移动电商平台的系统安全方案设计与实现

发布时间：2018-06-15 02:31

本文选题：公钥密码学 + 椭圆曲线加密　；参考：《北京邮电大学》2016年硕士论文

【摘要】：随着移动互联网技术的高速发展,移动电子商务越来越多地影响着人们生活的方方面面。移动电商平台在带给人们的生活带来便利的同时,其网络、终端和业务的特殊性也带来了新的安全问题和挑战。在移动电商平台的设计和开发中,核心的支付业务虽然能通过银联、支付宝等第三方支付平台提供的接口安全地完成移动终端到银行的信息交互,但是从移动终端到平台服务器上的数据传输安全和服务器数据库内的信息储存安全却并没有纳入规范的保护之中,需要在系统内部得到保证。在此背景下,本文针对移动电商平台系统内部敏感数据传输和储存两大关键环节,设计和实现了一套可行、稳定、高效的安全方案。在数据安全传输方面,通过分析移动电商平台大数据、高并发的业务需求和移动终端数据处理能力、储存容量有限的特点,综合考虑安全性和系统效率,确定了基于身份的椭圆曲线签密作为基本方案,并从系统构架和具体算法两个层面提出了该方案的设计和实现。在数据加密储存方面,从对移动电商系统数据库的数据分类入手,针对不同安全等级和业务特点的数据,设计和实现了不同的加密方案,并对加密字段的模糊查询做出了优化。配合本文提出的数据库参数加密加载、数据库计划备份方案,形成了一套完整的数据加密存储方案,从多个方面和层次保证了数据存储的安全性和系统效率。结合“一品密云”移动电商平台的设计与实现,在平台内对上述安全方案进行了完整的实现和测试,并对测试结果进行了分析,给出了系统中相关参数的优化方案。测试结果表明,本文方案可以在保证系统安全性的前提下,更好地满足移动电商平台对系统效率的要求,具有较好的普适价值。
[Abstract]:With the rapid development of mobile internet technology, mobile e-commerce affects more and more aspects of people's life. Mobile e-commerce platform not only brings convenience to people's life, but also brings new security problems and challenges due to the particularity of network, terminal and service. In the design and development of the mobile e-commerce platform, the core payment services can safely complete the information exchange between the mobile terminal and the bank through the interface provided by the third-party payment platform such as UnionPay, Alipay, etc. However, the security of data transmission from mobile terminal to platform server and the security of information storage in server database are not included in the standard protection, and need to be guaranteed within the system. Under this background, this paper designs and implements a set of feasible, stable and efficient security scheme for the sensitive data transmission and storage in the mobile ecommerce platform. In the aspect of data security transmission, by analyzing the characteristics of mobile e-commerce platform big data, high concurrent business requirement and mobile terminal data processing ability, limited storage capacity, the security and system efficiency are considered synthetically. The ID-based elliptic curve signcryption is defined as the basic scheme, and the design and implementation of the scheme are presented from the two aspects of system architecture and algorithm. In the aspect of data encryption and storage, different encryption schemes are designed and implemented according to the data classification of mobile e-commerce system database, and the fuzzy query of encrypted field is optimized. With the database parameter encryption loading and the database plan backup scheme proposed in this paper, a complete data encryption storage scheme is formed, which ensures the security and system efficiency of the data storage from many aspects and levels. Combined with the design and implementation of Yipingmiyun mobile ecommerce platform, the above security scheme is implemented and tested in the platform, and the test results are analyzed, and the optimization scheme of the related parameters in the system is given. The test results show that the proposed scheme can better meet the system efficiency requirements of mobile ecommerce platform on the premise of ensuring system security and has better universal value.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP309

【相似文献】