Abstract:
Mobile payment is an important and core application of information safety technology in mobile Internet,and the mobile terminal authentication is the important issue needing to be solved first in mobile payment. In order to meet the special requirement of mobile payment, such as mobile terminal resource constraints from portable needs and mobile terminal update acceleration from more and more rich personalized needs, the steps of terminal authentication need to be as simple as possible, the dependence on equipment needs to be as little as possible, and the customer’s operation experience also need the authentication to be as simple as possible. So there should be a simplified and independent of equipment’s terminal authentication. Therefore, a mobile payment model with simplified terminal authentication is introduced. The model is designed based on the “pre-trust” hierarchical certification model and the payment system framework with a character of “public-service-domain”. To achieve the purpose of controlled system safety and simplified terminal authentication, a credit transfer chain starting from merchants is built, as well as an account addressing and management mechanism are designed. Meanwhile, related research review, system framework, authentication model and corresponding payment protocol are given. Furthermore, the security of the protocol is analyzed.