Research On Mobile Electronic Commerce Application Based On WAP And WPKI Protocol

With the development and combination of mobile communication technology and Internet, Mobile Electronic Commerce appears as a new member of the E-Business family. With more convenient and more flexible services, Mobile Electronic Commerce is popular with consumers. Its emergence will contribute greatly to the development of Electronic Business.The mobile communication technology is based on mobile Internet technology, which suffices to access Internet anytime and anywhere. At the same time, just as common wireless networking applications, Mobile Electronic Commerce system is in a sense vulnerable to attackers due to the openness of system architecture, handicapped capacity of hand-held devices in the system, and drawbacks of wireless environment which accommodates the system, such as limited bandwidth and high error rate. All of these make Mobile Payment easy to be eavesdropped by malicious third-party users. Particularly, if the stolen information is sensitive such as bank pass-code, it will cause terrific devastation to involved customers.The WAP protocol, which is put forward by the WAP forum, is thought as the ideal solutions in the security and efficiency for the Mobile Electronic Commerce system. By analyzing the security of the WAP protocol, the thesis shows the WAP application model and the protocol structure, especially at the WTLS protocol that safeguards the security of the whole protocols, and makes some improvement at the handshake protocol. The WAP gateway is very important for the protocol conversion between the wireless and the Internet. Now there are many gateway models as WAP Server. WPKI is the extension of the PKI technology in the wireless field. Regards to the characteristic of the wireless communications, it adopts the new encryption algorithm and the new WTLS certificate. And these methods improve the efficiency of the encryption and the decryption, and reduce the bandwidth of transmitting the certificate.The main motivation of this paper is to propose a WAP and WPKI based security scheme for Mobile Payment system, which solves the three major security issues in Mobile Payment system-authentication between the two sides in a transaction, data secrecy, and denial of past activity. Meanwhile, our scheme improves the existing mobile payment approach by incorporating into it a bilaterally evaluation-based mechanism, which convenience the security of mobile payment system, and its prosperous development.