Safe mobile macro-payment data processing system

Abstract

The invention relates to a safety mobile payment data processing system, in particular to a system for remote mobile macro payment data processing. The inventive system comprise four portions as a customer proxy, payment gateway, a supplier proxy, a supplier bank, and a receive bank. The inventive system uses the bank card or other virtual account as payment account, without mounting WPKI digit certificate on mobile terminal, and the supplier check is based on general PKI, via simple guide process to improve the end-to-end safety of WAP channel on the mobile terminal based on check key exchange and encrypt algorism, and confirm the calculation efficiency of the mobile terminal, to flexibly apply various mobile payment service modes.

Description

technical field [0001] The invention relates to a secure mobile payment system, in particular to a secure payment system for remote (relative to short distance) mobile macro payment. technical background [0002] Mobile payment is an emerging payment method. At present, a secure mobile payment system is the core technology of mobile payment and has become one of the key factors restricting the development of mobile payment. Due to the mobile network (characterized by low bandwidth, large delay, low connection reliability, denial of service when out of coverage area, and vulnerable to eavesdropping and attacks), mobile terminals (usually mobile phones, characterized by computing power limited by memory and external memory) size limit, the screen size is small, the input method is far less convenient than computer keyboard input) and the mobile payment gateway (characterized by the short length of the message that can be processed), which makes the design of mobile payment, e...

AI Technical Summary

Problems solved by technology

SMS-based mobile payment processing system, because the SMS information is not encrypted and limited by the length of the message, it can only be used for small payments, and the real-time performance is poor; WAP-based mobile payment data processing system, in WAP Before 2.0, there was a WAP gateway vulnerability, and the WTLS encryption of the WAP transmission channel itself could not meet the requirements of large payment

Therefore, the existing domestic mobile payment data processing systems generally bind the customer bank card and the SIM card number of the mobile terminal to ensure payment security. The business is limited to the field of utility bill payment

[0004] At present, most of the mobile payment data processing systems in the world adopt WPKI-based security measures for mobile terminals, which require hardware replacement of mobile phones and SIM cards, and users need to purchase digital certificates, which has high user costs; The computing power of the terminal is limited, and the implementation of secure operations such as digital certificates and digital signatures during the payment process will lead to a long payment process (up to several minutes), resulting in cumbersome payment data processing procedures, which is not conducive to users' cultivation of mobile payment usage habits; Adapt to multiple payment methods at the same time

Images