Research And Implementation Of WPKI In Mobile Electronic Commerce

This article mainly gives a overall design of WPKI platform, and has given the partial definition of the Data Structure and simply implementation . WPKI (Wireless PKI) is proposed by the WAP forum to expand the PKI standard to the mobile interned. WPKI(wireless PKI) provides the security services such as confidentiality, integrity, non-repudiation , and identity authentication for the application based on the mobile Internet . With the improvement of the network bandwidth and the terminal performance brought by the 3rd Generation mobile communications networks , in addition the mobile network has far from the environmental impact and the anytime and anywhere online characteristic, The Mobile E-commerce application based on mobile internet will certainly to obtain the fast development, but lack of security infrastructure based on the mobile Internet becomes the restriction mobile application development. But present domestic and foreign research mainly concentrates to the WPKI research in detail aspects including certificate form, crypto-algorithm and certificate inquiry mechanism, has not formed a set to be able to synthesize each kind of detail technology, can instruct the operator or the authentication organization establishes complete practical WPKI the platform the mature technology standard , and the example which realizes the commercial apply to be less truly.With fully studying and understanding the domestic and foreign research results , unifying the domestic mobile network operation mechanism, the article given a set of WPKI system's overall design, and gives the partial definition of Data Structure and simply implement. The design has two guiding principles , i. As far as possible fusion existing PKI system . ii. The mobile equipment first(As far as possible to consider and reduces the mobile network and terminal working pressure). This article has the strong guiding sense to perfect the WPKI standard and the domestic WPKI system's establishment.Complying with the existing WPKI standard, the design proposed by the article gives the specifically and feasible design stipulation to the certificate form, the crypto-algorithm and the certificate inquiry mechanism, and also gives the concrete work flow design, the construction design and the simple code implement to the system main modules including CA,KMC,RA,OCSP ,and so on. In the design , we select the certificate's URL form based on the LDAP , which guaranteed CA to manage the certificate effectively while reducing the bandwidth pressure to the mobile Internet from the certificate delivering. In the certificate inquiry mechanism, the design innovatively proposed the certificate logging out information buffer technology(CLIB).In practice, the user only contacts with the limited object in a short time . So the design establishes a very small buffer in the terminal, to store the certificate URL which was learned to had been logged out was some time ago. The technology raise the efficiency of certificate status inquiry greatly.In the creation of the article , the author make full use of the practice experience in the Electric Commence Authentication Center of Guangdong Province project, and through leading the development of the " animation tribe " WAP system project and the "MeiLian Ying'ao Multimedia Message Transceiver Platform" project, the author has the full understanding and the assurance to the development of the wireless Internet application system. In the compilation process of the article , the author has carried on the exhaustive communication with the Wireless Network operator and HuaWei company's experts, which guaranteed the design of the WPKI construction plan proposed by the article is technically feasible.