PBOC金融應(yīng)用植入NFC手機的若干關(guān)鍵問題研究
發(fā)布時間：2018-08-24 16:25
【摘要】：NFC技術(shù)是一種新興的近距離無線通訊技術(shù),基于NFC協(xié)議棧而開發(fā)的全終端模式NFC手機在傳統(tǒng)智能手機中集成了NFC控制器、XFC天線和安全模塊(SE),使得其具備了與傳統(tǒng)非接觸式金融IC卡相似的硬件功能。另一方面IC卡之所以具備金融功能是由于在IC卡的芯片內(nèi)植入了金融應(yīng)用,該應(yīng)用按照人民銀行頒布的PBOC標準開發(fā),加載了金融應(yīng)用的IC卡可以實現(xiàn)在國內(nèi)的金融終端上進行聯(lián)機和脫機的金融支付。很顯然,直接將金融應(yīng)用植入到全終端NFC手機的SE芯片中便可以使手機具備金融IC卡同樣的支付功能,同時結(jié)合手機智能終端的優(yōu)勢,可以創(chuàng)造出更為便捷的金融支付工具,具有極大的商業(yè)價值。然而由于下面兩個問題直接影響了具備金融功能的全終端NFC手機的商用,因此對其進行研究既有理論意義也有實際商用價值。 1.傳統(tǒng)金融IC卡的生產(chǎn)過程是集中式工廠化的,其金融應(yīng)用植入IC卡芯片的過程是在一個相對獨立且安全網(wǎng)絡(luò)環(huán)境中進行,而全終端NFC手機的商業(yè)運作模式導(dǎo)致了金融應(yīng)用植入SE芯片的過程是由客戶主導(dǎo)并通過廣域網(wǎng)完成的,這對原有的安全制卡體系造成了很大的沖擊,必須引入新方法和新技術(shù)來應(yīng)對。 2.手機模式的金融IC卡會造成充值過程的差錯概率明顯增加,這使得傳統(tǒng)差錯處理的潛在問題凸顯,如果沒有一套更為合理的差錯處理方法會造成具備金融功能的NFC手機的推廣困難。 本文著重研究這兩個方面的問題。主要的工作概括如下： 1.針對傳統(tǒng)SCP02協(xié)議簇定義的密鑰分散模型的不足,提出了具備終端排它性的芯片主控密鑰分散模型,可以更為有效的避免來自鏈路層的各類攻擊。 2.提出了低鏈路相關(guān)性的通訊方法,該方法通過改造APDU指令,使得收發(fā)的APDU指令自身具備保證數(shù)據(jù)機密性和完整性的能力,降低了對傳輸鏈路通訊安全的依靠。 3.提出了安全的金融個人化模型,該模型中的帶發(fā)卡行授權(quán)驗證的個人化解決方案可以實現(xiàn)客戶主動式的通過廣域網(wǎng)進行的金融應(yīng)用植入手機的過程,同時可以保障植入過程中數(shù)據(jù)的安全性。 4.提出了一套統(tǒng)一解決圈存差錯的方案,該方案不破壞金融標準中定義的交易流程,只需要對原有金融應(yīng)用進行少量改動就可以解決充值差錯帶來的爭議問題,同時如果對金融終端進行相應(yīng)的改造還可以實現(xiàn)充值差錯的自動處理,具備易于實現(xiàn),可分步實施的優(yōu)點。 以上的工作和成果在實際項目中得到了有效性和可靠性的驗證,并實現(xiàn)了小批量的市場推廣。 最后為了進一步展現(xiàn)植入了金融應(yīng)用的全終端NFC手機的商業(yè)價值,本文給出了一個通過對全終端NFC手機內(nèi)的金融支付環(huán)境的動態(tài)管理,實現(xiàn)其內(nèi)置金融應(yīng)用的多模式展現(xiàn),從而虛擬出借貸合一銀行卡的方案,該方案巧妙地利用了NFC手機的硬件架構(gòu)優(yōu)勢,提供了更為人性化、便利化的金融產(chǎn)品。
[Abstract]:NFC technology is a new kind of close range wireless communication technology. The all-terminal mode NFC mobile phone based on NFC protocol stack is integrated with NFC controller and security module (SE), in the traditional smart phone so that it has similar hardware functions as the traditional contactless financial IC card. On the other hand, the IC card has financial function because of the financial application embedded in the IC card chip, which is developed according to the PBOC standard issued by the people's Bank of China. IC card loaded with financial application can realize online and offline financial payment on domestic financial terminal. Obviously, directly embedding the financial application into the SE chip of a full-terminal NFC mobile phone can enable the mobile phone to have the same payment function as the financial IC card. At the same time, combining the advantages of the mobile phone smart terminal, we can create a more convenient financial payment tool. Of great commercial value. However, the following two problems directly affect the commercial use of full-terminal NFC mobile phones with financial functions, so the research on them has both theoretical and practical commercial value. 1. The production process of traditional financial IC card is centralized and the process of its financial application implanted in IC card chip is carried out in a relatively independent and secure network environment. And the commercial operation mode of the whole terminal NFC mobile phone leads to the process of inserting SE chip into the financial application, which is completed by the customer and through the WAN, which has a great impact on the original security business card printing system. New methods and technologies must be introduced to deal with. 2. The financial IC card of the mobile phone mode will cause the error probability of the recharge process to increase obviously, which makes the potential problem of the traditional error processing prominent. Without a more reasonable set of error-handling methods, it would be difficult to popularize NFC phones with financial capabilities. This paper focuses on these two aspects. The main work is summarized as follows: 1. Aiming at the deficiency of the key dispersion model defined by the traditional SCP02 protocol cluster, a chip master key dispersion model with terminal exclusivity is proposed, which can avoid all kinds of attacks from the link layer more effectively. 2. In this paper, a communication method of low link correlation is proposed. By modifying the APDU instruction, the received and sent APDU instructions have the ability to guarantee the data confidentiality and integrity, thus reducing the reliance on the security of transmission link communication. A secure financial personalization model is proposed, in which the personalized solution with card issuing bank authorization verification can realize the process of mobile phone implanting into the financial application through WAN. At the same time can ensure the implantation of data security. 4. In this paper, a unified scheme is proposed to solve circular deposit errors. This scheme does not destroy the transaction flow as defined in financial standards, and it can solve the controversial problems caused by recharging errors only by making a few changes to the original financial applications. At the same time, if the financial terminal is reformed, it can also realize the automatic processing of the recharge error, which has the advantages of easy to realize and can be implemented step by step. The above work and results have been verified in the actual project, and the small batch marketing has been realized. Finally, in order to further demonstrate the commercial value of the full terminal NFC mobile phone embedded in the financial application, this paper presents a multi-mode display of the built-in financial application through the dynamic management of the financial payment environment in the full terminal NFC mobile phone. The scheme makes use of the advantage of hardware architecture of NFC mobile phone and provides more humanized and convenient financial products.
【學(xué)位授予單位】：復(fù)旦大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2012
【分類號】：TN929.53;F830.49
本文編號：2201367
[Abstract]:NFC technology is a new kind of close range wireless communication technology. The all-terminal mode NFC mobile phone based on NFC protocol stack is integrated with NFC controller and security module (SE), in the traditional smart phone so that it has similar hardware functions as the traditional contactless financial IC card. On the other hand, the IC card has financial function because of the financial application embedded in the IC card chip, which is developed according to the PBOC standard issued by the people's Bank of China. IC card loaded with financial application can realize online and offline financial payment on domestic financial terminal. Obviously, directly embedding the financial application into the SE chip of a full-terminal NFC mobile phone can enable the mobile phone to have the same payment function as the financial IC card. At the same time, combining the advantages of the mobile phone smart terminal, we can create a more convenient financial payment tool. Of great commercial value. However, the following two problems directly affect the commercial use of full-terminal NFC mobile phones with financial functions, so the research on them has both theoretical and practical commercial value. 1. The production process of traditional financial IC card is centralized and the process of its financial application implanted in IC card chip is carried out in a relatively independent and secure network environment. And the commercial operation mode of the whole terminal NFC mobile phone leads to the process of inserting SE chip into the financial application, which is completed by the customer and through the WAN, which has a great impact on the original security business card printing system. New methods and technologies must be introduced to deal with. 2. The financial IC card of the mobile phone mode will cause the error probability of the recharge process to increase obviously, which makes the potential problem of the traditional error processing prominent. Without a more reasonable set of error-handling methods, it would be difficult to popularize NFC phones with financial capabilities. This paper focuses on these two aspects. The main work is summarized as follows: 1. Aiming at the deficiency of the key dispersion model defined by the traditional SCP02 protocol cluster, a chip master key dispersion model with terminal exclusivity is proposed, which can avoid all kinds of attacks from the link layer more effectively. 2. In this paper, a communication method of low link correlation is proposed. By modifying the APDU instruction, the received and sent APDU instructions have the ability to guarantee the data confidentiality and integrity, thus reducing the reliance on the security of transmission link communication. A secure financial personalization model is proposed, in which the personalized solution with card issuing bank authorization verification can realize the process of mobile phone implanting into the financial application through WAN. At the same time can ensure the implantation of data security. 4. In this paper, a unified scheme is proposed to solve circular deposit errors. This scheme does not destroy the transaction flow as defined in financial standards, and it can solve the controversial problems caused by recharging errors only by making a few changes to the original financial applications. At the same time, if the financial terminal is reformed, it can also realize the automatic processing of the recharge error, which has the advantages of easy to realize and can be implemented step by step. The above work and results have been verified in the actual project, and the small batch marketing has been realized. Finally, in order to further demonstrate the commercial value of the full terminal NFC mobile phone embedded in the financial application, this paper presents a multi-mode display of the built-in financial application through the dynamic management of the financial payment environment in the full terminal NFC mobile phone. The scheme makes use of the advantage of hardware architecture of NFC mobile phone and provides more humanized and convenient financial products.
【學(xué)位授予單位】：復(fù)旦大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2012
【分類號】：TN929.53;F830.49
【參考文獻】
相關(guān)期刊論文 前7條
1 蔡逆水;;基于RFID專用讀寫模塊和IC卡的手機支付新方案的研究[J];電信科學(xué);2006年10期
2 程庭,張明慧,石國營;一種基于DES和RSA算法的數(shù)據(jù)加密方案及實現(xiàn)[J];河南教育學(xué)院學(xué)報(自然科學(xué)版);2003年02期
3 馬建輝,王志瑋,王國忠;二級密鑰體系在加密密碼設(shè)備上的應(yīng)用方案[J];金卡工程;2005年10期
4 李星藝,欒達,陳章龍;IC卡的操作系統(tǒng)-COS[J];計算機工程;1998年01期
5 董威;楊義先;;一種跨行業(yè)多應(yīng)用智能卡系統(tǒng)模型及實現(xiàn)[J];計算機工程;2007年08期
6 陳勇;金融IC卡的密鑰管理[J];中國信用卡;2000年10期
7 王宇偉;張輝;;基于手機的NFC應(yīng)用研究[J];中國無線電;2007年06期
相關(guān)碩士學(xué)位論文 前8條
1 李小朋;基于NFC技術(shù)的電子錢包系統(tǒng)設(shè)計與安全性研究[D];北京郵電大學(xué);2007年
2 付志娟;IC卡的信息安全性研究[D];蘭州理工大學(xué);2008年
3 申瑋;NFC移動支付運營模式研究[D];北京郵電大學(xué);2008年
4 張旭;基于JavaCard的智能存儲卡多行業(yè)應(yīng)用研究[D];北京郵電大學(xué);2008年
5 李翅;基于JavaCard和NFC技術(shù)的手機錢包關(guān)鍵技術(shù)研究[D];湖南師范大學(xué);2009年
6 和浩;基于Java Card的金融多應(yīng)用IC卡原型系統(tǒng)設(shè)計與實現(xiàn)[D];華中科技大學(xué);2008年
7 葉曉麗;基于NFC技術(shù)的移動支付系統(tǒng)的硬件設(shè)計研究[D];蘇州大學(xué);2009年
8 陳春光;基于非接觸支付市場分析的電信與金融產(chǎn)業(yè)融合研究[D];北京郵電大學(xué);2010年
，本文編號：2201367
本文鏈接：http://sikaile.net/guanlilunwen/huobilw/2201367.html
最近更新
教材專著
