Research And Implementation Of Security Mechanism Of Android Intelligent Financial Terminal

With the rapid development of the mobile network infrastructure, and smart phones, the growing popularity of tablet PCs, the domestic mobile payment into the fast lane, means of payment innovation. Since the Android operating system complete application programming platform with a hierarchical structure, with the general class Android device as a carrier of payment terminals in the mainstream. However, due to the open-source system Android system easily ROOT privileges artificial cracks, there is a big mobile payment security risks; in addition, Android system is the lack of rigorous application signature verification measures, unauthorized applications can be installed properly, which may the presence of the virus-containing malware. Therefore, the design of high-security custom Android smart payment terminals becomes the target of payments and academia common concern.The platform is built by Android smart payment terminal based on AM3357 processor and MAXQ1850 platform. Paper introduces the information security symmetric key, asymmetric key encryption method and its advantages and disadvantages, the theoretical foundation for the operating system security updates and signature verification application implementation; and outlines the Android operating system architecture, and detailed analysis of the security mechanisms native Android permissions management, sandbox, process communications; paper focus on optimizing the Android U-BOOT kernel upgrade, possibility of stop Andriod system is ROOT, and the issuing CA certificate chain credible agreement achieve legality verification of the application by the certificate signature mechanism; Finally, in order to achieve the overall security of payment terminals, this paper use MAXQ1850 chip enables secure storage and physical security key and certificate.Finally, the safety performance of Android smart payment terminals verified. Experimental results show that the operating system kernel updates and application software upgrades can be effective and safe protection, the system can not be ROOT, not digitally signed applications can not be installed properly. In addition, key and certificates are not being tampered with illegally acquired, and to ensure the physical security of hardware Android smart payment terminals, to achieve the overall security Android smart payment terminals.