移动支付系统安全性研究综述  

Survey of Security Research in Mobile Payment System

作　　者：刘永磊[1,2] 金志刚[1] 高天迎[2] 

机构地区：[1]天津大学电子信息工程学院,天津300072 [2]天津城建大学计算机与信息工程学院,天津300384

出　　处：《信息网络安全》2017年第2期1-5,共5页Netinfo Security

基　　金：天津市科技计划[15PTFHCX00100];中国博士后科学基金[2016M601265]

摘　　要：随着互联网尤其是通信技术、智能手机与Web2.0的发展,移动电子商务日益普及,智能设备的多网络接口性质和移动支付的协议与机制缺陷导致的安全问题也愈发严重。文章研究了移动支付的系统体系结构包括:非接触层、控制层、网络层和应用层,给出了移动电子支付的基本流程。通过对现有网络体系中的各层安全性问题进行分析,如非接触层安全、网络层安全和应用层安全等,文章对现有的移动支付协议及其改进进行了研究分析,同时对安全性评估算法进行了分析比较。在此基础上给出了安全的移动电子支付系统结构的基本框架,并进行了分析。最后文章指出了移动支付系统安全性研究的不足,并对未来的发展方向进行了展望。With the development of Internet, especially communication technology, smart phones and Web2.0, the increasing popularity of mobile E-commerce appears. However, the natures of multiple network interfaces in smart mobile devices and design flaws of mobile payment protocols and mechanisms make security issues become more serious. The mobile payment system network architecture which comprises contactless layer, control layer, network layer, and application layer is analyzed. And the basic process of mobile payment is put forward. And then, the existing network system security issues of each layer are analyzed, including contactless layer security, control layer security, network layer security, and application layer security. The mobile payment protocols and their improvements are analyzed and summarized. The security assessment methods are also analyzed, compared and summarized. Moreover, A new secure mobile payment system network architecture is given. Finally, the summary of the existing security research is processed,And the future research direction is put forward.

关 键 词：移动支付 电子商务 安全评估 无线网络 

分 类 号：F724.6[经济管理—产业经济] F832.2[自动化与计算机技术—计算机系统结构] TP309[自动化与计算机技术—计算机科学与技术]