多商家微支付方案的安全分析与改进  

Security analysis and improvement of micro-payment scheme for multiple merchants

作　　者：练斌[1,2] 陈恭亮[1] 

机构地区：[1]上海交通大学信息安全工程学院,上海200240 [2]浙江大学宁波理工学院信息科学与工程分院,浙江宁波315100

出　　处：《计算机工程与应用》2011年第20期109-112,共4页Computer Engineering and Applications

摘　　要：高效通常是基于PayWord改进的微支付方案的必备属性,而单Hash链对多商家支付是常见的实现方式。通过分析,揭示了相关方案的安全隐患,并提出一个称为ACO的全新的方案。针对所分析的方案提出的Hash碰撞问题,ACO能够以可证明的方式予以消除。剖析了ACO支付协议的设计意图,并通过详细对比实现代价和系统效率,显示了ACO的实用性。High efficiency is always an essential attribute of an improved micro-payment scheme based on PayWord,and single Hash chain paying for multiple merchants is one of common methods.After analyzing security of the correlative schemes, hidden dangers are revealed.Then a new scheme, named ACO, is presented, which can be proved to solve the problem of Hash-collision mentioned in the analyzed schemes.The design intentions of ACO protocol are explained, and by comparing cost and efficiency in detail,the practicability of ACO is demonstrated.

关 键 词：微支付 Hash碰撞 效率 多商家 

分 类 号：TN918[电子电信—通信与信息系统]