基于直接匿名认证的Card-not-Present支付系统  

A Card-not-Present Payment System Using Direct Anonymous Attestation Mechanism

作　　者：刘明辉[1] 辛阳[1] 杨义先[1] 李忠献[1] 

机构地区：[1]北京邮电大学网络与交换技术国家重点实验室,北京100876

出　　处：《北京邮电大学学报》2008年第4期90-93,共4页Journal of Beijing University of Posts and Telecommunications

基　　金：国家“973计划”项目(2007CB310704);国家“863计划”项目(2006AA01Z456)

摘　　要：以使用Europay,MasterCard and Visa(EMV)卡的card-not-present(CNP)支付系统为研究对象,分析现有网上支付协议的优缺点;引入装载可信计算平台模块(TPM)的计算机模拟EMV卡和读写设备,设计了一个基于TPM直接匿名认证技术的网上支付系统,解决了CNP支付面临的需要外接读写设备、缺乏可信通信信道等问题.The Internet-based card-not-present （CNP） payment system using Europay, MasterCard and Visa（EMV）cards are taken as investigation objects. The advantages and disadvantages of several existed payment protocols based on internet are analyzed. Computers with trusted platform modules are introduced to emulate EMV smart cards and the interface devices for use in Internet-based CNP transactions, then, a payment system project using direct anonymous attestation technology is put forward. This project will resolve the obstacles that CNP transaction will be up against.

关 键 词：card-not-present支付 支付安全 可信计算模块 直接匿名认证 

分 类 号：TN929.53[电子电信—通信与信息系统]