基于轻量级认证中心的移动在线支付协议  

LIGHTWEIGHT CA-BASED MOBILE ONLINE PAYMENT PROTOCOL

作　　者：王菁[1] 杨保华[1] 李桥[1] 

机构地区：[1]湖南涉外经济学院信息科学与工程学院,湖南长沙410205

出　　处：《计算机应用与软件》2015年第12期286-289,297,共5页Computer Applications and Software

基　　金：国家自然科学基金项目(51304076);湖南省自然科学基金项目(14JJ4064);湖南省科技厅项目(2013GK3113)

摘　　要：在线支付协议,多是基于传统证书公钥密码算法或身份密码算法,前者需要在各商家及用户端预置大量证书信息,证书管理复杂;后者需要在支付过程中进行大量配对运算,在资源受限的移动网络中很难取得理想效果。针对上述问题结合轻量级认证中心LCA(Lite Certificate Authority)公钥机制,设计一种用户、商家与LCA的三方在线支付协议。此协议无需证书管理,公钥产生及验证过程简单方便。系统初始化完成后,用户与商家间的通信无需LCA参与。分析表明,此协议简单高效、通信量少、可抵御多种攻击,适用于资源受限的移动网络。Online payment agreements are mostly based on traditional public key cryptographic algorithms or identity certificate cryptographic algorithms,the former requires all merchants and users in a large number of pre-certificate information,while the certificate management is too complicated; the latter requires a lot of pairing operations in payment processes,which is difficult to achieve the desired effect in resource-constrained mobile networks. To solve the above problem,in combination with lightweight certificate authority（ LCA）public key mechanism,in this paper we design a tripartite online payment protocol involving the user,the merchant and the LCA. This protocol does not need certificate management, the generation and verification processes of public key are simple and easy. The communications between users and merchants do not ask the participation of LCA after system initialisation. Analysis show that this protocol is simple and efficient with less communication,can resist multi-attacks,and is suitable for resource-constrained mobile networks.

关 键 词：在线支付 轻量级CA BAN逻辑 移动网络 

分 类 号：TP393.2[自动化与计算机技术—计算机应用技术]