A secure payment protocol for restricted connectivity scenarios in M-commerce

  • Authors:
  • Jesús Téllez Isaac;José Sierra Camara

  • Affiliations:
  • Universidad de Carabobo, Computer Science Department, Valencia, Venezuela;Universidad Carlos III de Madrid, Computer Science Department, Leganés, Madrid, Spain

  • Venue:
  • EC-Web'07 Proceedings of the 8th international conference on E-commerce and web technologies
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

A significant number of mobile payment systems have been proposed in recent years, most of them based on a scenario where all the entities are directly connected one to another (formally called "Full connectivity scenario"). Despite of the advantages that the aforemen tioned scenario offers to protocol's designers, regarding design simplification and development of payment protocols without losing security capabilities, the full connectivity scenario does not consider those situations in which the client cannot directly communicate with the issuer (Kiosk Centric Model) or the merchant has no direct communication with the acquirer (Client Centric Model). In order to overcome this restriction and contribute to the progress of m-commerce, in this paper we propose an anonymous protocol that uses a digital signature scheme with message recovery using self-certified public keys that is suitable for both the Kiosk Centric Model and Client Centric Model. As a result, our proposal shows that m-commerce is possible in restrictive connectivity scenarios, achieving the same security capabilities than other protocols designed for mobile payment systems based on "Full connectivity scenario".