Neusoft Short Message Exchange System Solution Based on STK.

Applied Technology

This system adopted STK and SMG technologies to improve system efficiency and accomendate applied requirement.

1) STK technology

STK is a technology to extend the functionalities of GSM cell phones with standard GSM interface.

This technology will extends the functionalities of the cell phones by execute related application software stored in the intelligence chip in the phone. Mobile carriers can use STK technology to provide value add-on services by integrate files that are self set and satisfy certain business needs in the I-chip. Data can be exchanged between cell phones and external media via STK. STK technology is more suitable for exchange activities that require high security because of its unique advantages.

2)SMG

SMG is a short message program ordering platform that supports STK. This platform carries out the conversion between short message communication protocol and HTTP. One end connects to the short message center via SMPP, CIMD2 protocol. The other end connects to different types of information media via HTTP and HTML. ‘Secure exchange’ is its character.

Secure strategy

Security is the key of mobile communication exchange. This solution can ensure security in the following areas.

1)Information security and consistency.

The system introduced client end encryption (cell phone SIM card data encryption), certification inspection and other technologies for security. It can ensure not only information security but also identity verification.

2) No denial of services.

STK technologies and short messages costs system together are used to record the exchange process. Cell phone users’ identities are verified by mobile carries and stock brokers, thus the system can provide evidence for the exchange activities. This will utmostly prevent events such as cheating and denying from happening.

3) Personal information security.

Information in the cell phones is encrypted, the encrypted message is then transmitted. This ensured secure information transmission.

4) Selectable Encryption.

The system partition information into two types: public information and private information. Public information includes shared information with users such as stock market status. Private information includes users’ private information such as account and password, etc.

5) Openness.

Standard protocol SSL adopted internationally is used during communication. Other applied systems can be connected easily.

6) Local network Security

Firewall was installed in front of the gateway to the internet. It can filter IP packets and prevent electronic deceivers. Thus ensure data security on the internal systems of the mobile carries.

Brief description of Solution

From the safety point of view, STK cards provided by mobile carriers are required for the cell phone users to use stock exchange services. The algorithms and keys used in information exchange encryption are provided by the stock brokers. Mobile companies will integrate the algorithm, related menu, data format etc to the SIM card according to STK standard.

System Frame

The system frame is shown in Figure1. The cell phones that are used for exchange need SIM cards issued by mobile company that contain exchange functions. The system is composed of a SMG server, a PUSH server, a Univas2000 applied server and a DB server.

The system is divided into three parts based on the communication flow direction.

1) Wireless network transaction: Information flow direction is from cell phone users to mobile carriers. Cell phone users fill out the exchange form based on the STK menu and send the stock request to mobile carriers via short messages.

2)Mobile carriers to stock brokers:

Non exchange requests include stock information search, market trend search and other public shared information requests. Those types of requests do not need to be encrypted via STK and they can be sent to the server directly. Afterwards, the results are sent back to the user directly.

Exchange requests include stock commission, account look up and other exchange relation information requests. These types of information is encrypted with users’ STK and needs additional treatment before it can be send to the stock brokers securely. Because NAMP does not supports STK message format, this type of messages need to be converted by SMG. SMG will send these messages to Univas 2000 applied server directly. Univas2000 applied server security gateway will sign these messages and send them to the stock broker’s exchange secure server via DDN line.

3)Stock brokers to mobile carriers:

Stock brokers will execute the following operations after they received the requests.

Data verification: check whether the data has a Univas 2000 server signature.

Send the real exchange information to the stock exchange gateway by which it will be dealt with.

Exchange gateway will sign the results and send it back to Univas 2000 server.

The above summarized information showed that the system adopted multiple measures to ensure the security of the exchange.

Figure 1- Framework of mobile stock system based on STK