面向现场支付的MCSP模式及其支付协议

MCSP Model and Payment Protocol Oriented Near-field Payment

针对一机仿真多卡的应用需求,基于密码技术设计了一个面向现场模式、支持多卡仿真的NFC(Near Field Communication,近距离通信)智能手机移动支付安全模式MCSP(Multiple Cards on a Single Phone,一机多卡),并面向MCSP模式设计了一个安全支付协议.通过在智能终端中增加一个支持SWP(Single Wire Protocol,单线协议)的安全TF(Trans-flash)卡,将多张银行信用卡信息与智能终端硬件信息绑定后加密存储在安全TF卡中,基于密码分割实现多信用卡间的安全隔离;通过采用三级密钥机制,保护信用卡信息的安全性;通过扩展应用密文消息,实现交易金额二次确认、PIN(Personal Identification Number,个人识别码)输入过程前移和完整性增强保护;通过重新设计交易计数器更新策略实现抗重放攻击.

For the application requirement of one machine simulating multi-cards, it designs a mobile payment security model MCSP on a NFC smartphone, which is oriented near field payment, supported for multi-card emulation, and based on the cryptographic technology. This model increases the safety TF card that supports SWP protocol in the smart terminal, stores multiple bank credit card informa- tion encrypted in the safety TF card after bounds with the intelligent terminal hardware information. It realizes the security isolation be- tween multiple credit card based on cipher segmentation; It protects the security of credit card information by using three key system; It realizes the secondary confirmation of transaction volume, inputting process forward of the PIN code and integrity protection enhanced by extending the application ciphertext message;It achieves anti-replay attacks by redesigning the transaction counter update strategy.