Android-based mobile payment service protected by 3-factor authentication and virtual private ad hoc networking

Hu, Jhe-Yi; Sueng, Chien-Cheng; Liao, Wei-Hsiang; Ho, Chian C.

doi:10.1109/comcomap.2012.6154013

Cited by 13 publications

(11 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…[1,6] uses QR code in the transaction, which can be forged by attackers easily. In [5,[13][14][15], the other parties cannot detect double-spending.…”

Section: Double-spending Detectionmentioning

confidence: 96%

“…In this section, we compare our scheme with other related works [1,[3][4][5][6]9,[13][14][15]17,18,21,22] in terms of functions, as shown in Table 3. The functions include authentication, anonymity, limited credits, unlinkability, offline transactions, double-spending detection, NFC, and EMV-compatible.…”

Section: Comparison With Related Studiesmentioning

confidence: 98%

“…Both [3,4] uses GSM/3G's SIM and USIM cards as authentication token. [13] uses pseudonyms to protect privacy. Other works require user's real identity.…”

Section: Anonymitymentioning

confidence: 99%

See 2 more Smart Citations

An Unlinkable Anonymous Payment Scheme based on near field communication

Luo

Yang

Huang

2016

Computers & Electrical Engineering

View full text Add to dashboard Cite

“…[1,6] uses QR code in the transaction, which can be forged by attackers easily. In [5,[13][14][15], the other parties cannot detect double-spending.…”

Section: Double-spending Detectionmentioning

confidence: 96%

Section: Comparison With Related Studiesmentioning

confidence: 98%

See 1 more Smart Citation

An Unlinkable Anonymous Payment Scheme based on near field communication

Luo

Yang

Huang

2016

Computers & Electrical Engineering

View full text Add to dashboard Cite

“…The concept of facial recognition technique through a vertical pose recovery fast semi-3D face [29] and fragile watermarking based on chaos theory [30] provided an impressive accuracy rate. Moreover, an extra security measure is achievable with the combination of this technique and other user authentication methods such as PIN.…”

Section: Physical Biometricsmentioning

confidence: 99%

A Survey of Machine Learning Techniques for Behavioral-Based Biometric User Authentication

Mahadi¹,

Mohamed²,

IhsanMohamad³

et al. 2018

Recent Advances in Cryptography and Network Security

View full text Add to dashboard Cite

Authentication is a way to enable an individual to be uniquely identified usually based on passwords and personal identification number (PIN). The main problems of such authentication techniques are the unwillingness of the users to remember long and challenging combinations of numbers, letters, and symbols that can be lost, forged, stolen, or forgotten. In this paper, we investigate the current advances in the use of behavioral-based biometrics for user authentication. The application of behavioral-based biometric authentication basically contains three major modules, namely, data capture, feature extraction, and classifier. This application is focusing on extracting the behavioral features related to the user and using these features for authentication measure. The objective is to determine the classifier techniques that mostly are used for data analysis during authentication process. From the comparison, we anticipate to discover the gap for improving the performance of behavioral-based biometric authentication. Additionally, we highlight the set of classifier techniques that are best performing for behavioral-based biometric authentication.

show abstract

“…Using triple-DES (3DES) in [73] provided more security in a cashless transaction than DES. The scheme proposed by [74] used a PIN, SIM card, and face recognition with a DES/3DES encryption algorithm to enforce the security between the mobile payment application and the virtual private ad hoc network. Alornyo et al [75] employed identity-based cryptography in securing mobile money wallets to resist insider attacks, and it consumed less computational cost in token generation.…”

mentioning

confidence: 99%

Two-Factor Authentication Scheme for Mobile Money: A Review of Threat Models and Countermeasures

2020

View full text Add to dashboard Cite

The proliferation of digital financial innovations like mobile money has led to the rise in mobile subscriptions and transactions. It has also increased the security challenges associated with the current two-factor authentication (2FA) scheme for mobile money due to the high demand. This review paper aims to determine the threat models in the 2FA scheme for mobile money. It also intends to identify the countermeasures to overcome the threat models. A comprehensive literature search was conducted from the Google Scholar and other leading scientific databases such as IEEE Xplore, MDPI, Emerald Insight, Hindawi, ACM, Elsevier, Springer, and Specific and International Journals, where 97 papers were reviewed that focused on the topic. Descriptive research papers and studies related to the theme were selected. Three reviewers extracted information independently on authentication, mobile money system architecture, mobile money access, the authentication scheme for mobile money, various attacks on the mobile money system (MMS), threat models in the 2FA scheme for mobile money, and countermeasures. Through literature analysis, it was found that the threat models in the 2FA scheme for mobile money were categorised into five, namely, attacks against privacy, attacks against authentication, attacks against confidentiality, attacks against integrity, and attacks against availability. The countermeasures include use of cryptographic functions (e.g., asymmetric encryption function, symmetric encryption function, and hash function) and personal identification (e.g., number-based and biometric-based countermeasures). This review study reveals that the current 2FA scheme for mobile money has security gaps that need to be addressed since it only uses a personal identification number (PIN) and a subscriber identity module (SIM) to authenticate users, which are susceptible to attacks. This work, therefore, will help mobile money service providers (MMSPs), decision-makers, and governments that wish to improve their current 2FA scheme for mobile money.

show abstract

Android-based mobile payment service protected by 3-factor authentication and virtual private ad hoc networking

Cited by 13 publications

References 6 publications

An Unlinkable Anonymous Payment Scheme based on near field communication

An Unlinkable Anonymous Payment Scheme based on near field communication

A Survey of Machine Learning Techniques for Behavioral-Based Biometric User Authentication

Two-Factor Authentication Scheme for Mobile Money: A Review of Threat Models and Countermeasures

Contact Info

Product

Resources

About