本方案提出利用改进后3G入网认证机制中密钥和随机数,结合AES算法生成安全性高的一次性签名,且计算量和存储量很少,具有不可否认性,还利用了登录第三方网站后生成的用户临时标识,具有很好的匿名性和不可跟踪性。其中商家受到第三方的监视和管理,防止用户和商家的欺诈,用户收到商品后对商家的信用进行评价,具有公平性。该方案交易灵活、效率高,适合3G用户实行微支付交易。
An improved scheme in 3G network to generate a one-time security signature using the authentication key and random number with AES is proposed in this paper.It has very little computation and storage with non-repudiation.Temporary ID is generated when the user uses websites by third-party established,so it has the good anonymity and non-traceability.Merchants is watched and managed by a third party in the protocol which prevents consumers and businesses from deceiving.After receipt of goods the user and the merchants can mutual credit evaluation each other with fairness.This scheme is trading with high flexibility and efficiency.It is suitable for 3G users to implement micro-payment transactions.