CAJ | 학술논문

手机钱包业务中提供了空中充值功能，用户从客户端发起充值请求，OTA服务器验证身份后处理请求。国内移动支付领域，多数OTA加解密使用的是DES的变体3DES算法，其密钥相对较短，且有弱密钥。同类算法中，AES性能最好，较大的数据可以利用AES进行分段加密。文章提出基于AES的Mac校验方式，研究双向身份认证机制的原理和流程，并根据OTA下载的功能需求，提出可应用于手机钱包业务中的多级动态密钥方案。
수궤전포업무중제공료공중충치공능，용호종객호단발기충치청구，OTA복무기험증신빈후처리청구。국내이동지부영역，다수OTA가해밀사용적시DES적변체3DES산법，기밀약상대교단，차유약밀약。동류산법중，AES성능최호，교대적수거가이이용AES진행분단가밀。문장제출기우AES적Mac교험방식，연구쌍향신빈인증궤제적원리화류정，병근거OTA하재적공능수구，제출가응용우수궤전포업무중적다급동태밀약방안。
Over the air (OTA) function is provided in mobile wallet service ,the users initiate a charge request from the client, the OTA server process the request after authentication. Domestic mobile payments, most OTA encryption is using DES’s vari-ant 3DES algorithm, whose key is relatively short, and contains weak keys. Among many similar algorithm, AES performs best, larger data can be segmented with AES encryption. In this paper, a Mac-based AES calibration methods is proposed, the prin-ciples and processes of mutual authentication mechanism is studying . According to OTA’s functional requirements, proposed the multi-level dynamic key solution that can be applied to mobile wallet service.