带有NFC(近场通信)功能的手机近几年在不断推广和普及,NFC的HCE(主机卡模拟)模式大大方便了NFC的开发和使用,使用NFC功能的相关应用也越来越多。在HCE模式下,由于缺乏本地SE模块,数据的安全性、身份认证的可靠性深受质疑。文章提出一种HCE模式下的身份认证方法,以零知识证明理论为基础,减少信息传递过程中身份凭证被窃听、复制、破解的可能,对留存于本地的身份凭证进行隐藏,较好地解决了本地数据的安全性问题。在不可信的网络环境里和安全性较弱的本地设备上完成了较可信的身份认证。
Mobile phones with NFC(near fi eld communication)function are being popularized inrecent years,and the HCE(host-based card emulation)mode greatly facilitates the development and theuse of NFC applications.There are also more and more related applications using NFC function.In theHCE mode,because of the lack of local SE modules,the security of data and the reliability of identityauthentication are deeply questioned.This paper proposes an identity authentication method in theHCE mode based on the zero-knowledge proof theory,which reduces the possibility of eavesdropping,duplication and cracking in the process of information transmission.By hiding the identity documentsretained locally,the security of the local data is handled better.In untrusted network environments andon local devices with less security,more reliable identity authentication is achieved.