Research Of The Secure Communication Technology On Mobile Terminals

As the mobile terminal is becoming more and more intelligent and open, many of its security flaws have appeared. Many users often send bank account numbers and passwords, important notice, and personal photos, and other personal secret information via SMS and MMS. But the public mobile communication systems do not transmit user data with end-to-end encryption, so they cannot guarantee the security of user data. With the coming of mobile internet, applications of mobile online bank have appeared, and their security requirements are much higher. Therefore, this paper will focus on the secure communication technology on mobile terminals, including the end-to-end encryption for public mobile communication systems and the security of mobile online bank.Firstly, this paper proposes an end-to-end encryption scheme for public mobile communication systems. This scheme uses a smart card to complete encryption and decryption operations and to store keys safely, and so it can resist attacks from the mobile terminal; it adopts multi-level key management mechanism, updating keys regularly to ensure that the keys won’t be cracked; it achieves mutual-authentication between terminals and KMC, and also the authentication from application to users. The scheme can guarantee the confidentiality and integrity of messages during transmission and storage on the terminal.Secondly, this paper completes the terminal program design of the end-to-end encryption for public communication systems. We complete the coding of SMS and MMS end-to-end encryption on Windows Mobile and Symbian. The main process is programmed by C++language, and this part of the codes can be used on other mobile platforms. The encryption program can ensure security of SMS and MMS during the transmission and storage processes.Finally, this paper proposes a mobile online bank’s security solution based on smart bank card. The smart bank card has a built-in security module which is similar to the USB Key; it also has a display and buttons. It communipates with the mobile terminal by NFC. The user enters a password on the bank card to start it, and then the card will authenticate with the bank server. The transaction information would be sent to the bank card, and then be displayed on the card. After the transaction information is confirmed by the user, it will be signed and encrypted, and then be sent to the bank server. This scheme has a high level of security, it can meet the requirements of confidentiality, integrity, availability and non-repudiation.