Research On Security Of M-commerce

Recent years, as the high development of Internet and Mobile technology, a new concept of M-commerce was brought forward which was the skillful combination with Internet technology and Mobile Communication technology. A new challenge and chance was appeared in IT field because of M-commerce. Unfortunately, the problem of secure payment was not solved validly which was the key of popularization. In this paper we analyzed the characteristic and the advance of M-commerce, the next we looked for the scheme of secure payment in the mobile communication environment. The following, we introduced WPKI and function of its component, the difference between WPKI certification and X.509 certification; we discussed the structure of WAP, its sub layers protocol and the hidden trouble in security on the infrastructure of WAP. We distinguished between SIM and WIM card on their function, and pointed out the prospect of WSIM the combination of SIM and WIM card. We improved the SDPA (Secure Dynamic Password Authentication) and the formal verification was done; the improved scheme increased the security level and decreased the complexity. It enhanced the security between client and server after combined with SIM and WIM card.