The Security Risk Analysis And Research Of Mobile Payment System

With the growing popularity of smartphones and the rapid development of online banking, mobile payment activities become frequently and the form of mobile payment are changing, so that the mobile terminal users are more dependent on mobile payments. In the meantime, the security of mobile payment activities also begins to receive attention, such as the threat of terminal’s hardware and applications, wireless network and mobile payment processing platform. Hence exploring the security risks of mobile payment system, finding the appropriate security policies, and then developing a secure mobile payment platform become a serious problem.This paper provides detailed analysis and research on mobile payment from architecture and security risks, and proposes a series of secure suggestions. The main work of this paper covers researching preliminary background of the related technical knowledge, which includes the payment form based on SMS, WAP, NFC and key secure technology in mobile payment; the entire process of mobile payment system is arranged into the application layer, network layer and payment processing layer, and the function of each layer is described concretely; also security risks at all levels are analyzed, focusing on analyzing the security of terminal application, wireless network and payment transaction. For the safety of mobile terminals, the threats such as transaction information disclosure or leakage of the user’s bank account information resulting from hardware and application software is described; in terms of wireless network security, it focuses on WAP and WIFI technology vulnerability, including information confidentiality of the transmission process, authentication and access control, and gives coping strategies; in addition, based on the present security protocols SET secure payment protocol made some suggestions for improvement, it proposes a new protocol based ECC and the safety and performance of the new agreement are assessed at last. Theoretical analysis shows that the efficiency of ECC is higher than RSA. In the number of signing the certificate verification, asymmetric and symmetric encryption the new protocol is also significantly reduced than SET protocol, so the current mobile terminal and network capabilities can support this protocol to ensure safe and effective mobile payment process.