Design and Implementation of a Secure Mobile Banking System Based on Elliptic Curve Integrated Encryption Schema

Salim, Ahmad; Sagheer, Ali Makki; Yaseen, Linha

doi:10.1007/978-3-030-38752-5_33

Cited by 6 publications

(28 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To deal with this attack, [71,106] proposed a hybrid cryptographic method on the basis of the MD5 algorithm and the RSA algorithm. Bojjagani and Sastry [66] and Salim, Sagheer, and Yaseen [70] suggested ECDSA for digital signature and ECIES using AES-GCM as the encryption algorithm. Makulilo [47] recommended general data privacy legislation and sector-specific laws that protect privacy.…”

Section: Resultsmentioning

confidence: 99%

“…Impersonation attacks: An attacker can assume the identity of a legitimate mobile money user or agent, access the financial details of a registered user, and perform fraudulent transactions. There are 14 authentication protocols [56,[66][67][68][69][70]72,77,81,87,88,102,103,105] to prevent impersonation attacks. The schemes in [81,105] employed fingerprint biometrics.…”

Section: Resultsmentioning

confidence: 99%

“…Bojjagani and Sastry [66], Ray, Biswas, and Dasgupta [68], and Shilpa and Panchami [69] used elliptic curve cryptosystems. Singh and Jasmine [87], Kisore and Sagi [67], Rodrigues, Chaudhari, and More [56], Alhothailya et al [77], and Salim, Sagheer, and Yaseen [70] adopted hashing functions. Purnomo, Gondokaryono, and Kim [72] proposed an asymmetric encryption function.…”

Section: Resultsmentioning

confidence: 99%

“…Asymmetric Encryption Function: The examples of asymmetric encryption functions used in the 2FA scheme for mobile money are elliptic curve cryptography (ECC) and the Rivest-Shamir-Adleman (RSA) encryption algorithm. The mobile money authentication schemes [66][67][68][69][70] use ECC. The scheme proposed by Bojjagani and Sastry [66] uses SMS, elliptic curve integrated encryption scheme (ECIES), and elliptic curve digital signature algorithm (ECDSA) to ensure user authentication, data confidentiality, and nonrepudiation, thereby reducing computation complexity in mobile banking.…”

mentioning

confidence: 99%

“…Shilpa and Panchami [69] employed biometric, IMEI number, and SIM serial number, colour encryption with ECC to improve the security of mobile banking. The scheme [70] integrated secure ECC to provide data confidentiality, data integrity, and user authentication in mobile banking. The scheme proposed by Sharma and Bohra [71] employed a hybrid cryptographic authentication method using the quick response (QR) code and OTP to improve user authentication and confidentiality in online banking.…”

mentioning

confidence: 99%

See 4 more Smart Citations

Two-Factor Authentication Scheme for Mobile Money: A Review of Threat Models and Countermeasures

2020

View full text Add to dashboard Cite

The proliferation of digital financial innovations like mobile money has led to the rise in mobile subscriptions and transactions. It has also increased the security challenges associated with the current two-factor authentication (2FA) scheme for mobile money due to the high demand. This review paper aims to determine the threat models in the 2FA scheme for mobile money. It also intends to identify the countermeasures to overcome the threat models. A comprehensive literature search was conducted from the Google Scholar and other leading scientific databases such as IEEE Xplore, MDPI, Emerald Insight, Hindawi, ACM, Elsevier, Springer, and Specific and International Journals, where 97 papers were reviewed that focused on the topic. Descriptive research papers and studies related to the theme were selected. Three reviewers extracted information independently on authentication, mobile money system architecture, mobile money access, the authentication scheme for mobile money, various attacks on the mobile money system (MMS), threat models in the 2FA scheme for mobile money, and countermeasures. Through literature analysis, it was found that the threat models in the 2FA scheme for mobile money were categorised into five, namely, attacks against privacy, attacks against authentication, attacks against confidentiality, attacks against integrity, and attacks against availability. The countermeasures include use of cryptographic functions (e.g., asymmetric encryption function, symmetric encryption function, and hash function) and personal identification (e.g., number-based and biometric-based countermeasures). This review study reveals that the current 2FA scheme for mobile money has security gaps that need to be addressed since it only uses a personal identification number (PIN) and a subscriber identity module (SIM) to authenticate users, which are susceptible to attacks. This work, therefore, will help mobile money service providers (MMSPs), decision-makers, and governments that wish to improve their current 2FA scheme for mobile money.

show abstract

Section: Resultsmentioning

confidence: 99%

Section: Resultsmentioning

confidence: 99%

Section: Resultsmentioning

confidence: 99%

mentioning

confidence: 99%

mentioning

confidence: 99%

See 3 more Smart Citations

Two-Factor Authentication Scheme for Mobile Money: A Review of Threat Models and Countermeasures

2020

View full text Add to dashboard Cite

show abstract

A Comprehensive Study of Different Security Features in eBanking

Mothukuri

Rakesh

Babu

et al. 2023

2023 Third International Conference on Artificial Intelligence and Smart Energy (ICAIS)

View full text Add to dashboard Cite

Image Steganography Technique based on Lorenz Chaotic System and Bloom Filter

Salim,

Abdulbasit Mohammed,

Maath Jasem

et al. 2024

IJCDS

View full text Add to dashboard Cite

Steganography is the study of invisible communication, which typically focuses on methods of concealing the existence of the communicated message. Steganography is now widely used as a means of protecting sensitive data. The term "security" in steganography systems mainly implies to the idea of "undetectability", that is, how effective the steganographic method for hiding data in terms of its capability to avoid detection through statistical analysis and remain undiscovered even if the cover media is found by an unauthorized party. There are many techniques used in steganography systems, one of which and the most common is the Least Significant Bit (LSB) technique. In this approach, some of the right-most bits of the cover image is replaced with the data to be hidden. Due to the computations simlicity of this approach, it is extremely susceptible to statistical attacks which remains a challenge. The proposed technique in this study utilizes chaotic systems to generate pseudo-random image positions for concealing sensitive data within cover images. By leveraging Lorenz's chaotic system and the Bloom filter, the method aims to enhance information security by preventing data repetition and loss in the same pixel. The approach overcomes the vulnerabilities of traditional LSB techniques by embedding encrypted data in arbitrary locations, making it more secure against steganalysis. Results demonstrate the method's effectiveness against visual and analytical attacks, with a PSNR of 48.57% and a NPCR of 32.35%. This innovative approach offers a robust solution for securely embedding data within images, contributing to the advancement of information security in digital systems.

show abstract

Design and Implementation of a Secure Mobile Banking System Based on Elliptic Curve Integrated Encryption Schema

Cited by 6 publications

References 13 publications

Two-Factor Authentication Scheme for Mobile Money: A Review of Threat Models and Countermeasures

Two-Factor Authentication Scheme for Mobile Money: A Review of Threat Models and Countermeasures

A Comprehensive Study of Different Security Features in eBanking

Image Steganography Technique based on Lorenz Chaotic System and Bloom Filter

Contact Info

Product

Resources

About