The Research Of Security Mechanism In Mobile Wallet Based On OTA Technology

In the21st century, with the rapid development of mobile Internet and thegrowing popularity of smart phones, a variety of new payment methods continue toemerge, near-field payment is one of them. Currently, NFC layout of telecomoperators-handset manufacturers and financial institutions is accelerating, mobilephone users can replace a special SIM cards, install mobile wallet client, simulatemobile phones into-all kinds of electronic cards, and take advantage of NFC based onthe RF technology to complete the credit-card consumption. The popularity of NFC(Near Field Communication) will lead a revolution of electronic devices usage thatyou just need take the phone to go out, and you will be freely in the buses, subways,supermarkets, gas stations, companies and other places. Although NFC transactionsaccounted for the total percentage of mobile payments are still small, the potentialmarket is huge, the industry is very optimistic about the prospects for NFC mobilepayments. Decision to the rise and fall of various factors in the NFC industry, thesecurity issue is still a very important issue, so selected NFC security problem areasfor the study has important significance.Before using near-field mobile wallet to pay, there are two essential steps: First,download the card application, the second is to recharge the wallet, these two stepscan be done in the operating room, but for the users, the user need go to business hallto perform the transactions for every increase a new application, or top-up for thephone.Therefore operators will be applied to your phone OTA wallet, OTA using awireless communication network to transmit data, while providing convenient, on theother hand, it also brings a variety of security issues. If the mobile wallet phoneinstallation fall into the wrong hands, security measures are not reliable, you maybrush stolen wallet account. OTA download process, the greatest concern is the safetyof the identity of legitimacy and transmission confidentiality. The purpose of thispaper is to analyze security threats through the mobile wallet service based on OTAtechnology faces, pointed out shortcomings of current uses identity authentication andencryption methods, and to improve the program, log on to mobile wallet certificationcard to download and air recharge to provide the necessary security.The completed work includes the following subject areas: Aim at the securityrisks for easily stealing the existence static password, a PIN-based authentication withstatic password authentication could provide a double insurance that if you lose yourphone, it will not be posing identity; proposed payment password with dynamicverification code payment authentication mode, even if the static payment password is stolen, the user can still prevent illegal operations.3DES is short and has week keys, wallet for mobile phones improved encryptionscheme using MAC verification ensure data integrity, the use of more secure AESalgorithm to generate a session key Kc; mobile phone wallet client needs analysis, theuse of Android SDK development platform, designed and implemented using the Javalanguage to develop a core function of the client’s mobile wallet, and its safetyanalysis.The results show that the proposed topic-based OTA technology securitysolutions in mobile wallet can effectively protect the security of air recharge and cardsdownload, greatly reducing the data leakage and security risk wallet stolen. Thesubject of design and development of mobile wallet client is open and modular, notagainst a specific home operator, has the versatility and practicality, provides areliable security solution for operators to large-scale development of the near fieldpayment service.