거래 인증 모드를 사용한 이동 결제 시스템 설계
Mobile Payment System Design with Transaction Certificate Mode
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
결제를 위한 이전의 웹 접근 인증 시스템의 웹 혹은 모바일 채널은 단지 사용자 인증만을 위한 것이며 사용자와 은행 및 금융 기관과의 인증은 이루어지지 않고 있다. 따라서 본 논문은 웹 기반 결제 시스템을 위한 사용자와 은행 및금융 기관과의 상호 인증이 가능한 결제 거래 인증 모드를 제안한다. 제안한 시스템은 유선 전자 거래를 위한 안전한 전자 거래 (Secure Electronic Transaction : SET)를 무선네트워크를 위한 결제 시스템으로 설계하였다. 또한 거래 인증 모드를 사용한 이 시스템은 SET 단점인 유선의 카드 기반 거래를 대신하여, 무선의 계좌 기반 거래를 지원 할 수 있다. 따라서 고객은 고객과 고객 은행 사이의 상호 인증으로고객 은행 사이트에 다시 로그인할 필요 없이 잔고를 확인할 수 있다.
Abstract
The Web or Mobile channel of previous Web access authentication system for a payment only provides the authentication ofremote users, and does not provide the authentication between a user and a bank/financial institution. Therefore, this paperproposes the Transaction Certificate Mode(TCM) for a payment which can preserve the mutual authentication between a user anda bank/financial institution for Web-based payment systems. The proposed system has designed for wireless network instead of Secure Electronic Transaction (SET) designed for wiredelectronic transaction. In addition, this system with TCM is able to support an account-based transaction for wireless networksinstead of a disadvantage of SET such as a card-based transaction for wired networks. Therefore, customers can check theirbalances without logging on their bank’s web site again due to mutual authentication between a customer and his bank/financialinstitution.
참고문헌 (21)
- L. Lamport, "Password Authentication with Insecure Communication", Communication of the ACM, 24(11), pp.770~772 (1981)
- M. S. Hwang, "A New Remote User Authentication Scheme using Smart Cards", IEEE Transactions on Consumer Electronics, 46(1), pp.28~30 (2000)
- E. J. Yoon, "Further Improvement of an Efficient Password based Remote User Authentication Scheme using Smart Cards", IEEE Transactions on Consumer Electronics, 50(2), pp.612~614 (2004)
- M. L. Das, "A Dynamic ID-based Remote User Authentication Scheme", IEEE Transactions on Consumer Electronics, 50(2), pp.629~631 (2004)
- C. W. Lin, "A New Strong-Password Authentication Scheme using One-way Hash Function", Journal of Computer and Systems Sciences International, 45(4), pp.623~626 (2006)
- C. S. Bindu, "Improved Remote User Authentication Scheme Preserving User Anonymity", International Journal of Computer Science and Network Security, 83, pp.62~66 (2008)
- J. Gao, "Wireless Payment", Proceedings of the Second International Conference on Embedded Software and Systems (ICESS’05), pp.367~374 (2005)
- S. Kungpisdan, "A Secure Account-Based Mobile Payment Protocol", Proceedings of the International Conference on Information Technology: Coding and Computing, pp.35~39 (2004)
- Y.B. Lin, "Mobile prepaid phone services", IEEE Personal Communications, 7, pp.6~14 (2000)
- A. Fourati, "A SET Based Approach to Secure the Payment in Mobile Commerce", Proceedings of 27th Annual IEEE Conference on Local Computer Networks, pp.136~140 (2002)
- Huang Z., "Electronic Payment in Mobile Environment", Proceedings of 13th International Workshop on Database and Expert Systems Application (DEXA’02), pp.413~417 (2002)
- W. Adi, "Combined Web", Mobile Authentication for Secure Web Access Control, 2004, 667~681[DOI]
- Ayu Tiwari, "A Multi-Factor Security Protocol for Wireless payment Secure Web Authentication using Mobile Devices", IADIS International Conference Applied Computing 2007, pp.160~167 (2007)
- J. Hall, "WPP: A Secure Payment Protocol for Supporting Credit- and Debit-Card Transactions over Wireless Networks", IEEE International Conference on Telecommunications (2001)
- V. Pasupathinathan, "Formal Analysis of Card-based Payment Systems in Mobile devices", Fourth Australasian Information Security Workshop, Conferences in Research and Practice in Information Technology, 54, pp.213~220 (2006)
- L. Albert, "CONSEPP:Convenient and Secure Electronic Payment Protocol Based on X9.59", 17th Annual Computer Security Applications Conference, pp.286~295 (2001), IEEE press
- P. Kocher, "Differential Power Analysis", Proceedings of Advances in Cryptology, pp.388~397 (1999)
- T. S. Messerges, "Examining Smart-Card Security under the Threat of Power Analysis Attacks", IEEE Transactions on Computers, 51(5), pp.541~552 (2002)
- S. Kungpisdan, "Lightweight mobile credit-card payment protocol", The 4th International Conference on Cryptology in India (Progress in Cryptology - INDOCRYPT 2003), pp.295~308 (2003)
- T. S. Fun, "A lightweight and private mobile payment protocol by using mobile network operator", The International Conference on Computer and Communication Engineering, pp.162~166 (2008)
- Jesus Tellez Isaac, "An Anonymous Secure Payment Protocol in a payment Gateway Centric Model", The 9th International Conference on Mobile Web Information Systems (MobiWIS), Procedia Computer Science, 10, pp.758~765 (2012)