The Analysis And Research On Secure Mobile Commerce Protocol

Today with the development of mobile technology and internet, m-business becomes the unavoidable trend. A safe and fair mobile commerce is the focus of researches, so the safety of the mobile commerce protocol, as the appliacation service layer of mobile technology, is more and more attractive. Colored Petri net (CPN) is a kind of senior Petri net, with stringent theoretical basis, which has successfully to analysis of protocol and workflow. In the thesis introduces an approach of analyzing m-payment protocol attributes with CPN, and designs a new safe mobile commerce protocol base on specific properties we got after analyse, then simulated the protocol and verified its safety.First the thesis introduces the safe attributes of mobile commerce protocol, the existing formal approaches of analyzing mobile commerce protocol and their problem. Then introduce the details of CPN and its simulation CPN Tools.Then, a new approache of modeling mobile commerce protocol base on CPN is proposed. As an example, a typical mobile payment protocol KSL is used for introducing how to analysis attributes using CPN Tools and state space. Finally we get the KSL protocol satisfy the authentication,privacy,integrity,non-repudiation attributes, but accountability, and the modified KSL, which fit accountability, is not fair. And then with logic analysis, the thesis verifies CPN can find the new loopholes of mobile commerce protocol, and summarises the general conditions of safe mobile commerce protocol which satisfied attributes.Last, based on the conditions of a mobile commerce protocol generalizesd above, the thesis proposes a new m-business protocol including a verifying authentication protocol and an ambitious m-payment protocol. Afer simulated the protocol, the thesis verified it satisfy the attributes such as authentication,privacy,integrity,non-repudiation,accountability and fairness, and it will not influence the transmission speed on mobile devices .