NFC行動支付之TSM平台規劃與導入

行動支付 (Mobile Payment) 在本論文是指個人以手持行動通訊設備進行付款，包含的範圍如同傳統錢包一樣，將信用卡、現金、電子票證、折價券等相關金融支付整合在智慧型手機中，完成各種支付與轉帳交易。這幾年來電信業者、金融業者、行動設備業者、信用卡組織等無不致力於創新技術與發展相關服務應用，以期在行動支付時機成熟時能成為市場上最大的獲利者。　　信託服務管理平台 (TSM) 是行動支付解決方案的一環，扮演著讓下載您的支付帳戶到您的手機的過程，安全並且有效率。手機內的安全元件取代實體卡片，並在手機安全元件上儲存支付卡的重要資訊。由於行動網路業者與發卡機構共用SIM卡做為安全元件的載體，因雙方有各自的資安需求，因此需透過公正的第三方：TSM 來負責中間的資料交換與整合。來確保消費者信用卡資料的安全。　　針對系統流程及安全機制而言，這是規劃TSM平台最重要的工作，流程與所有的訊息交換須遵守Global Platform的規範，如此才能確保作業的正確性與安全性，遵循一致的流程也可減少系統層面的複雜性。另外在安全機制設計上，除了進行使用者身份認證，或對所有付款流程使用加密技術，抑或採用訊息認證碼及數位簽章等方式，均是實質的安全保障設計之一。　　本論文參考國外已上線的TSM平台及產品，提出了一個基本的建構TSM平台所必須具備的元素，包含了TSM的基本原理、角色定義、TSM的架構、系統流程及需要考量的安全機制等。再根據台灣的法令、電信環境與支付生態，規劃符合台灣運行的TSM平台，這包含了TSM平台的客服流程、系統如何收費及如何進行服務的上架。上架作業並包含了服務的規劃、測試、導入與推廣。最後提出本論文對於台灣推展NFC行動支付可能遭遇的問題，並認為行動支付結合生物辨識是可預見的未來發展。

關鍵字

行動支付；安全元件

並列摘要

Mobile Payment in this paper refers to the personal hand-held mobile communication device payment, as included in the scope of traditional wallets, the relevant financial payment credit card, cash, electronic tickets, coupons and other integrated smart phone, complete various payment and transfer transactions. In recent years telecom operators, financiers, mobile devices industry, credit card organizations, etc. are all committed to the development of innovative technologies and application-related services, when the time is maturated, they would like to become the market's biggest gainers. Trusted Service Manage (TSM) is part of mobile payment solutions, plays make downloading your account to your phone in the process, safety and efficiency. Security element in your phone substituted entity card and payment card important information stored on mobile security element. Since the mobile network operators and issuers as a common carrier SIM card security element, because both sides have their information security needs, therefore required by an impartial third party: TSM is responsible for the middle of the data transfer and integration. To ensure that the consumer credit card information is completely safe. For system processes and security mechanisms, this is the most important work to planning TSM platform, process and message exchanged all required to comply with Global Platform specifications, so as to ensure the accuracy and safety of operation, follow the same process can be reduced system-level complexity. Also in the design of security mechanisms, in addition to user authentication, or for all payment processes using encryption technology, or using message authentication codes and digital signatures, etc., are the essence of design security. In this paper, with reference to online foreign TSM platform and products , put forward a basic construction of TSM platform must have the element that contains the basic principles of TSM, the role definition, TSM architecture, system processes and the need to consider the safety mechanism. Then according to Taiwan's law, telecommunications environment and payments for ecosystem planning in line with Taiwan running TSM platform, which includes the TSM platform of customer service processes, how to charges and how to onboarding. service onboarding includes planning, testing, import and extension services. Finally, this paper paid for Taiwan forward the NFC action problems encountered, and that the combination of biometric payment action is for the foreseeable future development.