面向第三方支付平台的移动安全交易协议研究  

Research on Mobile Secure Transaction Protocols for Third- party Payment Platform

作　　者：孙映雪 

机构地区：[1]信元公众信息发展有限责任公司,北京市100093

出　　处：《电子质量》2015年第2期18-28,共11页Electronics Quality

摘　　要：为提升移动支付交易安全性和质量,该文致力于设计一种能够在移动终端上搭载的面向第三方支付平台的安全交易协议模型STPT。该协议保留了SET协议及MSET协议双重签名的特性,用对称算法替换了大部分非对称算法环节,显著提升了计算效率,降低了计算量和计算时间,使其能够在移动终端上实现搭载。通过改造MSET协议的初始化流程,显著强化了协议整体的安全性并使其具有明显的不可否认性特征。基于对SET协议和MSET协议的分析,提出STPT模型,并对其可认证性、保密性、完整性、不可否认性、原子性进行分析,证明其能够提供较为全面的安全性服务。并运用Kailar逻辑证明其能够达到预定的安全目标。Focuses on the design of a security transaction protocol model which can be equipped on mobile terminal for third-party payment platform-STPT（Secure Third-party Platform Transaction）.The protocol retai- ns the double signature feature of the SET protocol and MSET protocol.It replaces most of the asymmetric algorithm by symmetric algorithm therefore significantly improve the computing efficiency,reduce the amount of calculation and computation time,and enable to apply on the mobile terminal equipments.Also,we trans- form the initialization step of the MSET protocol to strengthen the security of the overall protocol and make it possess the obvious nonrepudiation feature.Based on the analysis of SET and MSET,creates STPT protocol, and prove it possess the authentication,confidentiality,integrity,non-repudiation,atomicity,from which we can see the STPT can provide comprehensive security service.We also use Kailar logic to prove that it can achieve the security target.

关 键 词：第三方平台 电子支付 安全 协议 KAILAR逻辑 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]