文档介绍：南京邮电大学硕士研究生学位论文 摘要
摘 要
移动支付是电子支付发展的一个重要分支,是互联网和移动通信迅速普及的必然结果。移动支付具备许多传统电子支付所不具备的独特优势,人们可以利用移动手持设备在任何时间和地点通过无线网络获取信息,随时随地地进行商品交易和货币支付。然而,受到目前移动设备和移动网络自身处理数据能力的限制,移动支付安全性和效率问题还没得到有效解决。
论文首先详细介绍了移动支付的概念、移动支付的商业模式、应用现状、移动支付所面临的安全威胁及安全需求、移动设备的局限性以及移动支付的密码学基础。
以此为基础,给出一个移动支付系统的层次框架,在应用支撑层借鉴Girault的自证明公钥方案,提出一种基于椭圆曲线密码的自证明公钥方案。设计了签名生成算法、消息恢复和验证算法以及密钥协商过程,该方案集成了椭圆曲线密码和隐式验证的优点,适用于移动计算环境。
在业务逻辑层,将椭圆曲线上的自证明公钥方案应用到移动支付中,设计了移动支付协议。新协议在认证效率、密钥分配和存储空间上皆优于基于数字证书公钥系统的协议。在支付协议中融入认证与会话密钥建立协议,在保证安全需求的同时尽量减少协议的交互次数。协议同时考虑了用户匿名性和用户个性化采购信息的保密。通过对主要攻击进行对抗分析验证协议可满足预设的安全目标。
移动支付协议不仅要满足一些安全协议普遍要求的安全特性,还要满足电子商务领域所特别强调的可追究性,论文利用Kailar逻辑形式化分析方法验证了协议的可追究性,最后分析了协议的性能。
关键字:移动支付,自证明公钥,支付协议,Kailar逻辑
南京邮电大学硕士研究生学位论文
Abstract
Mobile payment is an important branch of electronic payment,it is the inevitable result of the rapidly growth of the and payment has a lot of unique advantages which traditional electronic payment did not have,people call make merchandise trade and currency through a work at any time in any where with his
mobile ,because the technical capabilities of mobile devices are limited,the
security and efficiency problems ofmobile payment haven’t been solved effectually. Firstly,this paper described the concept of mobile payment,mobile payment business
model,application status,threats and security requirement,the limitations of mobile devices and
it’S cryptography basis.
On this basis,this paper gave a framework of the mobile payment application support layer,learn on Girault’s self-certified public key program,a self-certified public key program based on ECC Was program includes signature algorithm,message recovery and authentication algorithm,and session key agreement program integrates the advantages of ECC and implicit authenticate,Was more suitable for mobile
computing environment.
On service logic layer,designed a mobile payment protocol use self-certified public key system based on the as