Research&Design On Android Payment Authentication Client Based On The SyncML

With the rapid development of Mobile Internet, the diversity of device and rapid update of information, the data stored in different devices demands on the same consistency, which also is the problem of data synchronization. Based on SyncML protocol mobile payment and authentication system applies in mobile terminal, solving not only the problem of mobile payment authentication, but also the consistency problem of the authentication transaction data stored in a different device. For the better openness and synchronous speed the SyncML synchronization protocol is getting paid more and more attention from the mobile device manufacturers and users.This paper firstly introduces the Android, analyzes its basic frame and describes the security of the application and how to develop an application on the platform. Then according to the standard SyncML synchronization protocol, the paper deeply analyzes the SyncML architecture and its application advantages in mobile terminal. Furthermore it introduces the structure of the data-message package and its transmission mode about the protocol, analyzes its security the synchronous process of data.Then it is the core of this paper, which is the research and design on Android payment authentication client based on the improved SyncML protocol. Firstly its system structure is analyzed, and software requirements and design of the client are discussed. With the use of the funambol client-sdk kit, the design work of client base modules is completed. To solve the problems existing in standard SyncML data synchronization, a dynamic unidirectional authentication scheme for the client is proposed, which improvs the simple authentication method in standard SyncML data synchronous process.Simultaneously the method that dynamic symmetric key encrypting and deencryting the data-items in the SyncML data-package is used, which improvs the security of the mobile payment authentication system based on the standard SyncML protocol. Finally, the test system is built. In the test system the client realized the mobile transaction data synchronization signature verification process well. And the improved synchronization protocol is better than the original protocol in security in data transmission by analyzing the data safety in synchronous process.