Secure Mobile Payment Research Articles

Display Field Communication: Enabling Seamless Data Exchange in Screen–Camera Environments

Display field communication (DFC) is an emerging technology that enables seamless communication between electronic displays and cameras. It utilizes the frequency-domain characteristics of image frames to embed and transmit data, which are then decoded and interpreted by a camera. DFC offers a novel solution for screen-to-camera data communication, leveraging existing displays and camera infrastructures. This makes it a cost-effective and easily deployable solution. DFC can be applied in various fields, including secure data transfer, mobile payments, and interactive advertising, where data can be exchanged by simply pointing a camera at a screen. This article provides a comprehensive survey of DFC, highlighting significant milestones achieved in recent years and discussing future challenges in establishing a fully functional DFC system. We begin by introducing the broader topic of screen–camera communication (SCC), classifying it into visible and hidden SCC. DFC, a type of spectral-domain hidden SCC, is then explored in detail. Various DFC variants are introduced, with a focus on the physical layer. Finally, we present promising experimental results from our lab and outline further research directions and challenges.

Intelligent Blockchain-Based Secure Framework for Transaction in Mobile Electronic Payment System

The rate of smartphone purchases is rising daily, and mobile payments are now frequently accepted in various areas. It is essential to transfer money completely safe as well as quick. The encrypted distributed ledgers function provides verified real-time transaction confirmation without the necessity for intermediaries like banks and clearinghouses; blockchain provide quick, secure, decentralized, and inexpensive transaction services. Blockchain technology makes money transfer simpler with transparency and financial data security. Through these capabilities, blockchain has attracted interest from around the world. However, some challenges arise while completing some financial security needs. This work proposes a framework for secure mobile payments based on blockchain technology. The advantages of blockchain are discussed and how blockchain technology provides multi-level authentication to secure mobile based financial transactions. Due to the increased safety and confidentiality of users on mobile payment apps, the suggested system takes into account the need of developing a safe application for the mobile transactions. We have also addressed the security related challenges of blockchain based payment applications and provided potential solutions.

Blockchain Mobile Wallet with Secure Offline Transactions

There has been an increase in the adoption of mobile payment systems worldwide in the past few years. However, poor Internet connection in rural regions continues to be an obstacle to the widespread use of such technologies. On top of that, there are significant problems with the currently available offline wallets; for instance, the payee cannot verify the number of coins received without access to the Internet. Additionally, it has been demonstrated that some existing systems are susceptible to false token generation, and some do not even permit the user to divide the offline token into smaller portions to be used as change. This paper proposes a blockchain-based wallet system that provides a secure mobile payment service even if a user cannot access a reliable Internet connection. Our approach relies on Bluetooth and digital signatures to establish and build a trust connection between the parties. The proposed solution overcomes the main limitations of existing systems that use offline transactions, such as the generation of fake offline tokens and the indivisibility of offline tokens. The user buys Offline Tokens (OTs) from a server called an Offline Token Manager (OTM) to use them later to perform offline transactions. Each mobile device must store a single, signed offline token transaction to prevent fake tokens. On the other hand, all offline transactions will be kept as a history in a particular local database. Finally, when the receiver becomes online, it will send a convert request to the OTM to change the value of the OTs to the appropriate amount in real coins. This step requires a connection to the Internet. To evaluate the effectiveness of the system, the Solidity programming language was used to develop a smart contract on the Ethereum blockchain with a backend application programming interface (API) and an android mobile application. The proposed method has an advantage over other prominent wallets.

Machine learning for mobile network payment security evaluation system

AbstractIn the recent past, different types of Mobile Network payments gateways have been explosively growing, which allows consumers to access services using various types of mobile devices. The demanding, challenging factors in the mobile network payment gateway security evaluation system includes malware detection, multi‐factor authentication, and fraudulent detection in payment systems. In this paper, Machine Learning‐Assisted Secure Mobile Electronic Payment Framework (ML‐SMEPF) is proposed to detect the presence of malware, authentication issues, and fraud detection in mobile transactions. Here, the Efficient Random Oracle Model is introduced to detect the presence of malware on a host system and multi‐factor authentication challenges posed during mobile payments. Mutual Mobile Authentication model is incorporated with ML‐SMEPF, to identify the type of fraud detection which ensures a safe and secure mobile payment platform. The simulation analysis is performed based on accuracy ratio, security factor, performance, and cost factor proves the reliability of the proposed framework.

Using USSD-based Mobile Payment in Context of Low Internet Connection

With the evolution of mobile technology and the emergence of new devices called "smartphones", a new payment method called "mobile payment" has emerged. Smartphones occupy our daily life, so much so that some people do not imagine their routine life without them. If smartphones occupy the daily life in some African countries, orange money or MTN mobile money known as mobile payment accounts are even more. In Cameroon the mobile accounts (orange money or MTN mobile money) are so important that their use has become almost inevitable. We meet several utilities of these payment methods, we may cite electricity bills, purchase of products and services, payment of school and university fees etc. But this model of payment presents some limits among which we have the problem of ergonomic, proof of a payment and so on. In this work, we offer a secure, simple and powerful mobile payment model for both online using Internet as well as offline using Unstructured Supplementary Service Data (USSD). The payment model must be accessible to all, easy to use and shall support online or offline system. Inspired by the mode of operation of orange money outlets, this model uses two SIM cards, one commercial (seller) and the standard one (buyer). After designing an easy interface composed of two compulsory fields (phone number and amount), a USSD code is executed internally in our system requesting a withdrawal on the customer number. After the confirmation from the customer, the money is transferred to the seller's account. The model does not use of save any confidential information neither for the seller nor for the buyer.

The Moderating Role of Perceived Security Mobile Payment in Online Shopping

The use of social media and instant messaging such as Facebook and Instagram and instant messaging, such as WhatsApp, for e-commerce are growing in average by 65%, and marketplace growth by 10% from 2018 to 2020. In contrast, the growth company website as a sales media declined from 10% in 2018 to 5% in 2019. The main factors that influenced the website low usage are ease of use, and secure payment. Little has been known about the moderating effect of the perceived security of mobile payment in the relationship between intention to use and actual website usage. The objective of the study is to investigate the most important features, and analyze the moderating effect of perceived security mobile payment in the Technology Acceptance Model (TAM). The population observed is the online shopper in Greater Jakarta Area, using purposive sampling. The sample size was 114 collected during the period of May to June 2021. The data was analyzed using SPSS v25 and Smart PLS3. The result showed that Perceived Security Mobile Payment moderate the relationship between intention to use the website and actual usage of website. The finding contributes to TAM model literature with the moderator variable of Perceived Security of Mobile payment. The practical implication of the study is on the manager to consider mobile payment as an option of method payment, and to manage the features in the websites that can increase Perceived Ease of Use of the online shopper, such as product related features and delivery tracking status.

State of the Art: Secure Mobile Payment

With mobile payments popular around the world, payers can conduct a payment anytime and anywhere. While providing great convenience, mobile payment also brings many payment security issues. This paper is the first comprehensive review of secure mobile payment. We classify the mobile payment into TPC (third-party payment company)-led mobile payment and Bank-led mobile payment, and based on this, summarize the system structure of mobile payment. Then we discuss the mobile payment security technology framework from Tokenization, PAN (bank card primary account number) binding, and Secure Payment Authentication, respectively. Besides, this paper introduces secure technologies(hardware and software) used in these procedures, discusses and analyzes the security issues that they have been encountered, summarise open issues, and proposes future development directions. In the end, we give the discussion and comparison of popular and representative mobile payment applications, including Alipay, Wechat Pay, Apple Pay, Samsung Pay, and Google Pay.

Identity Authentication Security Management in Mobile Payment Systems

Mobile payment is a new payment method offering users mobility, reachability, compatibility, and convenience. But mobile payment involves great uncertainty and risk given its electronic and wireless nature. Therefore, biometric authentication has been adopted widely in mobile payment in recent years. However, although technology requirements for secure mobile payment have been met, standards and consistent requirements of user authentication in mobile payment are not available. The flow management of user authentication in mobile payment is still at its early stage. Accordingly, this paper proposes an anonymous authentication and management flow for mobile payment to support secure transaction to prevent the disclosure of users' information and to reduce identity theft. The proposed management flow integrates transaction key generation, encryption and decryption, and matching to process users' personal information and biometric characteristics based on mobile equipment authentication carrier.

모바일간편결제시스템보안결제UI의유형별인식비교분석

모바일간편결제시스템보안결제UI의유형별인식비교분석

An Indoor Positioning-Based Mobile Payment System Using Bluetooth Low Energy Technology.

The development of information technology has paved the way for faster and more convenient payment process flows and new methodology for the design and implementation of next generation payment systems. The growth of smartphone usage nowadays has fostered a new and popular mobile payment environment. Most of the current generation smartphones support Bluetooth Low Energy (BLE) technology to communicate with nearby BLE-enabled devices. It is plausible to construct an Over-the-Air BLE-based mobile payment system as one of the payment methods for people living in modern societies. In this paper, a secure indoor positioning-based mobile payment authentication protocol with BLE technology and the corresponding mobile payment system design are proposed. The proposed protocol consists of three phases: initialization phase, session key construction phase, and authentication phase. When a customer moves toward the POS counter area, the proposed mobile payment system will automatically detect the position of the customer to confirm whether the customer is ready for the checkout process. Once the system has identified the customer is standing within the payment-enabled area, the payment system will invoke authentication process between POS and the customer’s smartphone through BLE communication channel to generate a secure session key and establish an authenticated communication session to perform the payment transaction accordingly. A prototype is implemented to assess the performance of the proposed design for mobile payment system. In addition, security analysis is conducted to evaluate the security strength of the proposed protocol.

Dynamic Rule Encryption for Mobile Payment

The trend of financial transactions by using a mobile phone or mobile payment increases. By using the mobile payment service, users can save money on mobile phone (handset) and separate from the pulse. For protecting users, mobile payment service providers must complete the mobile payment service with the transaction security. One way to provide transaction security is to utilize a secure mobile payment application. This research provides a safety feature used for an Android-based mobile payment application. This security feature is making encryption rules dynamically named Dynamic Rule Encryption (DRE). DRE has the ability to protect data by means of encrypting data with dynamic rules, and DRE also has a token function for an authentication. DRE token raised with dynamic time-based rules. Here, the time is used as a reference with the order of the day in the year (day of the year). The processes of the DRE’s encryption, decryption, and the DRE’s functionality as the token are discussed in this paper. Here, the Hamming distance metric is employed for having maximum differences between plaintext and ciphertext.

Enkripsi Aturan Dinamis pada Aplikasi Pembayaran Gerak

The trend of financial transactions using mobile phone or mobile payment is increasing. Using the mobile payment service, user can save money on the mobile phone and separate the money from prepaid bills. In order to protect the user, provider must equip the mobile payment service with transaction security, such as secure mobile payment application. This paper offers a safety feature which is used for mobile payment application based on Android operating system. A new method, Dynamic Rule Encryption (DRE), is created. In DRE, the encryption is ruled dynamically. By encrypting data with dynamic rules, DRE can protect the data. DRE also has a function as a token for authentication. DRE Token is generated using dynamic time-based rules. The time reference used in DRE is based on the order of the day in the year (day of the year). Performance measurement in this research is based on the Hamming distance. The test results show that the system performs quite good. The average distance among outputs is about 258 bits of 512 bits input. The results also show that the DRE program’s execution time is quite fast, i.e. not more than 24 ms.

A secure NFC mobile payment protocol based on biometrics with formal verification

In this paper, we propose a secure NFC mobile payment protocol based on biometrics SNMPBs using wireless public key infrastructure WPKI and universal integrated circuit card UICC. Electronic signatures generated in this protocol are considered qualified signatures as they are generated in UICC which is tamper resistant device. A procedure for the personalisation of mobile payment application on the UICC by the issuer/bank is proposed. Our SNMPB resolves disputes efficiently among stakeholders by collecting evidence using transaction counters, transaction log, forensics mode and cryptographic audit log techniques. SNMPB ensures end-to-end security i.e., from mobile payments application in UICC to the bank server thereby achieving confidentiality, authentication, integrity and non-repudiation properties, prevents double spending and over spending. Our proposed SNMPB protocol withstands replay, man in the middle MITM, impersonation and multi-protocol attacks as SNMPB is formally verified successfully using BAN logic and Scyther tool.

Application of Collaborative Information Exchange in Urban Public Transport: The Seamless Mobility Solution

Contemporary urban transportation networks are facing challenges to address the growing needs of mobility, all the while improving their economic gains and environmental sustainability. Several studies demonstrate that competitive alternatives to individual private transport are able to address these challenges, such as public transportation services. Thus, the need for optimising their operational efficiency and offer user-centric service delivery arises, with a range of challenges related to the inherent complexity of urban transportation networks as well as the range of dynamic elements involved in such systems.An innovative approach to this problem leverages personal mobile devices in combination with collaborative exchange of information. In this study a system was developed to combine information provided by travellers with data from public transport operators. The result is a rich model of the transportation network that enables the distribution of information in a personalized way and in real-time: the Seamless Mobility solution. Large-scale and expensive infrastructures, such as existing ticketing systems, constitute a threat to such flexibility and traveller access to services. As a result, a distributed architecture was targeted with the goal of integrating personal mobile devices in the infrastructure, with benefits for travellers and transport operators.The proposed solution integrates a broad scope of challenges, including application of secure mobile payments methods, data aggregation from different components and distribution based on relevance techniques. With the implementation of this solution we expect to positively impact the way travellers and transport operators interact, and contribute towards mobility services that are more agile and adequate, taking into account that mobility patterns vary from person to person, seasonally, and even throughout a day.

Building a Secure Mobile Payment Protocol in the Cloud

This paper is mainly to resolve the secure problems of mobile payment business which the remote payment is their main businesses. The identity authenticity of mobile payment user, the confidentiality and non repudiation of information transmitted in the mobile payment process are all the main secure problems. The secure mobile payment protocol is established base all the above secure problems’ solutions.

A Secure and Lightweight Mobile Payment Protocol Based on Smartcard

A Secure and Lightweight Mobile Payment Protocol Based on Smartcard

A Comparative Study Of Smartphone Users Perception And Preference Towards Mobile Payment Methods In The U.S. And Korea

As the Smartphone adoption rate increases, Smartphone users pay more attention to mobile payment. There are several options for mobile payment but there is no dominate method. Proximity mobile payment is the newest form of mobile payment. Security, cost, and convenience are three main factors Smartphone users keep in mind when making a mobile payment. This paper investigates Smartphone users perceptions and preferences toward mobile payment methods in Korea and the U.S. U.S. Smartphone users have a willingness to pay more for a secure mobile payment transaction, even though Korean users have more experience in the mobile payment frequency. Among the three factors, mobile security is the factor of strongest influence on mobile payment frequency in both countries.

Samsung S5 to feature biometric access control and secure mobile PayPal

Samsung Electronics has announced the fifth generation of the Galaxy S series, the Galaxy S5, will have a finger scanner biometrics, to provide access control and authorise secure mobile payments with PayPal merchants.

A Secure Mobile Payments Protocol Based on ECC

Owing to the limitations of mobile terminals and network bandwidth, the current Secure Electronic Transaction (SET) protocol can not be introduced into mobile payment directly. Present mobile payment system often uses symmetric encryption algorithm that may bring in some security risks. A new secure mobile payment protocol based on ECC was presented ,which ensures information flows from merchant to customer and enhances the security of customer’s information. Theoretical analysis shows that, ECC can not only meet the requirements of short key generation time, but also ensure that at the same time of cracking code the ratio of RSA and ECC key length is greater than 5:1. The number of signing the certificate verification, asymmetric and symmetric encryption of the new protocol is also lesser than SET protocol, so the current mobile terminal and network capabilities can support this protocol to ensure safe and effective mobile payment process.

A Secure and Optimized Proximity Mobile Payment Framework with Formal Verification

In this paper the authors propose a Secure and Optimized Proximity Mobile Payment (SOPMP) Framework using NFC (Near Field Communication) technology, WPKI (Wireless Public Key Infrastructure), UICC (Universal Integrated Circuit Card). The novelty of this proposed mobile payment framework is messages are exchanged in the form of Digital Signature with Message Recovery (DSMR) and merchant sends Invoice in the form of Digital Invoice Certificate (DIC) (which is digitally signed by the merchant). The communication link between mobile phone and merchant POS (Point Of Sale) is NFC. Digital Signature with Message Recovery based on ECDSA eliminates the need of adopting PKI cryptosystems thereby reducing the consumption of resources i.e. it consumes less computational and communication cost. DSMR eliminates the need of certificates validation and removes the hurdle of PKI thereby reducing storage space, communication cost and computational cost. The authors proposed protocol ensures Authentication, Integrity, Confidentiality and Non Repudiation, achieves Identity protection from merchant and Eavesdropper, achieves Transaction privacy from Eavesdropper and Payment Gateway, achieves Payment Secrecy, Order Secrecy, forward secrecy, and prevents Double Spending, Overspending and Money laundering. In addition to these our proposed protocol withstands Replay, Man in the Middle and Impersonation attacks. The security properties of the proposed protocol have been verified using AVISPA and Scyther Tools and presented with results.