Untraceable and Anonymous Mobile Payment Scheme Based on Near Field Communication

Abstract

With the developments of mobile communications, M-commerce has become increasingly popular in recent years. However, most M-commerce schemes ignore user anonymity during online transactions. As a result, user transactions may easily be traced by shops, banks or by Internet Service Providers (ISPs). To deal with this problem, we introduce a new anonymous mobile payment scheme in this paper. Our new scheme has the following features: (1) Password-based authentication: authentication of users is done by low-entropy password; (2) Convenience: the new scheme is designed based on near field communication (NFC)-enabled devices and is compatible with EuroPay, MasterCard and Visa (EMV-compatible); (3) Efficiency: users do not need to have their own public/private key pairs and confidentiality is achieved via symmetric-key cryptography; (4) Anonymity: users use virtual accounts in the online shopping processes, thereby preventing attackers from obtaining user information even if the transaction is eavesdropped; (5) Untraceablity: no one (even the bank, Trusted Service Manager (TSM), or the shop) can trace a transaction and link the real identity with the buyer of a transaction; (6) Confidentiality and authenticity: all the transaction is either encrypted or signed by the sender so our new scheme can provide confidentiality and authenticity. We also present the performance and the security comparison of our scheme with other schemes. The results show that our scheme is applicable and has the most remarkable features among the existing schemes.

A survey on NFC Payment: Applications, Research Challenges, and Future Directions

“…Therefore, NFCenabled payments due to the three key reasons, i.e., secure, fast, and convenient can convince vendors to provide their products with this technology. Also, digital payment instead of paying for products with cash, checks, or physical credit cards causes people to carry less cash [5]. In general, safety and security are vital requirements in financial transactions.…”

Contactless Credit Cards Payment Fraud Protection by Ambient Authentication

“…With a session key, the protocol avoids the problem whereby the same random number can generate identical messages regarding legitimate transactions. Tso's protocol further enhanced consumer privacy [17].…”