Abstract
This paper describes design of a security system for protection of HTML documents and forms, based on use of certificates, smart cards, and cryptographic encapsulation. Our system provides strong authentication of users based on smart cards and peer-to-peer authentication of users and Web servers based on challenge/response protocol. Strong protection of Web documents and non-repudiation of Web transactions are provided by sing digital certificates and digital envelopes. All security services are applied in both directions: from Web servers to browsers, and also from browsers to Web servers.