Research And Implement Of Mobile Payment Security System Based On ECC Composite Encryption

With the rapid development of mobile payment, we found that the existence of mobile payment in the security needs of mobile payment systems analysis: in the resource-constrained mobile devices for data encryption speed is concerned,sensitive data on the safety of mobile terminal and security problem of mobile payment platform in the communications, this article provides a more convenient and more reliable security system of mobile payment that without additional calculation and storage space in the mobile terminal.In this article, contrary to the above problem of mobile payment system,the article design a security solutions of mobile payment system that use ECC encryption algorithm combined,ECC encryption algorithm combined which ECC composite dynamic input and ECC composite encryption information.In this solutions: consider from mobile terminal's input,using dynamic input methods,realized to pay the password input, while achieving second encryption for payment password,guarantee the security of the mobile terminal's payment password;consider from mobile terminal's treatment,using dynamic input method to encrypt payment password messages and using the AES encryption algorithm to encrypt order messages,in the case of no additional calculation and storage space in mobile terminals,accelerate the speed of data encryption;consider from transmission,using ECC encryption algorithm combined to provide key exchange for communications,key data encryption and digital signatures and other services,thus ensuring the key,payment password and ordering information transmission process in the mobile communication security;consider from payment process,design of mobile payment process to ensure the safety of end to end security,that is to say that is responsible only for mobile payment platform for mobile users, merchants and banks to the two-way identification and data forwarding,is not responsible for the financial transfer function,this article is only for the two-way identification of mobile users. Assurance measures by more than a few,ultimately provide a convenient and reliable security system for mobile payment.Finally in this paper,it is based on the J2ME platform, we give a initial implementation on the ECC encryption algorithm combined of mobile payment system,and experimental validation.Under the safe use of mobile payment solution can both meet the convenience of mobile payment use, and ensure the safety of the course requirements.