摘要
提出了一种基于自更新Hash链机制的移动商务认证机制,设计了适用于移动用户与固定网络信息服务提供商进行频繁交易的小额支付协议。分析表明,新机制使用较少的交互,无需数字签名,实现在“第一时间”对移动用户的认证和会话密钥的高效产生。提出的协议不仅提高了支付协议的效率、安全性和公平性,而且解决了恶意透支和时限性等问题。
An authentication scheme for mobile commerce based on self-renewal hash chains scheme （SRHC） was proposed, and a micro-payment protocol was designed, The protocol is suitable for micro-payment such as information commodity between a mobile user and a fixed service provider. The analysis results show that the proposed scheme needs less interaction and no digital signature to authenticate mobile user in the foremost time, as well as session keys are negotiated efficiently. The proposed protocol not only has better security, efficiency and fairness, but also solves the problems of malicious over-spending and time limit.
出处
《计算机应用》
CSCD
北大核心
2007年第8期2059-2061,共3页
journal of Computer Applications
基金
国家自然科学基金资助项目(60473021)
河南省重点科技攻关资助项目(072102210029)
河南省科技攻关资助项目(05242200440624260017)
关键词
移动商务
认证
小额支付
HASH链
自更新
mobile commerce
authentication
micro-payment
hash chains
self-renewal
