Sim-card Identity Authentication: A Case Study On Chinamobile

Dynamic password (one time password used in other literatures) is a password generated in an independent individual portable device according to an encryption algorithm which links to dynamic events. An authentication system based on dynamic password is consisted of two major parts:backstage authentication servers and portable device clients. The system is widely used in remote identity authentication and security transaction in real practice.This dissertation is a case study on the usage of dynamic password system in e-Commerce by China Mobile. It examines the whole project of SIM-card authentication with a focus on the delivery of authentication in the Internet to China Mobile customers. This dissertation explains the utilization of multi-technologies such as OTPs, STK menus in SIM-card and OTAs. It, in particular, brings attention to the offline generation of OTPs and the synchronization mechanism to correct the asynchronous problems whist generating OTPs. This case study reveals how China Mobile achieved the leader status of security authentication in the Chinese mobile communication market, and offers a reference of the prospect of e-Commerce by exploiting new technology.