Design And Implementation Of NFC Mobile Payment Management System

With the rapid development of mobile Internet, the traditional pattern of mobile communication market has been changed. The convenience, authentication, identification, and some other unique advantages of mobile application make mobile payment the key point of the development of the market. Ways of using WAP, SMS, and etc, to access to the remote payment system have been researched for many years, While the study of Near Field Mobile Payment System is rare, and there is no standard to follow, including the management scheme of all the information, the realization scheme of the mobile terminal, the secure transmission of the data, and the specific definition of all the transaction process,which are rather important to the future development of NFC mobile payment business in our country.NFC is the extension of RFID technology, and its strict requirements of data transmission distance makes it the best choice in the Payment System. So the thesis designs a new NFC mobile payment system, which can not only realize the payment functions, but also manage all the related entity information, reaching a higher requirement of security.The thesis will first discuss the implementation of NFC technology realization on mobile terminal.Analyzing the feasibility and safety of the previous plan, we determine the NFC-SIM as the final solution. Through the analysis of the mobile payment system architecture until now, we choose an operation mode which is dominated by Banks, then divide the system into four parts:Application platform, Payment platform,TSM(SP platform) and TSM(D&M platform). Considering the design of transaction processes and the whole database, we define a series of APIs and transport protocols,realizing the secure transmission and storage of the data.Taking the security requirements into account, we first implement some attacking experiments on the CPU card and the bus card, and then introduce an authentication method based on the users’location information and an application of modified MAC algorithm based on AES, later we carry out a simulation to compare both algorithms,and come to a conclusion that the new method will bring a20%improvement in effectiveness. Finally, we intergrate the system with TSM(Trusted Service Management) platform, including the design of the whole download and management process of Card Applet, in which way we further improve the security of the system.