Research And Application Of Trusted Service Management Basedon Financial IC Card

In recent years, with the development of mobile payment business in virtue of the technology of IC card, all kinds of IC cards filled with people’s lives, carrying a large number of card started to become a burden, the demand for one card with multi-purpose is rapidly growing within the market. In 2011, the People’s Bank of China started the financial IC card era with issuing the working advice of the People’s Bank of China on promoting the application of financial IC card. With the publishing of the PBOC3.0 specification, and the attending of the extension application, the financial IC card have greatly enhanced the ability and advantage of one card with multi-purpose in public services such as subway, bus and so on. However, there is no convenient way to allow the service providers in different industries to get access to the extension application of financial IC card and serve people rapidly. That is which problem this thesis would solve.In this thesis, the author firstly studies the related technology and characteristic of Java Card with the structure of Java Card system, the structure of the files in Java Card and the interaction of informations. Secondly, it comes to the near field communication technology and DES encryption technology. And then, the author makes a deep research on the PBOC3.0 specification, including the personalizations requirements, the safety requirements and application instructions of extension application. Finally, based on the results of studies above, the author designed a trusted service management framework on financial IC card for extension application creatively.The main work and contributions of this thesis: 1 studying and designing a trusted service management framework on financial IC card for extension application with application managment, security management, card management and user system management; 2 describing the implementation of this framework through a real practical project; 3 verifying the validity of the design of this framework through getting a real service provider to access to the implementation and serve people.