基于J2ME的移动支付安全方案研究  

Research on Security Protocol for Mobile Payment Based on J2ME

作　　者：许峰[1,2] 崔隽[1] 黄皓[1] 

机构地区：[1]南京大学计算机科学与技术系,南京210093 [2]河海大学计算机及信息工程学院,南京210098

出　　处：《计算机科学》2008年第10期94-97,121,共5页Computer Science

基　　金：国家自然科学基金(60473091);国家“863”高技术研究发展计划项目基金(2007AA01Z409)资助

摘　　要：安全方案对移动支付系统的安全性起着决定性作用,其中无线环境中的安全和对用户即手持设备的认证,更是系统成败的关键。借鉴国外已有的移动支付系统,结合宏支付的特点及安全要求,并考虑到J2ME平台本身提供的安全性,提出了一个基于J2ME的移动支付安全方案,重点解决无线环境下的用户的认证问题,来保证针对宏支付的移动支付系统的安全。分析测试验证了该安全方案的安全性及可行性。The security protocols which are crucial to the mobile payment system （MPS）, especially to the authentication of the user （mobile hand-held devices） in the wireless environment, determine the security properties or even the fate of whole system. We investigate the existent mobile payment systems, study the characteristic and security requirement of the macro-payment, and consider the inherent security of the J2ME platform,and hereby propose a security protocol for mobile payment based on J2ME, emphasizing the authentication to the user. Then we analyze and test the security and feasibility of the security protocols and the conclusion we have drawn is that security protocol achieves its security goals,has the ability to resist usual attacks and enjoys high efficiency.

关 键 词：移动支付 安全方案 密码体制 J2ME平台 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TN929.53[自动化与计算机技术—计算机科学与技术]