国密算法在移动支付中的应用研究

发布时间：2018-02-08 19:26

本文关键词： 国密算法移动支付对称加密信息安全流程分析　出处：《郑州大学》2017年硕士论文　论文类型：学位论文

【摘要】：移动通信与计算机网络技术的快速发展,推动了电子商务逐渐走向成熟,移动支付作为一种便捷的支付方式,在人们日常生活中占据的地位日益重要。而与此同时,支付安全事件频繁发生,也在时刻为人们敲响警钟,如何保护用户个人隐私数据在网络上安全传输,避免用户资金受损,已经成为制约移动支付产业进一步发展的重要因素。为了提高移动支付安全性,避免安全事件发生,支付平台往往会在敏感信息传输时,增加数字加密措施。密码技术是确保信息安全传输的主要方法,探索密码技术在移动支付的应用及改进有着重要意义。本文通过了解移动支付及数字加密技术基础,分析现有支付流程,并研究支付数据交互过程,指出目前现有支付流程中潜在的安全隐患,随后,通过进一步分析,选取并使用对称加密算法,提出了一种新的基于SM4分组密码算法的移动支付加密方案。在该方案中,我们采用了软硬件结合的方式,其中,硬件主要负责密钥等关键数据的生成、存储及更新,而软件则主要负责数据的发送及接受。该方法通过利用初始密钥与随机密钥种子结合的方法,动态生成密钥,解决了对称加密算法在网络通信过程中的密钥安全传输问题。经过分析,我们所提出的方案具有很好的风险抵抗能力,相对于常用加密方案,能够更好地抵抗例如中间人攻击、病毒入侵等常用攻击手段,能够有效保护用户隐私,防止遭到入侵者窃听甚至信息篡改,从而更好地保障用户资金安全,维护移动支付安全环境。为进一步验证该方案的有效性,本文通过设计并实现一个基于SM4算法的移动支付转账系统,模拟并完成了整个支付流程,经过实验分析可知,SM4算法在该系统中,不仅具有良好的安全冗余度,而且在速度方面也表现卓越,能够很好满足移动支付系统对安全及性能的需求。本文提出的基于国密算法SM4的移动支付加密方案,能有效保障移动支付产业链中各参与者之间的通信安全,将进一步推动安全支付产业发展。
[Abstract]:With the rapid development of mobile communication and computer network technology, electronic commerce is becoming more and more mature. As a convenient payment method, mobile payment plays an increasingly important role in people's daily life. Payment security incidents occur frequently, and they also sound alarm bells for people at all times. How to protect the user's personal privacy data from the safe transmission on the network and avoid the damage of the user's funds, In order to improve the security of mobile payment and avoid security incidents, payment platforms often transmit sensitive information. Adding digital encryption measures. Cryptography is the main method to ensure the secure transmission of information. It is of great significance to explore the application and improvement of cryptography in mobile payment. This paper analyzes the current payment process, studies the process of payment data interaction, points out the potential security risks in the current payment process, and then, through further analysis, selects and uses symmetric encryption algorithm. This paper presents a new mobile payment encryption scheme based on SM4 block cipher algorithm. In this scheme, we adopt the combination of hardware and software, in which the hardware is mainly responsible for the generation, storage and update of key data such as keys. The software is mainly responsible for sending and receiving the data. The method dynamically generates the key by combining the initial key with the random key seed. The problem of key secure transmission in the process of network communication is solved. The analysis shows that the proposed scheme has a good risk resistance, and it can resist the attack of middleman better than the common encryption scheme. Common attack means, such as virus intrusion, can effectively protect the privacy of users and prevent them from wiretapping or even tampering with information by intruders, thus better protecting the security of users' funds. In order to further verify the effectiveness of the scheme, this paper designs and implements a mobile payment transfer system based on SM4 algorithm, and simulates and completes the whole payment process. Through the experimental analysis, we can see that the SM4 algorithm not only has good security redundancy in this system, but also has excellent performance in speed. This paper proposes a mobile payment encryption scheme based on SM4 algorithm, which can effectively guarantee the communication security among the participants in the mobile payment industry chain. Will further promote the development of safe payment industry.
【学位授予单位】：郑州大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：F713.36;F831.2;TP309

【相似文献】