The Research Of Online POS Payment Security

With the rise of the online payment industry, payment from a single bankonline payment products to diversify the direction of development, convenientpayment payment industry sound presents potential of the vigorous development with.But with the rapid expansion of the user community, people pay more and moreattention to security industry. Security products and solutions develop from theoriginal payment verification based on password to verify identity, gradual evolutionfor security system diversity based on security technology.Online payment as an online interactive process, its security problems aremainly as follows: identity authentication, anti phishing, payment and non repudiation,risk control. This document describes the "online POS payment" which is based onthe "credit card fast payment". And by improving the existing security technology, wedevelop "POS online payment" security technology.By introducing a mathematical method to solve the security problem, andanalyze the characteristics of the security technology solutions. In engineeringpractice, build and implement the integration scheme of security technology, whilethe experiment further corroboration of practical solutions to their own.In this document, solve the problem of identity authentication of onlinepayment by mobile phone authentication technology. Through theoretical analysisclearly mobile phone SMS as mobile phone derivatives, is not only the transmissionof electronic documents, electronic documents but also difficult to forge, and can beused for authentication.In this document, by introducing the agreement signing technology, solve theproblem of online payment against fishing. The key lies in the implementation of anti phishing authentication cross domain authentication, and mobile phone for crossdomain authentication. Security features in the agreement signed at the same time,this paper also provides the agreement signing implementing scheme and evaluationof implementation plan.The merchant system in line with the PCI certification is a prerequisite forbusiness transaction proof effectiveness, by introducing the concept of non memorysystem, business system to satisfy the no memory, can make the systemimplementation plan in line with the PCI certification standards, and to avoid the riskof malicious users.Analysis of the security technology, the feasibility to analyze the paymentsecurity integration scheme is provided in this paper. At the same time, throughmathematical modeling and mathematical certification integration scheme has bettersecurity properties, and can basically solve the safety problems of the online payment.The realization of the system and realize the simulation of simple validatedintegration technology security.