Abstract:Mobile payment (m-payment) received significant attention because it enables an easy payment mechanism and becomes an important complement to traditional payment means. However, m-payment over open devices and networks poses security challenges of a new dimension. Although many researchers address security issues in m-payment, there are still some security problems that are not well resolved, such as platform integrity and user privacy protection. In this paper, we propose a general payment architecture with Trusted Computing (TC) technologies to secure mobile payment. Using only a simple mobile payment infrastructure, a platform integrity protection solution is proposed to secure payment software downloading, application initialization, and secure payment transactions. We further propose two schemes to enhance the performance and flexibility of our solution. The first scheme provides platform attestation using an identity-based signature (IBS) algorithm instead of a traditional credential-based public-key signature algorithm within Trusted Computing Group (TCG) technologies, which fully utilizes the merits of the mobile computing infrastructure and improves the flexibility and performance of the payment solution. The second scheme provides attestation caching without sacrificing security achievements. We have implemented a real prototype system based on an emulated payment environment. Our security analysis and experimental results prove that our scheme can effectively meet the security requirements of a practical m-payment with acceptable performance.

Design Mobile Commerce Security Project by Technology of J2ME and XML

Bargain Security Model Based on Mobile Agent

Design and Development of J2ME and J2EE Based Mobile-Commerce

Secure Application of Wireless Java in Mobile Devices

Key Techniques for Mobile Internet: a Survey

Lightweight Security for Mobile Commerce Transactions

Research on Security Protocol for Mobile Payment Based Oil J2ME

An Integrated Mobile Phone Payment System Based on 3G Network.

Mobile Payment Framework Based on 3G Network

Mobile Internet Based M-Commerce Management Architecture & System

A Security Protocol for Mobile E-service Oriented Architecture (MSOA): Design and Implementation

The Security of WAP-based Electronic Payment

The Design and Application of Electronic Business Pay System Based on SSL Protocol

The Problems of Mobile E-Commerce Secure Payment and Solutions

A Robust Middleware Architecture for Mobile Communication Security

A New Security Architecture for Mobile Communication

A Solution to Mobile Computing Application Based on J2ME and PHP Technology

Secure Mobile Payment Via Trusted Computing

Security Research on J2ME-Based Mobile Payment

Analysis of the Technical Characteristics of Java Card and Its Application

Dynamic Symmetric Key Mobile Commerce Scheme Based on Self-Verified Mechanism