基于Kerberos的移动电子商务安全架构

M-commerce Security Architecture Based on Kerberos

随着越来越多的无线设备接入因特网，传统网络中的电子商务和移动网络的结合体“移动电子商务”极有可能成为下一代网络的终极应用。然而，现有的无线应用协议缺乏电子商务所必需的端到端之间的安全性，同时无法解决大多数运算能力差的无线设备接入问题，阻碍了应用的发展。该文将私钥体系中的Kerberos协议和移动电子商务体系相结合，提出了KMSA。在KMSA中，通过对Kerberos协议进一步的扩展和优化，做到在保证应用安全的前提下降低系统对终端设备的要求，为移动电子商务现阶段的发展扫清障碍。

Currently, the combination of E-commerce in traditional network and mobile network, mobile E-commerce, is promising to be the killer application in the next generation network. However, existing WAP architecture is lack of end-to-end security, which must be present in E-commerce. Moreover, it also depends heavily on terminals' security computing ability, which is not present in most of wireless devices. This article designs M-commerce security architecture——KMSA, which adopts extended Kerberos as the end-to-end security protocol, allowing to achieve application security and high efficiency without too heavy computing.