地铁公司二维码乘车安全解决方案  

QR riding system security solutions

作　　者：梅中雷 Mei Zhonglei(Beijing Infosec Technologies Co., Ltd., Beijing 100052)

机构地区：[1]北京信安世纪科技股份有限公司,北京100052

出　　处：《网络空间安全》2019年第1期61-67,共7页Cyberspace Security

摘　　要：某地铁公司上线二维码乘车系统,乘客通过手机APP产生二维码,在闸机口通过扫码方式过闸乘车,为保障扫码乘车过程的安全,将同步规划、建设二维码乘车安全解决方案。此安全方案以国产SM2/3/4密码算法为核心,建设一套PKI可信身份认证体系,在二维码申请、发放、产生、验证等重要环节使用数字签名技术,防止乘车二维码被非法篡改、复制、盗刷及确保每笔交易的可追溯性,数据在传输过程中采用国密的SSL/TLS加密技术,确保乘车交易数据在互联网环境中明文不落地,实现数据的安全可控。A subway company put the QR barcode riding system into operation, passengers generate a QR code through the mobile phone APP and take a ride through the gate by scanning the QR code In order to ensure the safety of the riding process, we will plan and construct safe solution for QR code riding synchronously. the heart of this security schemes is domestic SM2/3/4 cipher algorithm, and constructing a PKI trusted identity authentication system, using digital signature technology in QR code application, distribution, formation, validation, and other important link to prevent a QR code to be unauthorized modification, copied, unauthorized and ensure the traceability of every transaction. In the process of data transmission, SSL/TLS encryption technology with state secrets is adopted to ensure that the data of bus transactions are not written in plain text in the Internet environment, so as to realize the safety and control of data.

关 键 词：地铁 二维码 可信身份 移动安全 国密算法 

分 类 号：TP520.1060[自动化与计算机技术]