Secure e-Payment Portal Solutions Using Mobile Technologies and ...

More documents

Recommendations

Info

7.1 Introductionbetween entities while carrying out the payment transactions process.Both GSM and 3G telecommunication systems use challenge-response authenticationand encryption/decryption schemes for user identification and dataconfidentiality. Using 3G security mechanisms results in a significant improvementof the GSM system [173]. Notably, the user authentication/identificationand payment information (PI) authentication are significantly changed whencompared to the original GSM scheme.The new design objectives of the proposed scheme are as follows:(I) Improve ordering information authentication and integrity checking to preventdata modification.(II) User PIN verification is required for confirming the price and to proceedto the subsequent authentication/payment processes; to support higher valuetransactions.(III) The security mechanisms in the GSM scheme are replaced by 3G cryptographicprimitives, and a real 3G re-authentication is executed for mutualauthentication between entities.(IV) Effectively deliver reasonable confidentiality, integrity and freshness protectionsof the protocol by “reusing” the cryptographic primitives and functions(i.e. MILENAGE) in the 3G network.(V) The transaction result is protected when delivered to the customer phonevia the shop POS and is verifiable by the customer phone through the use ofassociated secret keys and algorithms, which prevents the POS terminal from132
7.2 NFC M-PAYMENT SYSTEM BASED ON 3Ggenerating a fraudulent result.This proposed system is an evolution of the GSM design described in [173],rather than a completely new one. The scheme leverages from the 3G/UMTSenvironment and security mechanisms. A new version of the USIM (SE-SIMfor NFC use) provides a secure environment for data confidentiality (strongerencryptionkeylength), clientauthenticationandauthorisationfunctionalityaswell asmutual authentication between the terminal(POS) andthe NFCphone.In addition, the attributes of NFC wireless technology offer a simple “touch”human-machine interaction that significantly enhances ease-of-use, technicalacceptability, cognitive automation and incorporates compatibility with existingRFID/contactless infrastructure. 3G networks are widely used, thusscalability is achieved, and due to re-use of the 3G functions/mechanisms theproposed scheme has good compatibility to existing infrastructure.7.2 NFC M-PAYMENT SYSTEM BASED ON 3GIn this section We describe the design of our proposed mobile payments protocol.The envisaged application scenario is a customer conducting an m-payment in a “physical” store environment with the customer’s phone beingauthenticated onto a 3G network. Our design goal is an m-payment systemthat can reuse/leverage existing 3G security mechanisms and take advantageofthe identity/authentication services provide by theMNO andUSIM tobuildan NFC m-payment service.133
Page 1 and 2:
Secure e-Payment Portal SolutionsUs
Page 3 and 4:
AcknowledgementsI have taken effort
Page 5 and 6:
PublicationsA number of papers resu
Page 7 and 8:
Contents1 Introduction 161.1 Motiva
Page 9 and 10:
CONTENTS8.3.1 Attack Scenarios . .
Page 11 and 12:
LIST OF FIGURES8.1 NFC m-Payment wi
Page 13 and 14:
Abbreviations2G: Second Generation
Page 15 and 16:
WEP:Wi-Fi:WPA:WWW:Wired Equivalent
Page 17 and 18:
1.1 MotivationNetwork (PAN). PAN te
Page 19 and 20:
1.2 Objectivescurity technology is
Page 21 and 22:
1.3 Organisation of Thesisnecessary
Page 23 and 24:
Chapter 2Background: Near Field Com
Page 26 and 27:
2.2 NFC: BasicsNFC N-Mark:Figure 2.
Page 28 and 29:
2.3 NFC: Specificationsclose to ano
Page 30 and 31:
2.3 NFC: SpecificationsFigure 2.2:
Page 32 and 33:
2.3 NFC: SpecificationsFigure 2.4:
Page 34 and 35:
2.3 NFC: Specificationspearing to a
Page 36 and 37:
2.4 NFC: Mobile Architecture and Se
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52:
2.5 NFC: Applicationscredentials an
Page 53 and 54:
2.5 NFC: ApplicationsFurther exampl
Page 55 and 56:
2.5 NFC: Applicationsyour TV. For d
Page 57 and 58:
2.6 NFC: Security2.6 NFC: SecurityN
Page 59 and 60:
2.6 NFC: Securitytokens.- Data Corr
Page 61 and 62:
Chapter 3Background: GSM and 3GCont
Page 63 and 64:
3.1 Global System for Mobile Commun
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
3.2 Third Generation Mobile Communi
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
Page 79 and 80:
Page 81 and 82: Chapter 4Background: TheCitizenDigi
Page 83 and 84: 4.2 Public Key InfrastructureSignat
Page 85 and 86: 4.2 Public Key Infrastructureproces
Page 87 and 88: 4.2 Public Key Infrastructure4.2.2
Page 89 and 90: 4.2 Public Key Infrastructure4.2.2.
Page 91 and 92: 4.2 Public Key InfrastructureFigure
Page 93 and 94: 4.2 Public Key InfrastructureTable
Page 95 and 96: 4.3 Citizen Digital Certificate: CD
Page 97 and 98: 4.4 Government PKI: GPKICA and GTes
Page 99 and 100: Chapter 5Overview of Mobile Payment
Page 101 and 102: 5.1 IntroductionFigure 5.1 provides
Page 103 and 104: 5.1 Introduction1. Ease-of-use2. Se
Page 105 and 106: 5.1 IntroductionTo overcome these p
Page 107 and 108: graphic primitives, which simplifie
Page 109 and 110: 6.1 Introductionauthentication to t
Page 111 and 112: 6.2 NFC M-PAYMENT SYSTEM BASED ON G
Page 121 and 122: 6.3 PROTOCOL ANALYSISimportant to i
Page 123 and 124: 6.3 PROTOCOL ANALYSIStion. The atta
Page 125 and 126: 6.3 PROTOCOL ANALYSISprocessing and
Page 127 and 128: 6.4 Conclusion6.3.2.2 Disadvantages
Page 129 and 130: Chapter 7NFC Mobile Payment with 3G
Page 131: 7.1 Introduction7.1 IntroductionMob
Page 135 and 136: 7.2 NFC M-PAYMENT SYSTEM BASED ON 3
Page 149 and 150: 7.3 PROTOCOL ANALYSISthat the respo
Page 151 and 152: 7.3 PROTOCOL ANALYSIStomer phone. F
Page 153 and 154: 7.4 Conclusionconnections, while so
Page 155 and 156: Chapter 8NFC M-Payment with Citizen
Page 157 and 158: 8.1 Introductionmulti-purpose cards
Page 159 and 160: 8.2 NFC M-PAYMENT SYSTEM WITH CDCIn
Page 161 and 162: 8.2 NFC M-PAYMENT SYSTEM WITH CDC8.
Page 163 and 164: 8.2 NFC M-PAYMENT SYSTEM WITH CDCth
Page 165 and 166: 8.2 NFC M-PAYMENT SYSTEM WITH CDCth
Page 167 and 168: 8.2 NFC M-PAYMENT SYSTEM WITH CDCSt
Page 169 and 170: 8.2 NFC M-PAYMENT SYSTEM WITH CDCma
Page 171 and 172: 8.3 PRELIMINARY ANALYSISsame PR are
Page 173 and 174: 8.3 PRELIMINARY ANALYSIS8.3.2 Advan
Page 175 and 176: 8.4 Conclusiona privacy concern tha
Page 177 and 178: Chapter 9Prototype Implementation o
Page 179 and 180: 9.2 System Overviewa proof-of-conce
Page 181 and 182: 9.4 Nokia 6131- JDK 6u25 windows i5
Page 183 and 184:
9.4 Nokia 6131Thetargettypesvaluess
Page 185 and 186:
9.5 Practical Implementation9.5 Pra
Page 187:
9.5 Practical ImplementationFigure
Page 190 and 191:
9.5 Practical Implementationthe bac
Page 192 and 193:
9.5 Practical ImplementationFigure
Page 194 and 195:
9.5 Practical Implementation(a)(b)F
Page 196 and 197:
9.5 Practical Implementationat the
Page 198 and 199:
9.6 EvaluationFigure 9.21 and 9.22
Page 200 and 201:
9.6 EvaluationFigure 9.24: Statisti
Page 202 and 203:
Chapter 10Overall ConclusionContent
Page 204 and 205:
10.1 ConclusionHowever, by focusing
Page 206 and 207:
10.1 Conclusiontrust mechanism via
Page 208 and 209:
Chapter 11AddendumContents11.1 Addi
Page 210 and 211:
11.1 Additional Information on the
Page 212 and 213:
Page 214 and 215:
Page 216 and 217:
Page 218 and 219:
BIBLIOGRAPHY[13] Nokia, “Introduc
Page 220 and 221:
BIBLIOGRAPHY[43] Rodolfo Gomes,NXP,
Page 222 and 223:
BIBLIOGRAPHY[68] G. Rose, A precis
Page 224 and 225:
BIBLIOGRAPHY[102] C. Blanchard, Sec
Page 226 and 227:
BIBLIOGRAPHY[130] Government Root C
Page 228 and 229:
BIBLIOGRAPHY[157] “GSM System Ove
show all

Secure e-Payment Portal Solutions Using Mobile Technologies and ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?