| Mobile bank means that it can connect the clients'mobile equipments with the bank by the mobile communication network, and then all kinds of services can be completed on the interfaces of the mobile equipment or the mobile phones. Since mobile bank comes into being, the development of this newly business mode has been puzzled by the problem of the security communication, which comes with the widely use of many new techniques and equipments. Therefore, the effective settlement to the security problems is the key to the development of the mobile bank. And the security problems include the following aspects: secrecy of the information, identity attestation and authorization, non-denying of the business, and the integrality of the data. At the same time it can stand against the known attacks such as monitoring, in-between attacks, intercepting and re-putting-together attacks, messages playing-back attacks and so on.On the analyses of the research status quo of the mobile security, the thesis puts forward some settlement projects to the safe communication applied to the traditional PC such as SSL,SET etc. And because of the consideration of its currency, the quantities of the computing, the quantities of the communication data and the size of the software are all large. Then such projects cannot be used on the mobile equipments of insufficient ability of computing, finite wireless bandwidth, small EMS memory and limited electricity capacity. Although the WTLS protocol based on WAP has been widely applied in mobile security communication field, the end-to-end security cannot be provided yet. At the same time, with the development of the mobile equipment such as mobile phones etc., those mobile applications based on the WAP will drop put historical stage. Therefore, the security communication projects should be designed to apply to mobile bank system according to its own specialties of the mobile equipments, which is also the cut-in and research signification of this thesis.Based on the traditional security communication settlement projects, this thesis puts forward and completes a security communication project to the mobile bank application system which sets up a safe data channel. And the mobile bank application system adopts a three-layer frame design way which includes mobile client end, mobile server end and bank server end. Accordingly the project is made up two parts: the security communication plan between the mobile client end and the mobile server end, and between the mobile server end and bank server end, too. And the detailed research contents are as the followings:1. A security communication project is designed between the mobile client end and the mobile server end. However, for the limit of the mobile equipment hardware conditions, the design takes into consideration that it is as possible as to diminish the message transfer times and quantities, then the computing speed and efficiency has been improved and the security is ensured.2. A security communication project is completed between the mobile client end and mobile server end, which finishes the functional modules such as identity attestation, secret-key negotiation, encryption communication, conversation resuming and connection close and so on, then solves the security problem in the communication process well.3. A security communication project is completed between the mobile server and bank server, which takes the Web Service communication method, and adopts WS-Security rule and Handler technique according to the Web Service communication characters, then solves the security problem in the communication process well.4. A test is completed for the security communication project of the mobile bank application system including cells, functions and performances and so on. And the ultimate testing result shows that this project has provided a safe data channel for the mobile bank application system., also all the functions and the performances of the design meet the requests of the mobile bank application. |
PDF Full Text Request