移动电子商务中的短信验证码安全威胁问题研究

Research on Security Threats of SMS Verification Code Based on Mobile E-commerce

随着移动电子商务安全问题的凸显,作为常见解决方案的短信验证码技术面临着短信木马和恶意软件、运营商或者服务商发生信息泄露、补卡攻击和克隆攻击、手机打码平台等安全威胁。针对上述问题,文章分别从电商平台、用户和服务商角度提出了加强对数据安全的保护、增强对手机系统安全威胁的认知和增加智能码验证方式等应对策略。

With the emergence of security problem of mobile e-commerce, the SMS verification code technology, which is a common solution, is facing some security threats such as the SMS Trojans and malware, card information leak of operators or service providers, re-card attack and clone attack, mobile phone platform code and so on. In this paper, some strategies are proposed to solve these prob- lems. It is pointed out that the electronic business platform should strengthen the protection of data safety, the users should enhance the awareness of security threats of mobile phone system, and the service providers should introduce the intelligent code verification mode.