基于NFC的手机支付系统

Research on the security of mobile payment system based on NFC

文中分析和研究了基于NFC的手机支付系统及其安全性。在手机支付过程中,内置NFC芯片的手机被模拟为非接触识别卡,与POS端进行通信。由于金融行业的特殊性,确保交易过程的数据安全性就显得尤为重要。文中研究和建立了手机近场支付的交易模型,并对其可能存在的安全隐患进行分析。在对比分析了几种典型的对称加密算法和公钥加密算法后,提出基于RSA、ECC和AES 3种算法相融合的混合加密算法,此外,采用数字签名技术保证交易平台以及收单系统的合法性。在此基础上,设计出基于混合加密算法的交易流程,提高交易系统的安全性。

This paper analyzed and researched the mobile payment technology and its safety based on NFC. In the mobile payment process,the built-in NFC chip phone was modeled as a non-contact identification card communicating with POS terminals. Due to the special nature of the financial sector,it is particularly important to ensure data security in the transaction process. This paper researched and established a trading model of near-field payment,and analyzed the possible security risks. After comparison and analysis of several typical symmetric encryption algorithms and public key encryption algorithm,a hybrid encryption algorithm based on RSA,ECC and AES was proposed,in addition,applying digital signature technology to ensure the legitimacy of the trading platform and acquirer system. On this basis,a hybrid encryption algorithm based on the transaction process was designed to improve the security of the transaction system.