Design And Implementation Of A WAPI-Based Mobile Security Payment Solution

With the wide application and development of O2O (Online To Offline) mode in E-commerce, Tencent, Baidu and other traditional Internet giants rapidly rush into the Mobile E-commerce field, which resulted in a breakout growth spurts in Mobile Payment Market in2013. Moreover the deal size in the Mobile Payment Market by the3rd party has increased by more than7times in less than one year. However the security of Mobile Payment is facing an increasingly severe situation with the fast development of Mobile Payment.In order to deal with the security threats in Mobile Payment, this paper proposes an end-to-end framework of mobile security payment based on the WAPI (Wireless LAN Authentication and Privacy Infrastructure). The framework covers all the links of Mobile Payment and it stipulates authenticated servers to manage the users and merchants in the system. Based on the authentication mechanism of authenticated servers, the framework guarantees that all the users and merchants in the system are credible. Furthermore this study introduces the SSL (Secure Sockets Layer) communication protocol to ensure the security of data communication, and adopts other two identity authentication mechanisms to protect the mobile terminal, include the digital signature as well as the dynamic keys.Besides a detailed application process and issue mechanism of WAPI certificate is given on the basis of the in-depth description of WAPI, SSL protocol and other key technologies. Not only can the mechanism simplify the connection process with WAPI certificate, but it also can verify user identity and prevent not-trusted users access. In addition, the certificate chain for SSL connection based on the WAPI certificate proposed in this paper can effectively reduce the difficulty of managing system certificates, which combine the SSL communication and security system based on WAPI certificate.Finally the paper conducts many simulations on the key technologies and modules in the framework. The simulations verified that our framework based on WAPI can improve the security of Mobile Payment.