| Certification and authentication service platform of China Mobile phone Tong Bao to China Mobile CA systems and China Mobile communication networks as a basis for building a mobile e-commerce security application environment, through China Mobile authentication authentication service platform for all types of mobile application provides easy and open strong security support services.Certification and authentication service platform is the CA Centre of China Mobile's important applications, e-commerce, alse be the security application baes of e-Government, value-added services, Internet services. Certification and authentication service platform project, based on technical requirements of the PKI/CA, centralized authentication and authorization's service system,packaging the means of cerfiticaiton and authenticaion by operating the dibital signature which is an behalf of the mobile user security identify,while insuring having access of the mobile indivisual user's resource to achieving the business-oriented operating systerm user resources and security services.This paper analyzes the specific business phone reign certification authentication mode:Authentication service model and authentication service model. Focusing on the service platform security architecture design:Analysis and description of which authentication service platform certification security requirements and architecture, and focus on security mechanisms to explain the terminal, BP platform security mechanisms and authentication authentication platform security mechanisms, including access control mechanisms, data transmission mechanisms, audit mechanisms, management and data storage and backup expansion mechanism. On this basis, given the key to the authentication authentication service platform business process design:including certificate management, Certificate of each link. Authentication services in the implementation of certification, certification of random code messages, dynamic password authentication, digital certificate authentication and ID authentication bind specific implementation details are given. Finally, the paper describes several instances of commercial applications such as access to the scene.The research results is that Certification and authentication service platform support users all forms of security access through the www, wap, SMS, STK, RFID, voice, etc; support for on-site payment, remote payment, electronic trading, digital copyright, Mobile Office, and other mobile applications.It also provides ID authentication and authrization, data security, transmission and preservation, security audit, and other application security services, and provides secure payment services with Bank application system for constructing the entire mobile value added services and mobile e-commerce industry value chain. |
