基于主机卡模拟的NFC支付方案设计与实现

发布时间：2018-04-09 02:14

本文选题：近场通信　切入点：主机卡模拟　出处：《华中科技大学》2015年硕士论文

【摘要】：随着智能终端的普及和近距离通信技术的迅猛发展,手机支付业务也得到了广泛的应用。其中近场通信(NFC)技术以其安全、快捷、简单的优点,成为当前移动支付领域最为热门的应用技术之一。当前主流的NFC支付方案都是基于安全元件的,包含手机、近场通讯(NFC)模块和安全元件三个组件。其中,支付应用承载于安全元件中,NFC模块负责手机与支付受理设备的通信。这种方案对硬件的依赖性较高,支付产业链过长。主机卡模拟(Host Card Emulation)技术支持NFC模块与手机操作系统直接通信,有望解决这些问题。但HCE技术方案面临着安全性问题,这是采用开发HCE支付应用时必须要考虑和解决的问题。在分析了当前主流的NFC支付方案的基础上,提出并设计了一种安全的主机卡模拟方案。方案通过安全元件来弥补HCE技术的安全缺陷,由操作系统端应用程序和安全元件两部分组成。应用程序处理用户非涉密操作,安全元件则存储用户的敏感信息,同时执行一些涉密操作。通过设计一种安全的数据传输协议,保障应用程序与安全元件的通信安全。同时对交易指令进行分类,完成了对不同交易处理逻辑的划分。最后针对此方案中数据通信路径过长的问题,提出了优化方法。方案安全性达到了金融支付要求,同时降低了对硬件的依赖性,缩短了移动支付产业链,具备很高的实用价值。
[Abstract]:With the popularity of intelligent terminals and the rapid development of close-range communication technology, mobile payment services have been widely used.Near-field communication (NFC) technology has become one of the most popular applications in the field of mobile payment because of its advantages of security, rapidity and simplicity.Current mainstream NFC payment schemes are based on security components, including three components: mobile phone, near field communication module and security component.The NFC module is responsible for the communication between the mobile phone and the payment receiving device.This scheme is highly dependent on hardware and the payment chain is too long.The host card analog host Card simulation technology supports the NFC module to communicate directly with the mobile operating system, which is expected to solve these problems.However, HCE technology is faced with security problems, which must be considered and solved when developing HCE payment application.Based on the analysis of the current mainstream NFC payment scheme, a secure host card simulation scheme is proposed and designed.The scheme uses security components to make up for the security defects of HCE technology, which is composed of two parts: the application program of operating system and the security component.The application program processes the user's non-secret operation, while the security component stores the user's sensitive information and performs some secret operations at the same time.A secure data transmission protocol is designed to ensure the communication security between the application program and the security component.At the same time, the transaction orders are classified and the different transaction processing logic is divided.Finally, an optimization method is proposed to solve the problem that the data communication path is too long.The scheme can meet the requirements of financial payment, reduce the dependence on hardware, shorten the industry chain of mobile payment, and have high practical value.
【学位授予单位】：华中科技大学
【学位级别】：硕士
【学位授予年份】：2015
【分类号】：F724.6;TN929.5

【相似文献】