ericssonhistory.com

length less than 264 bits is input, the SHA-1 produces a 160-bit output called a messagedigest. This can be fed to the digitalsignature algorithm, which generates or verifiesthe signature for the message. The samehash algorithm must be used to create andverify a digital signature.PKCSThe public key cryptographic standard no.1 (PKCS# 1) is the standard method for encryptingdata using the Rivest-Shamir-Adleman (RSA) public-key cryptosystem.For digital signatures, the content to besigned is reduced to a message digest witha message-digest algorithm (such as MD5).An octet string (which contains the messagedigest) is then encrypted with the RSA privatekey of the signer of the content. Thecontent and the encrypted message digestare represented together according to thesyntax in PKCS#7 to yield a digital signature.Mobile e-Pay returns PKCS#7 formatsignatures for the MD5 and SHA-1 securitymethods.Payment featuresMobile e-Pay payment features enableproviders to offer a complete payment solutionwhich gives end-users a new electronicwallet that is accessible via the mobilephone. Thus, mobile users can use their mobilephones as a device for paying for goodsor services.Basic payment featuresEricsson has developed a standard communicationinterface to the payment server.Operators can use this interface to integrateMobile e-Pay into any suitable paymentserver solution—for example, if they do notpurchase the payment servers offered withMobile e-Pay.Jalda payment featuresJalda is a multipurpose payment methodthat supports convenient, fast and secure financialtransactions on the Internet. It isopen and flexible and can handle transactionsof any amount—from fractions of acent to huge sums—without requiring thetransfer of credit card numbers or electroniccurrencies. Jalda is a session-based Internetpayment method that enables paymentby the second, item, quantity, mouse click,search, character, page, or practically anyother parameter. Jalda consists of two parts:• an application program interface (API)—the Jalda API; and• a payment server that administers userdata and keeps track of transactions.The Jalda API can be embedded into virtuallyany application, which paves the wayfor content and service providers to sellgoods and services on the Internet and toreach end-users on wireless networks. Alltransactions between the end-user and thecontent or service provider are managed bya trusted third party—an Internet paymentprovider—who owns and operates the paymentserver.Mobile e-Pay can connect to Internet e-commerce applications using the Jalda API.Doing so extends the Jalda payment standardtoward mobile end-users. In a configurationin which the payment system is onthe Internet side, mobile users can thus usetheir mobile phones to sign digital contracts.Payment features including payment serverfunctionalityA payment server, which is offered togetherwith the mobile pay features, serves theinterface to external financial institutions,such as credit card companies. It also logsall financial transactions.Credit card paymentWhen end-users subscribe to Mobile e-Pay,they can register one or more credit cards inthe Mobile e-Pay system. They can then usethese cards to pay content providers forgoods and services. Payment is made onlinevia the card issuer, which is to say that userscan leave their cards at home and instead useFigure 9Two-zone security or end-to-end securityalternatives.Ericsson Review No. 2, 2000 91