针对现有移动支付中客户端有限的功耗、处理能力及安全性等问题，提出了一种安全高效的在线移动支付协议。该协议采用客户与银行共享的离线伪随机数作为密钥进行高效认证，能实现高效身份认证及会话密钥协商。客户与商家交易过程中采用共享密钥加密敏感信息，能有效减轻客户端计算开销及实现非否认性。经过效率分析比较及BAN逻辑证明，该协议能以较低的计算及通信量获得较高的安全性，非常适合在移动终端上实现。%In the mobile payment protocols, the client works on wireless devices possibly with limited computation capacities, power and security challenges. In order to satisfy the above properties, a new secure efficient mobile payment protocol is pro-posed. In this protocol, client and bank can be mutual efficient authenticated and the session key is established due to the shared offline pseudo-random number. The transaction between merchant and client can be processed quickly with the shared key which is the proof of non-repudiation. On the analysis of BAN logic and efficiency, the proposed protocol minimizes the comput-ing and communication requirement of the client that makes it especially suited for mobile devices.
展开▼
