- 學位論文
金融產業行動應用開發之安全訊息框架設計
Design of a Secure Messaging Framework for Financial Mobile Applications Development
摘要
近年來，行動裝置(Mobile Device)越來越普及，不論是智慧型手機或平板電腦正快速融入我們的生活當中。大量的軟體開發商和一般的開發者投入行動應用程式的市場，行動應用程式的開發成為了一個熱門的討論議題。 金融產業的商品資訊變化快速，所以必須即時將商品報價通知給使用者知道，避免使用者錯過下單的時機。一開始透過電信業者將資訊推送到呼叫器，但顯示的資訊有限，所以後來企業自行研發了專用的股票客戶端，但卻對於開發者或是使用者都產生了很多成本。一直到了現在行動裝置的普及，幾乎到了人手一支的地步，並且企業可以在行動平台上自行開發行動應用程式。 本研究主要在於為金融產業行動應用設計一套安全訊息框架，設計之安全訊息框架技術以MQTT技術為基礎，應用其訂閱/發佈連線模式、自動連線管理、網路傳輸流量需求低之特性，並為提高訊息安全，使用以交換密鑰為基礎的加解密方法保護傳送的訊息。架構上則運用了設計樣式，將部分功能抽出介面，以供開發者客製化加解密演算法與連線策略。由於本研究設計之安全訊息框架封裝了連線與安全相關程式，使行動應用開發者只需專注於接收到訊息後的程式邏輯，進而降低開發上的成本。
並列摘要
In recent years, there are more and more mobile devices in our lives, including smart phones, tablets and so on. Numerous software developers have devoted themselves to this market, and thus, the development of application programs on mobile devices becomes an important topic in software engineering. Changes for information in the financial industry product are so fast that it must immediately notify the user commodity quotations in orders to prevent users miss the opportunity. At first, the enterprises tried to push the information through the pager operator, but the information displayed is limited to a narrow size, and then they developed its own proprietary corporate stocks client, which results in developers or users with a lot of costs. Nowadays, with the popularity of mobile devices or mobile platforms, companies can develop their own mobile applications. We proposed a security message transferring framework for mobile application in financial area, which is designed based on the MQTT techniques including subscription/publication connection model, auto connection management and low network transferring requirement properties. Also, to secure message, we also suggest a secure method with exchanging private keys. In general, Since our framework wraps connection and security methods, mobile application developers only need to focus on processing received data to lower developing costs.