基于USIM卡防木马的手机支付及手机POS研究  

Research on mobile payment and mobile POS based on USIM card anti-Trojan

作　　者：杨琳[1] YANG Lin(China Mobile Group Sichuan Co.,Ltd.,Chengdu 610041,China)

机构地区：[1]中国移动通信集团四川有限公司

出　　处：《电信工程技术与标准化》2020年第2期72-77,共6页Telecom Engineering Technics and Standardization

摘　　要：移动互联网改变了人们的生活方式,但木马及黑客又影响了用户的体验,目前流行的指纹/刷脸等生物识别及短信验证码等方式易被木马盗窃。本文基于Java USIM卡本身对用户身份的运算展开研讨,提出了针对USIM卡的用户身份运算的方法及其密保体系,浅析了凿通业界多年寻求的“机-卡”通道的内在机理,实现用户身份“一次一密”的动态鉴权。本文呈现的成果可用于手机支付、无人驾驶、共享单车、物联网及公交/地铁/ETC和电子签证等垂直业务,也能免密码畅游各网站。Mobile internet has changed people's life style,but Trojans and hackers have also affected user experience.At present,popular biometrics such as fi ngerprint/face swiping and SMS verifi cation code are easy to be stolen by Trojans.Based on the Java USIM card itself,this paper discusses the operation of user identity,present a method for computing user identity based on USIM card and its encryption&security system,analyzes the internal mechanism of penetrating the"machine-card"channel which the industry has been seeking for many years,and realizes the dynamic authentication of user s identity"one time one secret".The results presented in this article can be used for mobile payment driverless,bike sharing,internet of things,public transport/subway/etc and e-visa and other vertical businesses,as well as password free travel of websites.

关 键 词：Java USIM卡 对称加密AES 机-卡通道 金融级USIM盾 

分 类 号：TN918[电子电信—通信与信息系统]