.