通过 NFC 传输数据的安全方式？
我目前正在编写一个支付系统，以接受从支持 NFC 的智能手机 (BlackBerry 9900) 到 Windows 客户端 (C#.NET) 的支付详细信息
我目前遇到两个与安全相关的问题：
1) 什么是保护数据的好方法通过 NFC 传输？我正在考虑公钥加密，以便可以使用公钥在手机上对其进行加密，然后由另一端的 .NET 使用私钥进行解密。
2) 如何保护数据，使数据不能被其他读取器克隆，即另一个读取器假装是Windows 客户端并读取安全数据。然后，攻击者可以在稍后的数据中将其回放到 Windows 客户端以进行付款。我认为，当手机点击客户端读取器时，客户端将发送一个令牌，该令牌必须存在于从手机返回的数据中，其中包含敏感数据。我认为也许应该根据每个交易请求创建公钥和私钥。发送到手机以加密数据的公钥。也许这就足够了，因为令牌也可以被客户端解密，那么它就是一个无效的请求。
请注意，我根本没有密码学方面的经验。我的目标是实现一个解决方案，该解决方案具有可在 .NET 3.0 和 BlackBerry SDK 7.0 中随时使用的库。
谢谢
I am currently writing a payment system to accept payment details from an NFC enabled smartphone (BlackBerry 9900) to a Windows client (C#.NET)
I am currently having two issues relating to security:
1) What is a good way to secure the data for transmission over NFC? I'm thinking public key encryption so that it can be encrypted on the phone using the public key and then decrypted by the .NET on the other side using the private key.
2) How to secure the data so that the data can't be cloned by another reader i.e. another reader pretends the be the windows client and reads the secure data. This could then be played back to the windows client by the attacker at a later data to make a payment. I'm thinking that when the phone taps the client reader the client will send a token that must be present in the data returned from the phone that includes the sensitive data. I think that maybe the public and private keys should be created per each transaction request. The public key sent to the phone to encrypt the data. Maybe that would suffice as the token also as if it can't be decrypted by the client then it's an invalid request.
Please note that I have no experience in cryptography at all. I'm aiming to implement a solution that has libraries readily available in .NET 3.0 and BlackBerry SDK 7.0.
Thanks
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论