Research And Realization Of Encryption Algorithms And Security Protocol For Mobile Payment System

In recent years, as the most popular application in the mobile field, mobile payment has enriched our lives. Acted as the most important part of the mobile payment, its security issues have become more and more eye-catching. Due to some congenital deficiencies in the smart mobile system, mobile payment security has always been threatened by the system security vulnerabilities as well as different kinds of Trojan horse virus. In addition, some existing security protocols can’t be used in the mobile payment environment well since its security and efficiency can’t be guaranteed at the same time. These kinds of deficiency are likely to affect the user’s experience of using mobile payment technology and even endanger the security of the user’s property and other aspects. Aiming to tackle the above-mentioned problems, the dissertation studies the problem with respect to two aspects of encryption algorithm and security protocol.With respect to encryption algorithm, it can be found that elliptic curve cryptography(ECC) not only has excellent safety, but also makes good performance by comparison. After further study and research on ECC algorithm, the dissertation finds that the point multiplication algorithm of ECC may cause the largest consumption and the improvement of point multiplication algorithm can significantly enhance the overall performance of ECC. Accordingly, the dissertation proposes an improved algorithm for scalar multiplication and on the basis of it, an advanced ECC algorithm called MPECC is proposed which is suitable for the mobile payment environment. Comparing with the ordinary ECC algorithm, the MPECC algorithm can ensure the safety of payment, improve the efficiency and reduce the consumption simultaneously, in addition, it can be impleted by software easily. In conclusion, the MPECC algorithm can fit the mobile payment environment well.In terms of security protocol, the dissertation proposes a mobile payment security protocol based on the MPECC algorithm and self-verified authentication technology by studying the existing payment security protocol, mainstream authentication signature technology and combining with the actual needs of the subject. The protocol is made up of the certification protocol, registration protocol and payment protocol, besides, in this paper, the work process and the information interaction of these protocols are designed in detail. The whole protocol ensures that the merchant can’t communicate directly with the client so as to enhance the security of client information. In addition, the new protocol combines a variety of security technologies to ensure the security of mobile payments, meanwhile, it reduces the computational consumption and the dependence on hardware, which makes the protocol more secure and effective in the mobile payment environment.Finally, the dissertation proposes a mobile payment system which is designed on the basis of the security protocol and MPECC algorithm mentioned above and applies it to the Android mobile terminal. It can be found through the actual test that the mobile payment system constructed by the protocol proposed in the dissertation has good security and availability that it is applicable to the current mainstream Android device terminals and worthy of further research and promotion.