基于WAP的移动电子商务应用的研究与实现
|
摘要
随着无线通信技术和互联网技术的飞速发展,移动通信从以前的语音业务逐渐向数据业务过渡。虽然传统的电子商务已经使人们感受到网络所带来的便利和乐趣,但它缺乏可移动性,使用起来并不是很方便。而移动电子商务将弥补传统电子商务的缺憾,它以其快捷方便、无所不在的特点,已经成为电子商务发展的新方向,移动电子商务应用的构建已越来越受到业内人士的关注。
WAP协议是为移动数据业务设计的,它包含一套自应用层到底层传输的完整的协议栈,经过不断地发展,WAP协议已经相当成熟。当前,基于WAP的移动电子商务应用也越来越成为移动电子商务发展的趋势。因此,设计一个基于WAP的移动电子商务系统具有十分积极的意义。
WAP网关是WAP应用中的关键部分,是连接移动通信网络和Internet网络的桥梁。本文在现有WAP网关技术的基础上,根据WAP应用大都由Web应用发展而来的现状,为WAP网关增加了HTML过滤转换器模块,实现了HTML页面到WML页面的翻译转换。
安全性是移动电子商务需要解决的首要问题。为了实现基于WAP的移动电子商务的安全,本文从WAP应用中存在的漏洞入手,分析当前常见的WAP应用模型漏洞解决方案的不足,给出了一个新的高效率的安全解决方案。
本文首先分析了WAP网关功能和体系结构,设计和实现了WAP网关中的关键部分—WML编码器和HTML过滤转换器,然后针对WAP应用安全,提出了一个新的移动电子商务安全解决方案,并给出了基于JavaCard的WAP终端安全实现,最后设计和实现了移动电子商务的服务器端部分。
With the fast development of wireless communication technology and Internet,the application of mobile communication has been changed from voice business to data.Although the traditional electronic commerce has brought users the convenience through Internet,it lacks of mobility and can not used expediently.Mobile electronic commerce will make up the disadvantage of the traditional electronic commerce with its convenience and omnipresence,it has already become the new direction of electronic commerce development,and more and more people has paid attention to the mobile electronic commerce application.
WAP is designed for mobile data operation,which contains a complete protocol family from the layer of application to layer of transport. Through its development constantly,WAP is already very mature.At present,mobile electronic commerce application based on WAP also becomes the trend of mobile electronic commerce development more and more.Therefore, to design a mobile electronic commerce system based on WAP is very significative.
WAP gateway is the key part in the WAP application,and it is the bridge which links mobile communication network and Internet.In the foundation of the existed WAP gateway techniques and according to the present status that the WAP application comes from Web application,this article implements the HTML filter, which translate HTML pages to WML pages, in the WAP gateway.
The security is the chief problem which mobile electronic commerce needs to solve.In order to realize the security of mobile electronic commerce and overcome the leak existed in current WAP application, this article analyzes the shortage of current familiar WAP application model of leak solution,and gives a new efficient security solution.
This article firstly analyzes the functions and architecture of WAP gateway,designs and realizes the key part of WAP gateway-WML encoder and HTML filter,then aimed at WAP application security,brings a new mobile electronic commerce security solution and gives Implementation of WAP terminal security based on JavaCard,finally designs and realizes the server end part of mobile electronic commerce.
WAP协议是为移动数据业务设计的,它包含一套自应用层到底层传输的完整的协议栈,经过不断地发展,WAP协议已经相当成熟。当前,基于WAP的移动电子商务应用也越来越成为移动电子商务发展的趋势。因此,设计一个基于WAP的移动电子商务系统具有十分积极的意义。
WAP网关是WAP应用中的关键部分,是连接移动通信网络和Internet网络的桥梁。本文在现有WAP网关技术的基础上,根据WAP应用大都由Web应用发展而来的现状,为WAP网关增加了HTML过滤转换器模块,实现了HTML页面到WML页面的翻译转换。
安全性是移动电子商务需要解决的首要问题。为了实现基于WAP的移动电子商务的安全,本文从WAP应用中存在的漏洞入手,分析当前常见的WAP应用模型漏洞解决方案的不足,给出了一个新的高效率的安全解决方案。
本文首先分析了WAP网关功能和体系结构,设计和实现了WAP网关中的关键部分—WML编码器和HTML过滤转换器,然后针对WAP应用安全,提出了一个新的移动电子商务安全解决方案,并给出了基于JavaCard的WAP终端安全实现,最后设计和实现了移动电子商务的服务器端部分。
With the fast development of wireless communication technology and Internet,the application of mobile communication has been changed from voice business to data.Although the traditional electronic commerce has brought users the convenience through Internet,it lacks of mobility and can not used expediently.Mobile electronic commerce will make up the disadvantage of the traditional electronic commerce with its convenience and omnipresence,it has already become the new direction of electronic commerce development,and more and more people has paid attention to the mobile electronic commerce application.
WAP is designed for mobile data operation,which contains a complete protocol family from the layer of application to layer of transport. Through its development constantly,WAP is already very mature.At present,mobile electronic commerce application based on WAP also becomes the trend of mobile electronic commerce development more and more.Therefore, to design a mobile electronic commerce system based on WAP is very significative.
WAP gateway is the key part in the WAP application,and it is the bridge which links mobile communication network and Internet.In the foundation of the existed WAP gateway techniques and according to the present status that the WAP application comes from Web application,this article implements the HTML filter, which translate HTML pages to WML pages, in the WAP gateway.
The security is the chief problem which mobile electronic commerce needs to solve.In order to realize the security of mobile electronic commerce and overcome the leak existed in current WAP application, this article analyzes the shortage of current familiar WAP application model of leak solution,and gives a new efficient security solution.
This article firstly analyzes the functions and architecture of WAP gateway,designs and realizes the key part of WAP gateway-WML encoder and HTML filter,then aimed at WAP application security,brings a new mobile electronic commerce security solution and gives Implementation of WAP terminal security based on JavaCard,finally designs and realizes the server end part of mobile electronic commerce.
引文
[1] eNet 硅谷动力.什么是移动电子商务.http://www.enet.com.cn/article/2006/0512/A20060512530600.shtml.2006.5
[2] 王海涛、宋丽华.电子商务发展的新趋势─移动电子商务.现代电信科技[J].2001,10(5):7-14
[3] 钱博.浅谈移动商务的发展与应用.云南财经学院学报[J].2005,2:77-81
[4] 马皓莹.电子商务的发展现状与前景.长江论坛[J].2001,6:45-50
[5] W3C.HTML 4.01 Specification.http://www.w3.org/TR/html4/.1997.1
[6] Prelminary Draft,Brendan Eich,C. Rand Mckinney.JavaScript Language Specification.http://hepunx.rl.ac.uk/~adye/jsspec11/jsrefspe.htm.1996.11
[7] WAP Forum.Wireless Application Protocol Architecture Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WAPArch-19980430.pdf.1998.4
[8] W3C.Extensible Markup Language (XML) 1.0 (Fourth Edition).http://www.w3.org/TR/2006/REC-xml-20060816/.2006.8
[9] WAP Forum.Wireless Session Protocol Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WSP-19990528.pdf.1999.5
[10] WAP Forum.Wireless Transaction Protocol Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WTP-19990611.pdf.1999.6
[11] WAP Forum.Wireless Transport Layer Security Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WTLS-19990211.pdf.1999.2
[12] WAP Forum.Wireless Datagram Protocol Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WDP-19990514.pdf.1999.5
[13] WAP Forum.Wireless Telephony Application Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WTA-19990716.pdf.1999.7
[14] WAP Forum.Wireless Markup Language Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WML-19990616.pdf.1999.6
[15] WAP Forum.Wireless Application Environment Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WAESpec-19990524.pdf.1999.5
[16] WAP Forum.WMLScript Language Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WMLScript-19990617.pdf.1999.6
[17] 张濛．WAP 网关系统的研究与实现.华南理工大学硕士学位论文.2001.3
[18] 陈小康.WAP 协议的研究与应用.北京航空航天大学硕士学位论文.2001.2
[19] WAP Forum.Binary XML Content Format Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WBXML-19990616.pdf.1999.6
[20] SAX.SAX 1.0 Overview.http://www.saxproject.org/sax1-roadmap.html.2004.4
[21] W3C.Document Object Model (DOM).http://www.w3.org/DOM/.2005.6
[22] Apache Soft Foundation.Xerces Java Parser Readme.http://xerces.apache.org/xerces-j/.2005.1
[23] 网翼空间.NekoHTML 学习笔记.http://www.webwing.com.cn/Html/xml/20060417180108659_4.html.2006.4
[24] 胡向东、魏琴芳、鲜继清等.WAP 安全实现中的新型密码算法.计算机应用研究[J].2002,1:19-23
[25] 吴冬梅.基于无线应用协议的一种新的端到端安全模型.长安大学学报(自然科学版)[J].2005,5:117-121
[26] 网络大典 WIKI.WIM: WAP Identity Module(WAP 身份识别模块).http://wiki.networkdictionary.com/chinese/index.php/WIM:_WAP_Identity_Module(WAP%E8%BA%AB%E4%BB%BD%E8%AF%86%E5%88%AB%E6%A8%A1%E5%9D%97).2004.1
[27] Sun Microsystems.Java Card Platform Specification 2.2.2.http://java.sun.com/products/javacard/specs.html.2006.1
[28] 天新网.JavaCard 开发教程之规范.http://www.21tx.com/dev/2003/10/21/10198.html.2003.10
[29] Julien SIMON.What is an APDU?.http://www.jguru.com/faq/view.jsp?EID=470744.2006.1
[30] 潘敏.动态集成的移动电子商务平台的设计与研究.浙江大学硕士学位论文.2004.2
[31] Cbuck Cavaness.Jakarta Struts 编程.清华大学出版社.2004.1
[32] Hibernate.org.HIBERNATE - 符合 Java 习惯的关系数据库持久化.http://www.hibernate.org/hib_docs/reference/zh-cn/html/.2002.3
[33] 赛迪网.MVC 在 Web 系统中的模式与应用.http://tech.ccidnet.com/art/1060/20040615/121091_1.html.2004.6
[34] XThinking.Struts And MVC.http://www.xthinking.net/Wiki.jsp?page=StrutsAndMVC.2005.8
[35] CNSDN.Java 入门:浅谈 DAO 模式.http://www.cnsdn.com.cn/inc/show.asp?id=53.2005.6
[2] 王海涛、宋丽华.电子商务发展的新趋势─移动电子商务.现代电信科技[J].2001,10(5):7-14
[3] 钱博.浅谈移动商务的发展与应用.云南财经学院学报[J].2005,2:77-81
[4] 马皓莹.电子商务的发展现状与前景.长江论坛[J].2001,6:45-50
[5] W3C.HTML 4.01 Specification.http://www.w3.org/TR/html4/.1997.1
[6] Prelminary Draft,Brendan Eich,C. Rand Mckinney.JavaScript Language Specification.http://hepunx.rl.ac.uk/~adye/jsspec11/jsrefspe.htm.1996.11
[7] WAP Forum.Wireless Application Protocol Architecture Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WAPArch-19980430.pdf.1998.4
[8] W3C.Extensible Markup Language (XML) 1.0 (Fourth Edition).http://www.w3.org/TR/2006/REC-xml-20060816/.2006.8
[9] WAP Forum.Wireless Session Protocol Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WSP-19990528.pdf.1999.5
[10] WAP Forum.Wireless Transaction Protocol Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WTP-19990611.pdf.1999.6
[11] WAP Forum.Wireless Transport Layer Security Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WTLS-19990211.pdf.1999.2
[12] WAP Forum.Wireless Datagram Protocol Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WDP-19990514.pdf.1999.5
[13] WAP Forum.Wireless Telephony Application Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WTA-19990716.pdf.1999.7
[14] WAP Forum.Wireless Markup Language Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WML-19990616.pdf.1999.6
[15] WAP Forum.Wireless Application Environment Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WAESpec-19990524.pdf.1999.5
[16] WAP Forum.WMLScript Language Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WMLScript-19990617.pdf.1999.6
[17] 张濛．WAP 网关系统的研究与实现.华南理工大学硕士学位论文.2001.3
[18] 陈小康.WAP 协议的研究与应用.北京航空航天大学硕士学位论文.2001.2
[19] WAP Forum.Binary XML Content Format Specification.http://www1.wapforum.org/tech/terms.asp?doc=SPEC-WBXML-19990616.pdf.1999.6
[20] SAX.SAX 1.0 Overview.http://www.saxproject.org/sax1-roadmap.html.2004.4
[21] W3C.Document Object Model (DOM).http://www.w3.org/DOM/.2005.6
[22] Apache Soft Foundation.Xerces Java Parser Readme.http://xerces.apache.org/xerces-j/.2005.1
[23] 网翼空间.NekoHTML 学习笔记.http://www.webwing.com.cn/Html/xml/20060417180108659_4.html.2006.4
[24] 胡向东、魏琴芳、鲜继清等.WAP 安全实现中的新型密码算法.计算机应用研究[J].2002,1:19-23
[25] 吴冬梅.基于无线应用协议的一种新的端到端安全模型.长安大学学报(自然科学版)[J].2005,5:117-121
[26] 网络大典 WIKI.WIM: WAP Identity Module(WAP 身份识别模块).http://wiki.networkdictionary.com/chinese/index.php/WIM:_WAP_Identity_Module(WAP%E8%BA%AB%E4%BB%BD%E8%AF%86%E5%88%AB%E6%A8%A1%E5%9D%97).2004.1
[27] Sun Microsystems.Java Card Platform Specification 2.2.2.http://java.sun.com/products/javacard/specs.html.2006.1
[28] 天新网.JavaCard 开发教程之规范.http://www.21tx.com/dev/2003/10/21/10198.html.2003.10
[29] Julien SIMON.What is an APDU?.http://www.jguru.com/faq/view.jsp?EID=470744.2006.1
[30] 潘敏.动态集成的移动电子商务平台的设计与研究.浙江大学硕士学位论文.2004.2
[31] Cbuck Cavaness.Jakarta Struts 编程.清华大学出版社.2004.1
[32] Hibernate.org.HIBERNATE - 符合 Java 习惯的关系数据库持久化.http://www.hibernate.org/hib_docs/reference/zh-cn/html/.2002.3
[33] 赛迪网.MVC 在 Web 系统中的模式与应用.http://tech.ccidnet.com/art/1060/20040615/121091_1.html.2004.6
[34] XThinking.Struts And MVC.http://www.xthinking.net/Wiki.jsp?page=StrutsAndMVC.2005.8
[35] CNSDN.Java 入门:浅谈 DAO 模式.http://www.cnsdn.com.cn/inc/show.asp?id=53.2005.6