基于无证书公钥密码的终端安全移动支付协议  

Terminator security mobile payment protocol using certificateless public keys cryptography

作　　者：茹秀娟[1] 余楠[1] 

机构地区：[1]开封大学公共计算机教研部,河南开封475000

出　　处：《计算机应用研究》2015年第3期912-916,共5页Application Research of Computers

基　　金：河南省自然科学基金资助项目(112300410192)

摘　　要：移动支付协议允许两方或多方通过公开网络安全交换电子现金和数字内容。在实现安全支付过程中,传统公钥密码学的证书管理问题和基于身份密码学的私钥托管问题均给支付协议带来弊端。因此,使用无证书密码学来解决此类问题。针对高效的移动支付协议的设计问题展开研究,提出了一个基于无对的无证书密码学的移动支付协议。协议引入了口令等信息实现终端安全,还应用了密钥协商协议生成对称加密密钥,并且该过程伴随着支付过程,以此降低协议的计算和通信代价。此外,协议还可以实现公平交换等支付安全属性。Mobile payment protocol allows two or more parties exchange electronic cash and digital content safety through the open networks. During the safety payment, the certificate management problem for traditional public key cryptography and key escrow problem of identity-based cryptography bring drawbacks for payment protocols. Therefore, utilizing certificateless cryp- tography solve these problems. To improve the efficiency, this paper proposed a protocol based on certificateless cryptography without paring. The protocol applied password to ensure the terminator security, key agreement to establish symmetric keys, which could be integrated with the payment phase. Thus it could be reduced both the computational cost and communication cost. Moreover ,the protocol could achieve fair exchange and payment security.

关 键 词：无证书公钥密码 安全 支付 口令 密钥协商 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]