Design of Secure and Efficient Electronic Payment System for Mobile Users

Abstract

The recent advancement in smart phones and its widespread popularity switches the users of traditional computing to mobile computing. In addition, to facilitate users, hand held devices such as a mobile phone application for the payment method should be accepted for practical implementation. Recently, Yang et al. proposed an electronic payment protocol using payment gateway and claims that this scheme is suitable for cloud computing, where payment gateway is placed in the cloud area and all the communication between user, merchant, bank is performed via the payment gateway. However, it is known that cloud server is not considered as completely secured entity. Hence, by putting payment gateway on cloud server the author is endangering the security of system as a consequence it is not suitable for cloud environment. In this paper, we propose an efficient electronic payment protocol for mobile environment where mobile users can directly communicate with the merchant. It has been shown that our protocol has better security performance in terms of different attacks.