基于Kerberos的移动电子商务安全架构  

M-commerce Security Architecture Based on Kerberos

作　　者：张海飞[1] 杨宇航[1] 

机构地区：[1]上海交通大学电子工程系,上海200030

出　　处：《计算机工程》2004年第4期107-109,共3页Computer Engineering

摘　　要：随着越来越多的无线设备接入因特网，传统网络中的电子商务和移动网络的结合体“移动电子商务”极有可能成为下一代网络的终极应用。然而，现有的无线应用协议缺乏电子商务所必需的端到端之间的安全性，同时无法解决大多数运算能力差的无线设备接入问题，阻碍了应用的发展。该文将私钥体系中的Kerberos协议和移动电子商务体系相结合，提出了KMSA。在KMSA中，通过对Kerberos协议进一步的扩展和优化，做到在保证应用安全的前提下降低系统对终端设备的要求，为移动电子商务现阶段的发展扫清障碍。Currently, the combination of E-commerce in traditional network and mobile network, mobile E-commerce, is promising to be the killer application in the next generation network. However, existing WAP architecture is lack of end-to-end security, which must be present in E-commerce. Moreover, it also depends heavily on terminals' security computing ability, which is not present in most of wireless devices. This article designs M-commerce security architecture——KMSA, which adopts extended Kerberos as the end-to-end security protocol, allowing to achieve application security and high efficiency without too heavy computing.

关 键 词：移动电子商务 无线应用协议 无线传输层安全协议 公钥体系 Kcrberos 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]