The Application Of WPKI On M-Commerce Security

With the development of mobile communication technology, the trend of E-Bussiness extending from wired environment to wireless environment has appeared. Although the aspect of M-Commerce application is broad, but it still has lots of problems need to be solved, the most important problem is security problem. All M-Commerce services must be implemented on a secure and reliable platform. The mobile platform security has became the main factor which determining the development of M-Commerce, the M-Commerce security is not only equal to network security in narrow sense, such as anti-virus, guard against hacker, inbreak detect etc, in broad sense, it also includes integrity of information and Non-repudiation. In this sense, M-Commerce covers more fields than security in normal network environment. To solve the security problems of M-Commerce, we must ensure the characteristic of Identification, Integrity, Confidentiality, Non-repudiation in wireless environment.Transplanting the method which solving security problems of wired environment to wireless environment is a efficient idea. WPKI is a new technology, which used to ensure the security of M-Commerce recently. It developed from wired PKI, namely WPKI is a security mechanism which providing the security service liking wired PKI in wireless environment, it renews properly and optimizes reasonable under the current wired PKI mechanism to accord with characteristic of mobile communication. The former methods to implement WPKI have the problems of poor currency and inconvenient maintenance, the appearance of SmartPhone provides a new way to implement WPKI. SmartPhone has current OS, both of mobile phone and PDA's function. Comparing to traditional mobile phone, it has faster speed, lager memory and stronger processing ability. Now there are several SmartPhone OS supporting encrypt algorithm providers to place encrypt algorithms into OS. We can use encrypt algorithms through APIs, such as Microsoft's SmartPhone OS.According to new characteristics of SmartPhone, the thesis put forwards a new way to implement WPKI. We can base the project on Windows CE operation system; use CryptoAPI, which included in WinCE to implement WPKI. CryptoAPI is a security function family, which has lots of functions. Application developers can add data encrypt or decrypt functions, and use digital certificates to conform people's ID. Application developers can use the functions of CryptoAPI family and needn't to acknowledge the details. The Microsoft's encrypt system includes three factors: OS, Application, and CSP (Cryptographic Service Provider), OS communicates with CSP by CryptoSPI; this characteristic makes it easy to replace CSP. We can replace the original encrypt/decrypt functions with our own, and use the encrypt algorithms inside the IC as a CSP. We can put the physical encrypt algorithms inside the IC to enhance the speed.The method which implementing WPKI upon SmartPhone platform has characteristics of module, currency and easy to maintenance, it can solve the problems of security on mobile platform perfectly.