移动电子商务安全支付技术研究

【作者】 李冬云；

【导师】 吴敏；

【作者基本信息】 中南大学 ， 计算机应用技术， 2002， 硕士

【摘要】 随着Internet与移动技术的飞速发展，作为Internet技术之一的电子商务与移动技术的巧妙结合---移动电子商务，为服务商创造了新的机会与挑战。但由于制约移动电子商务发展的安全支付问题没有得到很好的解决，移动电子商务的应用只停留在简单的可以预先确定的缴费类定向支付的业务上，还不是一种完全意义上的电子商务支付模式，不可能满足移动电子商务的支付需求。本文分析了移动电子商务的特点与优势，针对移动环境特点，寻求基于移动安全技术的解决方案。根据当前国内外技术发展现状和实际业务需求，本文主要研究基于WAP、SMS的移动电子商务安全解决方案和基于上述各技术的安全认证体系。WAP通信是靠WAP协议栈中的WTLS的安全层进行身份验证和数据加密的，不是真正端到端的安全。为了做到端到端的安全，本文在研究分析基于WAP协议的内容提供商自备WAP网关的解决方案及网关导航型解决方案的基础上，提出了基于WAP的WTLS移动电子商务安全解决方案，并用于了中国移动电子商务技术支持系统。本文在研究了基于STK端到端传输安全解决方案，基于WAP+STK解决方案以及基于STK的移动PKI解决方案的基础上，提出了切合实际的基于STK的移动电子商务解决方案的应用：通过营业厅的POS完成对STK卡的定制。并针对目前国内CA呈诸侯割据态势，本文提出在CA建设中，中国移动集团不应重复建设，只需在国内三家大的CA(CTCA、CFCA和协卡CA)中，扶持一家CA的战略构想和具体实施策略。 同时对移动电子商务交易模式进行分类，目前移动梦网湖南网站已采用基于帐号的微支付模式，进行话费代交，极大的方便了移动客户缴费，解决了移动客户缴费难的问题。 在以上的工作基础上，文中提出了中国移动集团移动电子商务交易系统的建设方案、移动电子商务电子信用及认证体系和移动电子商务计费系统的建设。更多还原

【Abstract】 Resent years, as the highly development of Internet and mobile technology, the mobile e-commerce, one of the Internet technology of the skillfully combine of e-commerce and mobile technology, offers new chance and challenge to the SP. Restricted by the unsettlement of the safety payment of mobile e-commerce, the application of the mobile e-commerce only lingers on the simple foreseeable directional payment, which isn’t a unqualified e-commerce and conn’t satisfy the payment of the mobile e-commerce. In this thesis, aim at the characteristic of the mobile environment, characteristic and advantage of the mobile e-commerce are analyzed, and, the safety resolvment of the mobile e-commerce based on WAP and SMS (STK) are also given as well as the safety payment system based on the above technologies. Based on the analysis of the resolve project offered by the SP, WAP gateway of the WAP protocol and navigation gateway are given. This article also brings forward reslovment way which applicants on china mobile e-commerce technology sustain system based on the WTLS of mobile e-commerce found on the WAP. After researched the safety payment method based on point to point transmission and WAP +STK, and the PKI settlement of WAP, the application of the practicality, use the POS of the business room to fulfill the customization STK card, based on the STK settlement of the mobile e-commerce are given. These days, different groups in the different areas and industries are using different CA. The author figures out that the CMCC only need to choose and support one of the three largest CA (CTCA, CFCA, UCA) in our country.The business patterns of the mobile e-commerce are classified in this article. And, under the guidance of the author, the MONTERNET uses micro-payment method. This makes great convenience to the mobile users and resolves the difficulty of their payment.Based on the upward research, the construction project of the trading system, electric credit, attestation system and the charge computability based on the mobile e-commerce are also given.更多还原