Research And Implementation Of Key Technology For Mobile Payment Based On HCE-SD

Near Field Communication(NFC) is a proximity coupling technology, which operates in the HF frequency band at 13,56 MHz. Based on the NFC, the Android Operating System(OS) v4.4 introduces host-based card emulation(HCE) that does not involve a secure element(SE) on the handset. The credentials used by this HCE service can be stored in the mobile payment application itself, or they could be stored in other secure locations such as a trusted execution environment(TEE) or an Secure Element(SE). Therefore, HCE removes the dependency of trusted service manager(TSM) infrastructure on Secure Element(SE). Based on HCE, many leading enterprises, such as Google, Visa, MasterCard, Tom Hortons and BBVA have commercially launched a mobile contactless HCE-enabled payments service, of which the credentials are stored securely on a secure server in the cloud.This HCE payment services based on cloud servers require mobile devices to be connected to the Internet, and increase the payment delay, losing convenience and timeliness.To solve the inconvenience and weak timeliness problem of the payment, the management problem of electronic application lifecycle and electronic cash and the security problem of PAN in payment processes, based on HCE technology and SD card technology, the solutions proposed in this thesis include the following four aspects:1. Research on HCE technology and financial SD card technology. Based on Android platform, the HCE payment application framework is proposed, of which the payment credentials is stored securely in the secure element(SE) on financial SD card, not only solving the inconvenience problem of the payment, but also reducing delay. And the HCE payment application framework also owns the characteristics of plug and play technology and service that allows mobile the device can change different financial SD cards. The HCE payment application framework brings not only a strong security and timeliness, but also a good payment experience for users.2. Research on TSM and Android application development technology. Based on services provided by TSM platform, application lifecycle management and electronic cash management framework is proposed, including SE application download, SE application installation, SE application personalization, electronic cash load, load record inquiry and electronic cash balance inquiry. Through the research of TSM framework and server framework, the server framework that satisfies the needs of electronic cash management is proposed, providing electronic cash balance inquiry, electronic cash load and load record inquiry for application.3. Research on Tokenlization payment system and data assembly and data resolution of Application Protocol Data Unit(APDU). Following the Token technical specification proposed by EMVCo, based on HCE technology and SD card technology, a new Token-oriented offline payment system framework is proposed, solving the security problem of the bank card account number(PAN) in the transactions, which has greatly improved the security of the PAN and reduced the possibility of the PAN leakage in the payment processes, while making use of bank cards more convenient and faster.4. Research on Java Card Runtime Environment(JCRE), Java Card development framework, Java Card messaging mechanism, Personal Computer/Smart Card(PC/SC) technology and PC application development technology. Based on SE, Token management application framework is proposed, including Token storing, Token loading and Token deleting, solving the management problem of Token on financial SD card and the security problem of Token on HCE payment application. Meanwhile, based on Windows platform and PC/SC technology protocol, a new POS terminals framework is proposed, meeting needs of Token offline payment system.