| With the arrival of the mobile Internet era, the popularity of smart phones has become a major trend in the mobile phone market. The type of mobile intelligent terminal has changed the way of life of many people, to provide people with more powerful and more personalized applications. As the rapid development of secure service with the needs of the market, it is important to protect the data in the transaction process to provide users in a secure environment. Sensitive data of users can be securely stored through the collaboration between Java-SIM card and smart phones, which can make sure the sensitive data can’t be stolen and transaction packets can’t be cracked to establish a secure and trusted environment for users.In this paper, a solution of the collaboration between Java-SIM card and smart phones based on openmobile is proposed through the research and analysis of the security implementation mechanism in current e-commerce applications. An application on Android OS can communicate with the specific applet in the Java-SIM card through openmobile, and the data in the mobile payment process can be safely protected by this way with the integration of PKI authentication technology. On the other hand, the sensitive data, such as keys used to encryption and signature, etc. can be stored by an absolutely safe way theoretically. A system based on GP specification security framework is designed to provide unified management and maintenance of the applets in the Java-SIM card that has been issued to users. We have designed the overall system architecture and modules based on collaboration between Java-SIM card and Android OS, which contains an application on Android OS, an applet on Java-SIM card, a security server and a multi-application management server, and the system is combined with the mobile applications which have the high security requirements.By the support of multi-application Java Card platform, the application on Android OS can manage the applets on Java-SIM card dynamically and remotely, such as installation, deletion, etc. |