Security Solution To The Mobile Business Based On JSR-177 And Its Application

Mobile business is a general designation for mobile electronic business and government administration system, which is a developed modern electronic business system based on the mobile communication network and the Internet interconnection platform. It can realize the information dissemination among the mobile business users and can free themselves completely from the shackles of the cable network. So it can be predicted that mobile business is becoming the general trend of electronic information. However mobile business is facing a bottleneck that is the security issue of mobile business.The aim of this thesis is looking for a security solution to the mobile business on the basis of analyzing information security technologies. The main work of this thesis is outlined as follows:Firstly, the architecture of mobile business is studied in this thesis. On the basis of the combination of current information security technologies, the security solution based on SMS (Short Message System) to mobile business is introduced in the thesis. The primary functions of mobile terminal are user interface and network function that provided for mobile business. JAVA SIM CARD provides the primary functions, which are relevant to the sensitive and security data, including the operations of encryption, decryption, signature, and etc.Secondly, the Security and Trust Services API (SATSA), defined in the JSR-177 specification, is introduced in the thesis to integrate mobile terminal and JAVA SIM CARD, realizing the communication in security between mobile terminal and JAVA SIM CARD.Thirdly, the security services on JAVA SIM CARD are designed and realized, including certification of the holder, consultation of the sharing key, distribution of public key, communication between JAVA SIM CARD and gateway, decentralization algorithm of the key, and designation of the structure of up message and down message based on SMS.Finally, this kind of security solution is applied to mobile police system, and the thesis expatiates on the development about encryption/decryption module and digital signature module in detail.