Abstract:Mobile payment (m-payment) received significant attention because it enables an easy payment mechanism and becomes an important complement to traditional payment means. However, m-payment over open devices and networks poses security challenges of a new dimension. Although many researchers address security issues in m-payment, there are still some security problems that are not well resolved, such as platform integrity and user privacy protection. In this paper, we propose a general payment architecture with Trusted Computing (TC) technologies to secure mobile payment. Using only a simple mobile payment infrastructure, a platform integrity protection solution is proposed to secure payment software downloading, application initialization, and secure payment transactions. We further propose two schemes to enhance the performance and flexibility of our solution. The first scheme provides platform attestation using an identity-based signature (IBS) algorithm instead of a traditional credential-based public-key signature algorithm within Trusted Computing Group (TCG) technologies, which fully utilizes the merits of the mobile computing infrastructure and improves the flexibility and performance of the payment solution. The second scheme provides attestation caching without sacrificing security achievements. We have implemented a real prototype system based on an emulated payment environment. Our security analysis and experimental results prove that our scheme can effectively meet the security requirements of a practical m-payment with acceptable performance.

Mobile Payment Pattern Based on Multiple Trusted Platforms - China Case

Mobile Payment Framework Based on 3G Network

Study Of Mobile Payments System

An Integrated Mobile Phone Payment System Based on 3G Network.

Mobile Payment with Alipay: an Application of Extended Technology Acceptance Model.

Antecedents of Trust and Continuance Intention in Mobile Payment Platforms: the Moderating Effect of Gender.

Mobile Payment in China: Practice and Its Effects

Secure Mobile Payment Via Trusted Computing

Mobile Payment in China: A Study from a Sociological Perspective

Cybersecurity Challenges in Mobile Payment Systems: A Case Study of Alipay in Chinese Cities

Discussion on the Development of Mobile Payment Technology in the Era of Digital Economy- Taking Tencent as an Example

Dual-Anonymous Off-Line Electronic Cash for Mobile Payment

Research and Practice on System Engineering Management of a Mobile Payment Project

Mobile Payments in Global Markets Using Biometrics and Cloud.

An enhanced-security fair payment protocol based on mobile agent

RESEARCH ON APPLICABILITY OF SAFETY STANDARD IN MOBILE PAYMENT FIELD

Digital RMB and Its Predecessor: A Comparison with Mobile Payment Platforms

Analysis of the Marketing Strategy of Alipay Payment Method under the Internet Economy

Secure Mobile Payment Architecture Enabling Multi-factor Authentication

An analytical framework for an m-payment ecosystem: A merchants׳ perspective

Identity Authentication Security Management in Mobile Payment Systems