The Research Of Lightweight Secure Mobile Payment Solution Based On SIP

With the rapid development of mobile internet, the performance of mobile device has been promoted. And mobile payment becomes an important part of e-commerce. The widely use of mobile payment raises security problem. The security in mobile payment is becoming a barrier for the further development of mobile payment. A reliable security mobile payment protocol is the foundation of mobile payment. By studying previous mobile payment protocol, this paper has a research on the solution of lightweight class secure mobile payment. The research lists as follow:1. Through mobile device has the advantage of convenient and flexible, its computing power and storage capacity is limited. Symmetric cryptosystem has high efficiency and not high demand for hardware. Public key cryptosystem has been designed to be extremely easy to deploy. Combining the feature of mobile device, it is easy to be solidified into the specialized smart card. The specialized hardware is employed to encrypt data, releasing the pressure of mobile device, and ensuring the confidentiality of transmitted data.2. To merge the payment solution and current network, SIP is employed to transmit trading signaling. SIP has low requirements for underlying protocol and is compatible for current IP network application. SIP use layered structure and transmit information based on text, above features make the SIP protocol have strong extensibility.3. By analysis the enhanced mobile secure payment protocol proposed by Hamid, we find it does not have the bidirectional authentication between merchant and client. Attacker may pretend to be consumer trending with merchant by eavesdropping session between client and merchant. Our proposed method use WPKI mechanism to verify trades partners identity. And take use of smart card to realize the encryption, signature, verification of trading information. We also reduce the transaction process, the proposed protocol focusing on customer. Data processing is carried out in acquirer to release the pressure of device for client and merchant.4. We also have an analysis for the proposed mobile payment solution, it provides that the proposed method has authentication, confidentiality, integrity authentication, reliability and non-repudiation.