Research And Design Of A Kind Of Mobile Commerce Authentication System

With the prevalence of the Internet and rapid development of mobile communications, mobile commerce step into people's sight as a new financial payment mode. However, there is still a big problem-security. If security issue can be solved properly, both the consumers and the partners would be more confident, besides, business frauds would be reduced and operating cost of the system would be decreased. At present, identity authentication system based on security protocol is one of the most effective way to solve the security issue of mobile commerce. So, it is rather important and necessary to design a secure authentication system which can be applied on mobile commerce authentication.According to the security issues in mobile commerce authentication system, we do some research on the current situation and the future of mobile commerce, and design a mobile commerce authentication system using the characteristic of ID cards combined with user password. The system uses C/S mode, the client is composed of high-performance ARM9 processor and a RFID module used to get the ID card message. Besides, a 3.5 inches LCD is involved to display the authentication results. The authentication protocol is realized based on ECC, using 'challenge-response' mechanism to achieve the goal of mutual authentication. Therefore, the system performance is highly improved. Finally, we do some tests through the Ethernet, and the authentication can be accomplished in few time and the system's proved to be feasible and effective.The RF module is introduced to read the ID information for the security liability of the authentication system. Comparing with those whose security rely on biometric information such as fingerprint, what we read is strings enciphered, not plaintext of users' information. So this system is more likely to be accepted by the common users, as they needn't worry about the privacy revealing. The system could have a bright prospect, it can be applied in supermarkets, gas stations, garages and other large amount mobile payments.