基于J2ME的移动支付安全方案研究

Research on Security Protocol for Mobile Payment Based on J2ME

安全方案对移动支付系统的安全性起着决定性作用,其中无线环境中的安全和对用户即手持设备的认证,更是系统成败的关键。借鉴国外已有的移动支付系统,结合宏支付的特点及安全要求,并考虑到J2ME平台本身提供的安全性,提出了一个基于J2ME的移动支付安全方案,重点解决无线环境下的用户的认证问题,来保证针对宏支付的移动支付系统的安全。分析测试验证了该安全方案的安全性及可行性。

The security protocols which are crucial to the mobile payment system （MPS）, especially to the authentication of the user （mobile hand-held devices） in the wireless environment, determine the security properties or even the fate of whole system. We investigate the existent mobile payment systems, study the characteristic and security requirement of the macro-payment, and consider the inherent security of the J2ME platform,and hereby propose a security protocol for mobile payment based on J2ME, emphasizing the authentication to the user. Then we analyze and test the security and feasibility of the security protocols and the conclusion we have drawn is that security protocol achieves its security goals,has the ability to resist usual attacks and enjoys high efficiency.