Mobile Payment Protocol 3D by Using Cloud Messaging

The popularity of mobile platforms makes them a good candidate for electronic payment. However, there are challenges in this field such as privacy protection, security, the bandwidth limitations of mobile networks, and the limited capabilities of mobile devices. Traditional e-commerce payment protocols were designed to keep track of traditional flows of data, are vulnerable to attacks and are not designed for mobile platforms. Also, 3D Secure, an extra security layer in modern payment methods (which is mainly to prevent fraud where the credit card is not present), is not suitable for mobile platforms because of issues like the difficulty of viewing the authentication pop-up window on a mobile device. In this paper, we propose a new private mobile payment protocol based on a client centric model that utilizes symmetric key operations. Our protocol reduces the computational cost of the Diffie-Hellman key agreement protocol by using the algebra of logarithms instead of the algebra of exponents, achieves proper privacy protection for the payer by involving mobile network operators and generating temporary identities, avoids repudiation attacks by utilizing digital signatures, avoids replay attacks by using random time-stamp generated numbers, and provides better and safer customer experience by utilizing cloud messaging instead of text messaging and pop-up windows in its extra layer of security (3 domain authentication). Keywords—E-commerce, M-commerce, Mobile Commerce, Mobile Payment, Privacy Protection, Non-repudiation, Replay Attack, 3D Secure, Verified by Visa, MasterCard SecureCode, American Express SafeKey, JCB International as J/Secure, Diffie-Hellman.