U2F based secure mutual authentication protocol for mobile payment

Abstract

With the increasing popularity of the fintech, the e-commerce market has grown rapidly in last decade, and now the mobile devices are unprecedented popular and playing an ever-increasing role in the e-commerce field, especially the mobile payment. However, it is hard for online authentication technology based on traditional mode to maintain the healthy and stable development of mobile payment. Besides that, it can't meet the security demand of user's privacy or some sensitive information else. In this paper, we propose a secure mutual authentication protocol (SMAP) based on U2F for mobile payment. In this system, the asymmetric cryptosystem is used for mutual authentication between server and client to guarantee a reliable service, which is based on the architecture of U2F. It can resist disguise and dispose counterfeit user. Compared to the current existing modes, the proposed protocol strengthens the security of user's account information as well as individual privacy in whole transaction process with mobile payment. The practice proves that the proposed protocol is secure and convenient.