모바일 결제 시스템의 결함 분석과 보안성 개선에 관한 연구

Abstract

As financial transactions using mobile devices have been activated, mobile payment services have appeared and many changes have been made to the existing financial service methods. With the development of wireless networks, mobile devices such as smart phones and tablet PC have become popular, and mobile payment services are increasing regardless of time and place. Mobile payment service, which combines financial service and IT, simplifies the payment process for the convenience of users, and any mobile device user can receive financial services quickly and easily. As a result, the user authentication process using the public certificate has been omitted and problems such as information leakage through the payment application have been raised, so that there is a growing concern about security. In order to activate mobile payment services, a system that protects personal information and has improved security should be operated. Research is needed to analyze and improve fault of systems using checklists as a basis for security threats and requirements and security evaluation of electronic financial services. Therefore, this thesis discusses the process of mobile payment systems and the method of improving security of mobile payment systems by using Fault Tree Analysis (FTA) and Failure Modes and Effect Analysis (FMEA) after analyzing defects using security checklists.