Java多应用卡发卡系统的设计与实现

发布时间：2018-05-18 09:54

本文选题：Java卡 + 多应用　；参考：《北京邮电大学》2017年硕士论文

【摘要】：随着科技的不断发展,传统智能卡“单卡单应用”的模式凸显出越来越多的弊端,造成资源浪费、不便携带等诸多问题。如今智能手机的普及为我们提供了一个良好的平台,智能手机终端内的USIM卡能够作为一个便携的载体,将传统智能卡中的Applet程序安装到USIM卡中,便形成了“单卡多应用”的格局,成功解决了传统智能卡资源浪费、不便携带的问题。本课题以开发一个Java多应用卡发卡系统为目的,使第三方的业务应用软件能够下载并安装到运营商提供的手机USIM 卡上,并且各应用软件彼此隔离互不干扰,在手机USIM卡上能够实现多应用的格局。本文通过对Java多应用卡发卡系统的功能需求、整体架构、模块划分、管理体系及硬件结构的研究分析,设计了一套拥有较高安全性的Java多应用卡发卡系统。针对其密钥管理模块提出一种具有卡片互异性的三级密钥分散模型,针对系统通信的安全性提出一种基于分组密码的并行MAC算法,并设计了发卡系统与各门户网站之间的接口。系统除提供Java卡片的管理、Java卡业务开展所必须的应用下载与应用管理等支撑能力及Java卡业务的接入与服务提供商的管理等基础功能以外,还提供开展手·机近场支付业务的应用的下载与管理功能,扩展营业厅及短信营业厅两种Java卡业务受理渠道,同时兼具Java卡业务的推广功能。针对本文设计的Java多应用卡发卡系统,在Web平台上实现了主要模块,完成POS本地发卡和空中下载两种渠道的发卡模式。然后,针对已实现系统的部分重要功能进行了测试。最后,对发卡系统的安全性进行研究,从Java卡内外实体认证和数据通信链路安全两方面进行讨论,提出本系统可能存在的安全风险以及对应的解决方案,并对改进后的Java多应用卡发卡系统的发卡过程进行安全性测试,从而实现本课题的设计目标。
[Abstract]:With the development of science and technology, the traditional smart card "single card single application" mode highlights more and more disadvantages, resulting in waste of resources, inconvenience to carry and many other problems. Nowadays, the popularity of smart phone provides us with a good platform. The USIM card in the smartphone terminal can be used as a portable carrier to install the Applet program in the traditional smart card into the USIM card. It has formed the pattern of "single card multi-application", and successfully solved the problem of traditional smart card resource wasting and inconvenient carrying. The purpose of this project is to develop a Java multi-application card issuing system, so that the third-party business application software can be downloaded and installed on the mobile phone USIM card provided by the operator, and each application software is isolated from each other and does not interfere with each other. In the mobile phone USIM card can achieve multi-application pattern. Through the research and analysis of Java multi-application card issuing system, such as function requirement, whole structure, module partition, management system and hardware structure, a set of Java multi-application card issuing system with high security is designed in this paper. For its key management module, a three-level key dispersion model with card interoperability is proposed, a parallel MAC algorithm based on block cipher is proposed for the security of system communication, and the interface between the card issuing system and various portals is designed. The system not only provides the basic functions of Java card management, such as application download and application management, but also the access of Java card service and the management of service provider. It also provides the function of downloading and managing the application of the hand machine near field payment service, and extends the two kinds of Java card business acceptance channels of the business hall and the short message business hall, and at the same time, it also has the popularization function of the Java card business. In view of the Java multi-application card issuing system designed in this paper, the main modules are implemented on the Web platform, and the two modes of POS local card issuing and aerial downloading are completed. Then, some important functions of the implemented system are tested. Finally, the security of the card issuing system is studied, and the security risk and the corresponding solution of the system are put forward from two aspects: the entity authentication inside and outside the Java card and the data communication link security. The security of the improved Java multi-application card issuing system is tested, and the design goal of this project is realized.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP311.52;TP393.09

【相似文献】