基于NFC的手机支付技术及其安全性研究

发布时间：2018-07-23 09:10

【摘要】：随着通讯行业的不断进步,手机成为人们日常生活中不可或缺的一部分。NFC (近场通信)技术的迅猛发展使得移动支付逐渐走进人们的生活。NFC技术其实就是由RFID技术演变而来的,该技术的出现很好的解决了移动终端和受理终端之间的通信问题。此外,NFC技术的迅速发展,使得手机的功能得以丰富,为手机的移动支付起到了很好的支撑作用。不同于其他传统支付方式,NFC技术提供了一种便捷、快速的支付方案,能够让消费者直观的通过手机进行信息的交互以及访问,进而完成近场支付。随着手机支付标准的确立,移动支付也将逐渐被人们认可。作为移动支付的方式之一,NFC手机支付技术具有明显的优势。在此背景下,本文将NFC技术引入到手机支付中,对传统的支付方案进行研究和改进,同时考虑支付过程中的安全性。将NFC芯片与SIM卡连接,可以借助于SIM卡原有的安全认证和授权方式,与其他繁琐的证书认证相比,该种方式也更利于市场的推广。本文以实际研究项目为背景,研究和设计了基于NFC的手机支付技术及其安全性。在手机支付过程中,内置NFC芯片的手机被模拟为非接触识别卡,与POS端进行通信。由于金融行业的特殊性,因此确保交易过程的数据安全性就显得尤为重要。本文研究和建立了手机近场支付的交易模型,包括移动终端、受理终端以及收单系统三部分,并对其可能存在的安全隐患进行分析,提出在交易中重点保护的资产。在对比分析了几种典型的对称加密算法和公钥加密算法后,提出基于RSA、ECC和AES三种算法相融合的混合加密算法,此外,采用数字签名技术-HMAC,保证交易平台以及收单系统的合法性。本文设计采用NFC虚拟卡模式,此外,将安全模块SE至于SIM卡中,实现敏感信息与其他应用的分离。借助于Android平台下tag的发布、读写软件,以及访问接口——Smart Card API,完成应用程序对安全单元SE的访问和应用,同时完成受理终端和移动终端的密码确认及核实,进而设计出一个完整的交易过程。在Android开发环境下,设计并模拟了 NFC支付系统中的移动终端,实现图形人机交互界面的可视化管理,界面友好,操作简单。最后本文对交易系统功能进行测试,主要包括交易过程中数据的传输、交易密码的确认、交易信息的查询以及交易金额的扣除。测试结果表明系统设计合理,操作简单,运行稳定可靠,满足需求。
[Abstract]:With the development of communication industry, mobile phone has become an indispensable part of people's daily life. With the rapid development of NFC (near Field Communication) technology, mobile payment has gradually come into people's life. NFC technology is actually evolved from RFID technology. The emergence of this technology solves the problem of communication between the mobile terminal and the receiving terminal. In addition, with the rapid development of NFC technology, the function of mobile phone can be enriched, which plays a good supporting role for mobile payment. Different from other traditional payment methods, NFC technology provides a convenient and fast payment scheme, which enables consumers to communicate and access information directly through their mobile phones, and then to complete near-field payment. With the establishment of mobile payment standard, mobile payment will be gradually recognized by people. As one of the mobile payment methods, NFC mobile phone payment technology has obvious advantages. Under this background, this paper introduces NFC technology into mobile phone payment, studies and improves the traditional payment scheme, and considers the security of payment process. By connecting NFC chip with SIM card, we can use the original security authentication and authorization mode of SIM card. Compared with other tedious certificate authentication, this way is also more conducive to market promotion. In this paper, the NFC based mobile payment technology and its security are studied and designed based on the actual research project. In the process of mobile phone payment, the mobile phone built into NFC chip is simulated as a contactless identification card and communicates with POS terminal. Because of the particularity of financial industry, it is very important to ensure the data security of transaction process. This paper studies and establishes the transaction model of mobile phone near field payment, including mobile terminal, receiving terminal and order receiving system, and analyzes its potential security hidden danger, and puts forward the assets which are protected in the transaction. After comparing and analyzing several typical symmetric encryption algorithms and public key encryption algorithms, a hybrid encryption algorithm based on the fusion of three algorithms, RSA-ECC and AES, is proposed. In addition, the digital signature technique -HMAC is adopted to ensure the legitimacy of the transaction platform and the order collection system. In this paper, NFC virtual card mode is adopted. In addition, the security module SE is used in SIM card to separate sensitive information from other applications. With the help of the tag publishing, reading and writing software and access interface under Android platform, the application program can access and apply the secure unit SE, at the same time, the password confirmation and verification of the receiving terminal and mobile terminal are completed. Then design a complete transaction process. The mobile terminal in NFCpayment system is designed and simulated in the environment of Android. The visual management of graphical man-machine interface is realized. The interface is friendly and the operation is simple. Finally, this paper tests the function of the transaction system, including the data transmission, the confirmation of the transaction password, the query of the transaction information and the deduction of the transaction amount. The test results show that the system design is reasonable, the operation is simple, the operation is stable and reliable, and the demand is satisfied.
【学位授予单位】：哈尔滨工程大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP391.44;TP309

【参考文献】