A Trusted Mobile Payment Environment Based on Trusted Computing and Virtualization Technology  

作　　者：WANG Juan LIN Wutao LI Haoyu DU Bianxia MENG Ke WANG Jiang 

机构地区：[1]School of Computer, Wuhan University [2]Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education

出　　处：《Wuhan University Journal of Natural Sciences》2014年第5期379-384,共6页武汉大学学报（自然科学英文版）

基　　金：Supported by the National Basic Research Program of China(973 Program)(2014CB340600);the National Natural Science Foundation of China(61173138,61103628,61103220);the Intel Collaborative Research Project

摘　　要：In this paper, we propose a trusted mobile payment environment （TMPE） based on trusted computing and virtualization technology. There are a normal operating system （OS） and a trusted OS （TOS） in TMPE. We store the image of TOS in a memory card to hinder tampering. The integrity of TOS is protected by means of a trusted platform module （TPM）. TOS can only be updated through a trusted third party. In addition, virtualization technology is applied to isolate TOS from normal OS. Users complete ordinary affairs in normal OS and security-sensitive affairs in TOS. TMPE can offer users a highly protected environment for mobile payment. Moreover, TMPE has good compatibility in different hardware architectures of mobile platforms. As the evaluation shows, TMPE satisfies the requirement of mobile payment well.In this paper, we propose a trusted mobile payment environment （TMPE） based on trusted computing and virtualization technology. There are a normal operating system （OS） and a trusted OS （TOS） in TMPE. We store the image of TOS in a memory card to hinder tampering. The integrity of TOS is protected by means of a trusted platform module （TPM）. TOS can only be updated through a trusted third party. In addition, virtualization technology is applied to isolate TOS from normal OS. Users complete ordinary affairs in normal OS and security-sensitive affairs in TOS. TMPE can offer users a highly protected environment for mobile payment. Moreover, TMPE has good compatibility in different hardware architectures of mobile platforms. As the evaluation shows, TMPE satisfies the requirement of mobile payment well.

关 键 词：trusted computing mobile payment VIRTUALIZATION mobile platform 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术] TN929.5[自动化与计算机技术—计算机科学与技术]