Secure mobile wireless communications platform

摘要

A system is described to securely encrypt and decrypt data traffic particularly in mCommerce transactions between a mobile device application and a server. Data is encrypted within the secure tunnel set-up between the mobile application and the server as well as being encrypted on the client device. This is said to provide greater security compared to conventional SSL/TLS exchanges and provides further protection from man-in-the-middle attacks. A personal identification code (e.g. PIN/password) is also used which a user enters to be able to access the client application and from which is derived the encryption keys used to encrypt the data stored locally on the client. Asymmetric encryption and decryption, symmetric encryption and decryption, signature validation and a challenge-response arrangement are also employed. In one embodiment the client generates plural symmetric keys and the server also generates plural symmetric keys.