摘要： 随着越来越多的无线设备接入因特网，传统网络中的电子商务和移动网络的结合体“移动电子商务”极有可能成为下一代网络的终极应用。然而，现有的无线应用协议缺乏电子商务所必需的端到端之间的安全性，同时无法解决大多数运算能力差的无线设备接入问题，阻碍了应用的发展。该文将私钥体系中的Kerberos协议和移动电子商务体系相结合，提出了KMSA。在KMSA中，通过对Kerberos协议进一步的扩展和优化，做到在保证应用安全的前提下降低系统对终端设备的要求，为移动电子商务现阶段的发展扫清障碍。

关键词: 移动电子商务, 无线应用协议, 无线传输层安全协议, 公钥体系, Kerberos

Abstract: Currently, the combination of E-commerce in traditional network and mobile network, mobile E-commerce, is promising to be the killer application in the next generation network. However, existing WAP architecture is lack of end-to-end security, which must be present in E-commerce. Moreover, it also depends heavily on terminals' security computing ability, which is not present in most of wireless devices. This article designs M-commerce security architecture——KMSA, which adopts extended Kerberos as the end-to-end security protocol, allowing to achieve application security and high efficiency without too heavy computing.

中图分类号: 

• TP393.08