A Secure Cloud-Based NFC Mobile Payment Protocol
Journal Title: International Journal of Advanced Computer Science & Applications - Year 2014, Vol 5, Issue 10
Abstract
Near Field Communication (NFC) is one the most recent technologies in the area of application development and service delivery via mobile phone. NFC enables the mobile phone to act as identification and a credit card for customers. Dynamic relationships of NFC ecosystem players in an NFC transaction process make them partners in a way that sometimes they should share their access permissions on the applications that are running in the service environment. One of the technologies that can be used to ensure secure NFC transactions is cloud computing which offers wide range advantages compare to the use of a Secure Element (SE) as a single entity in an NFC enabled mobile phone. In this paper, we propose a protocol based on the concept of NFC mobile payments. Accordingly, we present an extended version of the NFC cloud Wallet model [14], in which, the Secure Element in the mobile device is used for customer authentication whereas the customer's banking credentials are stored in a cloud under the control of the Mobile Network Operator (MNO). In this circumstance, Mobile Network Operator plays the role of network carrier which is responsible for controlling all the credentials transferred to the end user. The proposed protocol eliminates the requirement of a shared secret between the Point-of-Sale (POS) and the Mobile Network Operator before execution of the protocol, a mandatory requirement in the earlier version of this protocol [16]. This makes it more practicable and user friendly. At the end, we provide a detailed analysis of the protocol where we discuss multiple attack scenarios.
Authors and Affiliations
Pardis Pourghomi, Muhammad Saeed, Gheorghita Ghinea
Keywords
Related Articles
- EP ID EP132038
- DOI 10.14569/IJACSA.2014.051004#sthash.468SOG9a.dpuf
- Views 76
- Downloads 0
Personalized Semantic Retrieval and Summarization of Web Based Documents
The current retrieval methods are essentially based on the string-matching approach lacking of semantic information and can’t understand the user's query intent and interest very well. These methods do regard as the pers...
Green Technology, Cloud Computing and Data Centers: the Need for Integrated Energy Efficiency Framework and Effective Metric
Energy efficiency (EE), energy consumption cost and environmental impact are vibrant challenges to cloud computing and data centers. Reducing energy consumption and emissions of carbon dioxide (CO2) in data centers repre...
Interaction between Learning Style and Gender in Mixed Learning with 40% Face-to-face Learning and 60% Online Learning
Student learning styles are important factors that have a strong impact on student performance in learning outcomes. That is why each learning method will produce different learning outcomes for students who have differe...
Awareness Training Transfer and Information Security Content Development for Healthcare Industry
Electronic Health Record (EHR) becomes increasingly pervasive and the need to safeguard EHR becomes more vital for healthcare organizations. Human error is known as the biggest threat to information security in Electroni...
An Embedded Modbus Compliant Interactive Operator Interface for a Variable Frequency Drive Using Rs 485
The paper proposes the architecture and software design of a Modbus Compliant Operator Interface Panel (MCOIP) for a high speed Variable Frequency Drive (VFD) – a state of the art embedded design that offers several key...