基于NFC的手機(jī)支付技術(shù)及其安全性研究
發(fā)布時(shí)間：2018-07-23 09:10
【摘要】：隨著通訊行業(yè)的不斷進(jìn)步,手機(jī)成為人們?nèi)粘Ｉ钪胁豢苫蛉钡囊徊糠�。NFC (近場(chǎng)通信)技術(shù)的迅猛發(fā)展使得移動(dòng)支付逐漸走進(jìn)人們的生活。NFC技術(shù)其實(shí)就是由RFID技術(shù)演變而來的,該技術(shù)的出現(xiàn)很好的解決了移動(dòng)終端和受理終端之間的通信問題。此外,NFC技術(shù)的迅速發(fā)展,使得手機(jī)的功能得以豐富,為手機(jī)的移動(dòng)支付起到了很好的支撐作用。不同于其他傳統(tǒng)支付方式,NFC技術(shù)提供了一種便捷、快速的支付方案,能夠讓消費(fèi)者直觀的通過手機(jī)進(jìn)行信息的交互以及訪問,進(jìn)而完成近場(chǎng)支付。隨著手機(jī)支付標(biāo)準(zhǔn)的確立,移動(dòng)支付也將逐漸被人們認(rèn)可。作為移動(dòng)支付的方式之一,NFC手機(jī)支付技術(shù)具有明顯的優(yōu)勢(shì)。在此背景下,本文將NFC技術(shù)引入到手機(jī)支付中,對(duì)傳統(tǒng)的支付方案進(jìn)行研究和改進(jìn),同時(shí)考慮支付過程中的安全性。將NFC芯片與SIM卡連接,可以借助于SIM卡原有的安全認(rèn)證和授權(quán)方式,與其他繁瑣的證書認(rèn)證相比,該種方式也更利于市場(chǎng)的推廣。本文以實(shí)際研究項(xiàng)目為背景,研究和設(shè)計(jì)了基于NFC的手機(jī)支付技術(shù)及其安全性。在手機(jī)支付過程中,內(nèi)置NFC芯片的手機(jī)被模擬為非接觸識(shí)別卡,與POS端進(jìn)行通信。由于金融行業(yè)的特殊性,因此確保交易過程的數(shù)據(jù)安全性就顯得尤為重要。本文研究和建立了手機(jī)近場(chǎng)支付的交易模型,包括移動(dòng)終端、受理終端以及收單系統(tǒng)三部分,并對(duì)其可能存在的安全隱患進(jìn)行分析,提出在交易中重點(diǎn)保護(hù)的資產(chǎn)。在對(duì)比分析了幾種典型的對(duì)稱加密算法和公鑰加密算法后,提出基于RSA、ECC和AES三種算法相融合的混合加密算法,此外,采用數(shù)字簽名技術(shù)-HMAC,保證交易平臺(tái)以及收單系統(tǒng)的合法性。本文設(shè)計(jì)采用NFC虛擬卡模式,此外,將安全模塊SE至于SIM卡中,實(shí)現(xiàn)敏感信息與其他應(yīng)用的分離。借助于Android平臺(tái)下tag的發(fā)布、讀寫軟件,以及訪問接口——Smart Card API,完成應(yīng)用程序?qū)Π踩珕卧猄E的訪問和應(yīng)用,同時(shí)完成受理終端和移動(dòng)終端的密碼確認(rèn)及核實(shí),進(jìn)而設(shè)計(jì)出一個(gè)完整的交易過程。在Android開發(fā)環(huán)境下,設(shè)計(jì)并模擬了 NFC支付系統(tǒng)中的移動(dòng)終端,實(shí)現(xiàn)圖形人機(jī)交互界面的可視化管理,界面友好,操作簡(jiǎn)單。最后本文對(duì)交易系統(tǒng)功能進(jìn)行測(cè)試,主要包括交易過程中數(shù)據(jù)的傳輸、交易密碼的確認(rèn)、交易信息的查詢以及交易金額的扣除。測(cè)試結(jié)果表明系統(tǒng)設(shè)計(jì)合理,操作簡(jiǎn)單,運(yùn)行穩(wěn)定可靠,滿足需求。
[Abstract]:With the development of communication industry, mobile phone has become an indispensable part of people's daily life. With the rapid development of NFC (near Field Communication) technology, mobile payment has gradually come into people's life. NFC technology is actually evolved from RFID technology. The emergence of this technology solves the problem of communication between the mobile terminal and the receiving terminal. In addition, with the rapid development of NFC technology, the function of mobile phone can be enriched, which plays a good supporting role for mobile payment. Different from other traditional payment methods, NFC technology provides a convenient and fast payment scheme, which enables consumers to communicate and access information directly through their mobile phones, and then to complete near-field payment. With the establishment of mobile payment standard, mobile payment will be gradually recognized by people. As one of the mobile payment methods, NFC mobile phone payment technology has obvious advantages. Under this background, this paper introduces NFC technology into mobile phone payment, studies and improves the traditional payment scheme, and considers the security of payment process. By connecting NFC chip with SIM card, we can use the original security authentication and authorization mode of SIM card. Compared with other tedious certificate authentication, this way is also more conducive to market promotion. In this paper, the NFC based mobile payment technology and its security are studied and designed based on the actual research project. In the process of mobile phone payment, the mobile phone built into NFC chip is simulated as a contactless identification card and communicates with POS terminal. Because of the particularity of financial industry, it is very important to ensure the data security of transaction process. This paper studies and establishes the transaction model of mobile phone near field payment, including mobile terminal, receiving terminal and order receiving system, and analyzes its potential security hidden danger, and puts forward the assets which are protected in the transaction. After comparing and analyzing several typical symmetric encryption algorithms and public key encryption algorithms, a hybrid encryption algorithm based on the fusion of three algorithms, RSA-ECC and AES, is proposed. In addition, the digital signature technique -HMAC is adopted to ensure the legitimacy of the transaction platform and the order collection system. In this paper, NFC virtual card mode is adopted. In addition, the security module SE is used in SIM card to separate sensitive information from other applications. With the help of the tag publishing, reading and writing software and access interface under Android platform, the application program can access and apply the secure unit SE, at the same time, the password confirmation and verification of the receiving terminal and mobile terminal are completed. Then design a complete transaction process. The mobile terminal in NFCpayment system is designed and simulated in the environment of Android. The visual management of graphical man-machine interface is realized. The interface is friendly and the operation is simple. Finally, this paper tests the function of the transaction system, including the data transmission, the confirmation of the transaction password, the query of the transaction information and the deduction of the transaction amount. The test results show that the system design is reasonable, the operation is simple, the operation is stable and reliable, and the demand is satisfied.
【學(xué)位授予單位】：哈爾濱工程大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2016
【分類號(hào)】：TP391.44;TP309
[Abstract]:With the development of communication industry, mobile phone has become an indispensable part of people's daily life. With the rapid development of NFC (near Field Communication) technology, mobile payment has gradually come into people's life. NFC technology is actually evolved from RFID technology. The emergence of this technology solves the problem of communication between the mobile terminal and the receiving terminal. In addition, with the rapid development of NFC technology, the function of mobile phone can be enriched, which plays a good supporting role for mobile payment. Different from other traditional payment methods, NFC technology provides a convenient and fast payment scheme, which enables consumers to communicate and access information directly through their mobile phones, and then to complete near-field payment. With the establishment of mobile payment standard, mobile payment will be gradually recognized by people. As one of the mobile payment methods, NFC mobile phone payment technology has obvious advantages. Under this background, this paper introduces NFC technology into mobile phone payment, studies and improves the traditional payment scheme, and considers the security of payment process. By connecting NFC chip with SIM card, we can use the original security authentication and authorization mode of SIM card. Compared with other tedious certificate authentication, this way is also more conducive to market promotion. In this paper, the NFC based mobile payment technology and its security are studied and designed based on the actual research project. In the process of mobile phone payment, the mobile phone built into NFC chip is simulated as a contactless identification card and communicates with POS terminal. Because of the particularity of financial industry, it is very important to ensure the data security of transaction process. This paper studies and establishes the transaction model of mobile phone near field payment, including mobile terminal, receiving terminal and order receiving system, and analyzes its potential security hidden danger, and puts forward the assets which are protected in the transaction. After comparing and analyzing several typical symmetric encryption algorithms and public key encryption algorithms, a hybrid encryption algorithm based on the fusion of three algorithms, RSA-ECC and AES, is proposed. In addition, the digital signature technique -HMAC is adopted to ensure the legitimacy of the transaction platform and the order collection system. In this paper, NFC virtual card mode is adopted. In addition, the security module SE is used in SIM card to separate sensitive information from other applications. With the help of the tag publishing, reading and writing software and access interface under Android platform, the application program can access and apply the secure unit SE, at the same time, the password confirmation and verification of the receiving terminal and mobile terminal are completed. Then design a complete transaction process. The mobile terminal in NFCpayment system is designed and simulated in the environment of Android. The visual management of graphical man-machine interface is realized. The interface is friendly and the operation is simple. Finally, this paper tests the function of the transaction system, including the data transmission, the confirmation of the transaction password, the query of the transaction information and the deduction of the transaction amount. The test results show that the system design is reasonable, the operation is simple, the operation is stable and reliable, and the demand is satisfied.
【學(xué)位授予單位】：哈爾濱工程大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2016
【分類號(hào)】：TP391.44;TP309
【參考文獻(xiàn)】
相關(guān)期刊論文 前10條
1 郭雪雪;解福;;云環(huán)境下基于ECC的數(shù)字認(rèn)證技術(shù)的研究[J];計(jì)算機(jī)與數(shù)字工程;2015年03期
2 吳偉生;;在NFC-SWP移動(dòng)支付卡上實(shí)現(xiàn)卡應(yīng)用動(dòng)態(tài)更新的方法[J];福建電腦;2014年10期
3 劉鵬;郭波;李敏;;基于NFC技術(shù)的設(shè)備點(diǎn)檢手機(jī)終端研究[J];煤;2014年02期
4 林振洲;;基于高校教務(wù)管理的郵件群發(fā)系統(tǒng)設(shè)計(jì)與實(shí)現(xiàn)[J];科技廣場(chǎng);2013年06期
5 陳文玨;韋紹明;;圖書館引入NFC技術(shù)探討[J];公共圖書館;2013年01期
6 賈凡;佟鑫;;NFC手機(jī)支付系統(tǒng)的安全威脅建模[J];清華大學(xué)學(xué)報(bào)(自然科學(xué)版);2012年10期
7 王紅珍;李竹林;;基于AES和ECC的混合加密系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)[J];電子設(shè)計(jì)工程;2012年04期
8 張文麗;;電子商務(wù)中的數(shù)字簽名技術(shù)[J];科技廣場(chǎng);2011年07期
9 徐國(guó)霞;;一種基于橢圓曲線的序列號(hào)軟件保護(hù)方案[J];計(jì)算機(jī)安全;2011年06期
10 馮林;;我國(guó)現(xiàn)行小額移動(dòng)支付方案分析[J];信息系統(tǒng)工程;2011年04期
相關(guān)碩士學(xué)位論文 前10條
1 趙特木;基于Android平臺(tái)的NFC信息管理系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)[D];大連理工大學(xué);2013年
2 董琦;基于Android平臺(tái)的NFC終端設(shè)計(jì)[D];電子科技大學(xué);2013年
3 蘇曉燕;基于NFC技術(shù)的Android移動(dòng)支付終端的設(shè)計(jì)與實(shí)現(xiàn)[D];西南交通大學(xué);2013年
4 戴爾O，
本文編號(hào)：2138918
本文鏈接：http://www.sikaile.net/kejilunwen/ruanjiangongchenglunwen/2138918.html
最近更新
教材專著
