手机支付环境下财产及隐私保护研究

There is urgent requirement of property and privacy preserving in mobile payment. We will focus our research on two aspects. One is the green authentication method for mobile Near Field Communication (NFC) payment. The other is one-on-one fair mobile internet payment method. Based on the limitations of processing capability, storage space and power supply of mobile NFC payment, we will combine overhead quantitative evaluation method and partially outsourcing to reduce the computation, communication and storage overhead for user terminal, as well as to present revocable efficient mutual authentication method in multi-application environment and efficient mutual authentication method with strong security, which can meet the secure requirements of synchronization and non-denial of service. On the other hand, for the new requirement of social network in mobile internet, we will propose no third-party involvement mobile internet payment method and abuse-freeness method, after we study on new security model and key technologies combined conic curve, concurrent signature, zero knowledge proof, ring computing base on the characteristics of mobile internet. Our research will provide user's property and privacy protection methods in mobile payment application. The researches are in the frontier of this area. To best of our knowledge, partial research contents, such as no third-party involvement mobile internet payment method, are not available in existing literatures up to now. Therefore, our research is both theoretically and practically valuable. We believe it will be an important contribution the development of mobile payment.

本项目针对手机支付环境下财产及隐私保护需求，重点研究手机近场支付绿色认证方法和一对一公平手机互联网支付方法。针对手机近场支付在计算、存储和电源供给的局限性，通过融合开销量化评价方法和计算外包技术降低用户终端的计算、通信、存储开销，实现可支持同步和抵御拒绝服务安全要求的高安全级别的高效双向认证方法和多应用环境下可撤销的高效双向认证方法；针对基于手机互联网的社交网络的新需求，基于手机互联网的特性，通过融合圆锥曲线、同时生效签名、零知识、环运算对新安全模型和关键技术的研究，实现无第三方参与的手机互联网支付体制和抗滥用性研究方法。本项目研究将为手机支付应用提供用户财产及隐私保护手段，相关研究均处于当前国际学术研究的前沿，无第三方参与的手机互联网支付等研究内容尚未见报导。因此本项目研究具有重要的理论意义和广泛的应用前景，对推动手机支付的发展有积极的促进作用。

本项目针对手机支付环境下财产及隐私保护需求，重点研究手机近场支付绿色认证方法和一对一公平手机互联网支付方法。本项目实施过程中有两个方面的研究内容，分别是RFID认证中的高安全级别、可撤销和高效的双向认证方法和手机互联网支付、隐私保护和安全性研究方面。项目组对研究内容和任务需求进行了认真分析，对需要的解决的关键技术和相关理论进行了比较深入的研究，完成课题的技术难点和关键技术已经明确，根据团队成员多年积累的研究基础和创新能力，找到了解决关键科学问题的技术路线，并最终完成了课题的研究。项目组执行期间发表和录用了19篇论文，其中被 SCI 检索和待检索8篇， EI 检索14篇。论文大部分发表在国际著名的学术期刊或重要的国际会议上，部分结果已经被他人引用多次。已授权专利5项，提交专利申请9项。取得软件著作权1项。出版专著1部，教材2部。