M-commerce Security Solution Based on the 3rd Generation Mobile Communication

摘要

Mobile E-commerce (M-commerce) service raises a number of security and privacy challenges. To address this, we propose an advanced mobile security solution and related security methodology based on distribute key without changing hardware configuration of the mobile devices. The solution consists of the UE (User Equipment), an electronic security key (eKey) which is connected to the mobile device by adaptable interface for enhancing the UE security ability and storing private data, CA with digital certification and web server which provides the M-commerce services. UE communicates with web server and CA via wireless mobile net and Internet. UE communicates with eKey via adapted interface (e.g., COMM, USB and Bluetooth). M-commerce security is enhanced by using external security key and specified policies including user confidentiality, mutual authentication, data integrity and confidentiality. Furthermore, the design of eKey is given which put emphasis on the hardware security solution and the communication mechanism between main controller and security module. In this way, the M-commerce security problem is solved to a certain extent.