WPKI在移动电子商务中的研究和实现

发布时间：2018-06-25 08:04

本文选题：移动电子商务 + WPKI　；参考：《山东大学》2008年硕士论文

【摘要】： 本文主要给出一套WPKI平台的整体设计,并给出了部分数据结构定义和简单实现。WPKI(Wireless PKI)是由WAP论坛于为将PKI规范扩展到移动互联网中而提出的概念。WPKI为基于移动互联网的应用提供保密性、完整性、不可否认性和身份认证等安全性服务。随着国内3G带来的网络带宽的提高及终端性能的改善,加上移动网络本身的受环境影响小,随时随地在线的特点,基于移动互联网的移动电子商务应用必将得到快速发展,缺少基于移动互联网的安全基础设施成为制约移动应用发展的瓶颈。但目前国内外对WPKI的研究主要集中在证书格式、密码算法、证书查询机制等细节方面,还没有形成一套能够综合各种细节技术,能指导运营商或者认证机构建立一个完整实用的WPKI平台的成熟技术规范,真正实现商业的应用实例更少。本文在充分学习和理解国内外已有研究成果的基础上,结合国内移动网络运营机制,给出了一套WPKI系统的整体设计,并给出了部分数据结构的定义和简单实现。文中的设计主要以两个思想为指导:1.尽量融合现有PKI系统;2.移动为先(即在交互中尽量优先考虑和减轻移动网络和终端的工作压力)。本文对WPKI规范的完善和国内WPKI系统的建立具有较强的指导意义。本文提出的设计遵从WAP论坛(WAP Forum)制定的WPKI现有规范,对证书格式、密码算法、证书查询机制等基本元素给出了具体可行的设计规定,对CA、密钥管理中心(KMC)、RA、OCSP等系统主要组件给出了具体的工作流程设计、架构设计和简单的代码实现。方案中选用基于LDAP的证书URL格式,在减轻了证书传送对移动互联网带来的带宽压力的同时,保证了CA对证书的管理效率。在证书查询机制中,创新性地提出了证书注销信息缓存技术,利用用户短期内只跟有限个对象交互的特点,在终端中建立一个很小的缓存,存贮在不久前一定时期内的交互中获知的已注销证书的URL标识,从而大大提高了证书状态查询工作的效率。在本文创作过程中,作者充分利用了在广东省电子商务认证中心项目研发中的实践经验,并通过主持开发“动漫部落”WAP系统和“迎奥彩信收发平台”,对移动互联网应用系统开发有了充分的理解和把握。在文章编写过程中,与运营商和华为公司的专家们进行了详尽的沟通,保证了本文提出的WPKI建设方案的技术可行性。
[Abstract]:In this paper, the overall design of a WPKI platform is given, and the definition of some data structures and the simple implementation of.WPKI (Wireless PKI) are from WAP forum to the extension of the PKI specification to the mobile Internet. The concept.WPKI provides security, integrity, non repudiation and identity authentication for the mobile Internet based applications. Full service. With the improvement of network bandwidth and terminal performance brought by domestic 3G, and the small impact of the environment on the mobile network itself, the mobile Internet based mobile e-commerce application will be rapidly developed, and the lack of mobile Internet based security infrastructure becomes the restriction of mobile communication. But at present, at home and abroad, the research on WPKI mainly focuses on the details of certificate format, cipher algorithm, certificate query mechanism and so on. It has not formed a set of mature technical specifications that can synthesize various details technology and can guide operators or authentication institutions to establish a complete and practical WPKI platform, and the real business should be realized. Fewer examples are used.
On the basis of fully studying and understanding the existing research results at home and abroad and combining the domestic mobile network operation mechanism, the whole design of a set of WPKI systems is given, and the definition and simple implementation of some data structures are given. The design of this paper is guided by two ideas: 1. the integration of the existing PKI system as far as possible; and the first movement of the system (that is, the first (that) In the interaction, we should give priority to and reduce the working pressure of the mobile network and terminal. This paper has a strong guiding significance for the improvement of the WPKI specification and the establishment of the domestic WPKI system.
The design presented in this paper is based on the existing WPKI specification established by the WAP Forum (WAP Forum). It gives specific and feasible design rules for the basic elements of certificate format, cryptographic algorithm and certificate query mechanism, and gives specific workflow design, architecture design and simple code for the main components of CA, key Management Center (KMC), RA, OCSP and so on. In the scheme, a certificate URL format based on LDAP is selected, which reduces the bandwidth pressure of the transfer of the certificate to the mobile Internet and ensures the management efficiency of the certificate. In the certificate query mechanism, the certificate cancellation information caching technology is innovatively proposed, and the user is only interactive with the limited object in the short term. A small cache is set up in the terminal to be stored in the URL identification of the written off Certificate in the interaction of a certain period of time, which greatly improves the efficiency of the certificate state query work.
In the process of this article, the author makes full use of the practical experience in the research and development of the Guangdong electronic commerce certification center project. Through the development of the "anime tribe" WAP system and the "reception and receiving platform", the author has a full understanding and grasp of the development of the mobile Internet application system. In the process of writing, it is with the operator. Detailed communication with HUAWEI's experts has ensured the technical feasibility of the WPKI construction plan proposed in this paper.
【学位授予单位】：山东大学
【学位级别】：硕士
【学位授予年份】：2008
【分类号】：TP393.08

【相似文献】