A Secure Mobile Payment Framework in MANET Environment

Abstract

In this paper the authors propose a Secure Mobile Payment Framework in Multi hop Cellular Network environment (which is an integration of cellular networks and mobile ad hoc networks) using Mobile Agent technology and Digital Signature with Message Recovery (DSMR) mechanism based on ECDSA mechanism. Secure communication in Multi hop Cellular Networks is a nontrivial task because of lack of infrastructure, no prior trust relationships among nodes due to the absence of a centralized authority. Mobile Agent technology and Digital Signature with Message Recovery based on ECDSA mechanism provides secure mobile payments in Multi hop Cellular Networks. Mobile Agent technology has many benefits such as bandwidth conservation, reduction of latency, reduction of completion time, Asynchronous (disconnected) communications. Digital Signature with Message Recovery based on ECDSA eliminates the need of adopting PKI cryptosystems. The proposed protocol ensures Authentication, Integrity, Confidentiality and Non Repudiation, achieves Identity protection from merchant and Eavesdropper, achieves Transaction privacy from Eavesdropper and Payment Gateway, achieves Payment Secrecy, Order Secrecy, forward secrecy, prevents Double Spending, Overspending and Money laundering. The security properties of the proposed protocol have been verified successfully using BAN Logic, AVISPA and Scyther Tools and presented with results.

Demographic Influences on E-Payment Services

“…Moreover, e-payment systems have enormous implications for privacy, as entities such as telecommunications services providers will have access to financial and transactional data once only held by only the banks and transaction processors (Eraker, Hector, & Hoofnagle, 2011). To enhance customers' perception of e-payment security, there is the need for awareness of e-payment related fraud (Obiri-Yeboah et al, 2013), improvements in e-payment systems security (Ahamad et al, 2013;Kamoun & Halaweh, 2012), and enhancements in customers' knowledge of the available security mechanisms in the systems.…”