Research On The Privacy Protection Of NFC Mobile Payment System

The mobile Internet is developing rapidly,all kinds of emerging applications and value-added business arises at the historic moment.NFC mobile payment technology is nowadays one of the most popular ways of payment,which combined with Near Field Communication technology.NFC technology evolved from radio frequency identification technology and the network interconnection and interflow,is a kind of electromagnetic induction based short-range high frequency wireless transmission mode.NFC mobile payment use wireless channel transmission mode,so in the front-end of payment system user authentication access and in back-end business settlement,the privacy and security of users and businesses can not be guaranteed.In this paper,we firstly summarize the NFC technology,the definition and classification of mobile payment technology,mobile payment business mode,system composition,privacy protection and payment system security threats,and then briefly described the insecurity exist in NFC mobile phone payment for the privacy issues.Secondly,we analyze the problem of payment system front-end user security authentication access,find the shortcomings of some existing radio authentication protocol.This paper puts forward a security two-way authentication protocol based on the combination of hash function and random number,given the implementation process,and analyzed the performance of its security and efficiency,formal proof with BAN logic analysis results show that this protocol is safe and effective,low resource consumption,reduces the label cost,can realize the expected security goals.Thirdly considering the process of settlement between business and payment platform in small mobile payment,user consumption habits and purchasing power and other private data may be stolen by attackers,for businesses anonymous privacy protection and data transmission with security and efficiency,we adopt the Onion Routing technology thought and completed improvements,introduce the front-end network model in the sender,in order to better hide business identity,realize the sender anonymous.Finally,contrary to small mobile payment requirement for fast and timeliness,propose adjacent routing method to establish an anonymous path,on one hand,overcome the onion routing using connection-oriented manner,when few network packets be transmitted,the link utilization is low;on the other hand also can better confusion businesses which ask public payment platform for settlement,resist traffic analysis from attackers,improve the anonymous performance.Security and efficiency analysis show that the improved anonymous payment network can enhance the safety and anonymity of users and businesses.