移动证券业务中的安全机制研究  

The Research of a Security Solution in Mobile Stock Services

作　　者：胥光辉[1] 徐永森[1] 

机构地区：[1]南京大学软件新技术国家重点实验室

出　　处：《电信科学》2001年第12期35-38,共4页Telecommunications Science

摘　　要：本文首先介绍了移动证券业务中对于敏感交易信息的加密和解密过程 ,提出了具体的安全性要求。然后 ,给出了一种可以用于移动证券业务的安全机制 ,该安全机制采用了两密钥的三重DES算法进行加解密 ;密钥分为传输密钥和交易密钥两种 ,每种密钥经过三级分散处理 ;同时引入了动态密钥下载、密钥版本更新等新功能 ,很好地满足了移动证券业务对于安全性的要求。接着 ,给出了该安全机制的一个具体实现过程 。In this paper, firstly the encryption and decryption procedures within the mobile stock services are introduced, and several security requirements are given. Then a security solution used in these mobile stock services is proposed. In this solution, 3DES algorithm is used as the encryption and decryption algorithm. Two kinds of keys are introduced, one is called as a transfer key, the other is called as an exchange key. Each key is generated through three_level processing. Additionally, there are some other new characters such as key downloading and key version renewal. All of these meet the security requirements in mobile stock services very well. Next, an actual implementation of this solution is given. And lastly, some security analysis and a conclusion are given.

关 键 词：移动证券 安全机制 移动通信 证券业务 因特网 

分 类 号：F830.91[经济管理—金融学] TP393.08[自动化与计算机技术—计算机应用技术]