节点文献

短信行业应用的安全研究

Investigation in the Security Area of Short Message Industry Application

【作者】 杨佳磊

【导师】 邱卫东;

【作者基本信息】 上海交通大学 , 电子与通信工程, 2007, 硕士

【摘要】 在目前移动通信市场同质竞争日益激烈的情况下,短信行业应用作为各家运营商均着力发展的集团客户行业数据应用之一,能为运营企业带来新的利润增长点,但是其在发展过程中的安全问题却也一直是大家关注的焦点。从本质上说,短信行业应用是短信业务应用的一个特例,是指由集团客户(EC)或者业务集成商(SI)提供、通过短信行业应用网关(IAGW)实现、服务于多个用户的行业应用。由于目前的实现方式中EC/SI与BOSS之间没有接口,所以在短信行业应用中只能采取对短信息的接收方进行收费的方式,存在的隐患显而易见。因此在短信行业应用的发展过程中,如何从网络层面和业务层面去保障行业应用的安全性是当前急需考虑的问题。本文主要从现有业务应用的实际出发,从IAGW的组网结构、CMPP协议的应用、各类接口管理等方面着手,着重对今后短信行业应用的组网和运营中的安全性进行研究,在IAGW系统架构重新调整的基础上,通过对现有相关业务流程的优化调整,实现对SP更有效地监控和管理,解决现有的虚假鉴权、垃圾或不良谋利信息下发给用户带来的危害,保证用户和运营商的利益不受侵害。由于受本人能力、时间、篇幅及研究重点等方面的限制,本文只是着重探讨了短信行业应用中组网结构、业务流程的优化,以及防止SP进行短信欺诈和违规操作等方面的安全保障,但相信本文所获得的成果将对今后的短信网络维护管理提供有益参考。

【Abstract】 Nowadays, the competition in mobile telecommunication market is getting more and more dramatic. Short message is one of the most important data applications for all of the mobile companies because it can bring mobile companies new revenue increasing opportunity. However, the information security problem is always focused on during the development.Essentially, Industry Application is a special case of short message which means the application provided by the Enterprise Customer (EC) or System Integration (SI) to realize the industry application for multi-users through the short message Industry Application Gateway (IAGW). Because the current solution doesn’t provide the interface between EC/SI and BOSS , it’s obviously that there will be hidden troubles caused by the billing mode as it can only charge the short message receiver. Therefore, it’s urgent to solve the security problem of industry application from the network and operation level. This document focuses on the network structure of the IAGW, the application of CMPP protocol and the interfaces management in order to investigate the networking and operating security. By the rebuilding of the IAGW system architecture, we hope to optimize the business process so that we can monitor and manage the SPs more effectively, solve the current issues like inveracious authentification as well as harmful push short messages to avoid the economic loss of our customers.I only focus on the network structure of Industry Application System, the business process optimizing and keeping away the short message trick and get out of line operations of SP related to short message industry application because of the limitation of my knowledge, time, length and research area in this document. I wish it will be a good reference for short message network maintenance and management in the future.

  • 【分类号】TP311.52
  • 【被引频次】1
  • 【下载频次】63
节点文献中: 

本文链接的文献网络图示:

本文的引文网络