Localized credentials for server assisted mobile wallet

Mjølsnes, Stig Frode; Rong, Chunming

doi:10.1109/iccnmc.2001.962597

Cited by 5 publications

(4 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…With the advent of high-speed data networks and feature-rich mobile devices, the concept of mobile wallet [12,5] has gained importance. A seminal work introduced the concept of wallets with observers [8] enabling off-line digital cash and credentials to be used in commercial settings.…”

Section: Related Workmentioning

confidence: 99%

VeryIDX - A Digital Identity Management System for Pervasive Computing Environments

Paci

Bertino

Kerr

et al. 2008

Software Technologies for Embedded and Ubiquitous Systems

View full text Add to dashboard Cite

Abstract. The problem of identity theft, that is, the act of impersonating others identities by presenting stolen identifiers or proofs of identities, has been receiving increasing attention because of its high financial and social costs. In this paper we address such problem by proposing an approach to manage user identity attributes by assuring their privacy-preserving usage. The approach is based on the concept of privacy preserving multi-factor authentication achieved by a new cryptographic primitive which uses aggregate signatures on commitments that are then used for aggregate zero-knowledge proof of knowledge (ZKPK) protocols. We present the implementation of such approach on Nokia NFC cellular phones and report performance evaluation results.

show abstract

Section: Related Workmentioning

confidence: 99%

VeryIDX - A Digital Identity Management System for Pervasive Computing Environments

Paci

Bertino

Kerr

et al. 2008

Software Technologies for Embedded and Ubiquitous Systems

View full text Add to dashboard Cite

show abstract

“…Mjolsnes et al [8] have proposed a version of the electronic wallet for online payments. The authors exploits a credential server, denoted as credential keeper that securely stores the credentials issued to a user by different issuers.…”

Section: Related Workmentioning

confidence: 99%

“…With the advent of high-speed data networks and featurerich mobile, the concept of mobile wallet [8,1] has gained importance. The ESPRIT project CAFE [1] has introduced the notion of electronic wallet, that is a small portable device which manages off-line digital payments to be used in commercial transactions.…”

Section: Related Workmentioning

confidence: 99%

Privacy-preserving management of transactions' receipts for mobile environments

Paci

Shang

Kerr

et al. 2009

Proceedings of the 8th Symposium on Identity and Trust on the Internet

View full text Add to dashboard Cite

Users increasingly use their mobile devices for electronic transactions to store related information, such as digital receipts. However, such information can be target of several attacks. There are some security issues related to Mcommerce: the loss or theft of mobile devices results in a exposure of transaction information; transaction receipts that are send over WI-FI or 3G networks can be easily intercepted; transaction receipts can also be captured via Bluetooth connections without the user's consent; and mobile viruses, worms and Trojan horses can access the transaction information stored on mobile devices if this information is not protected by passwords or PIN numbers. Therefore, assuring privacy and security of transactions' information, as well as of any sensitive information stored on mobile devices is crucial. In this paper, we propose a privacy-preserving approach to manage electronic transaction receipts on mobile devices. The approach is based on the notion of transaction receipts issued by service providers upon a successful transaction and combines Pedersen commitment and Zero Knowledge Proof of Knowledge (ZKPK) techniques and Oblivious Commitment-Based Envelope (OCBE) protocols. We have developed a version of such protocol for Near Field Communication (NFC) enabled cellular phones.

show abstract

“…With the advent of high-speed data networks and featurerich mobile devices, the concept of mobile wallet [12], [4] has gained importance. A seminal work introduced the concept of wallets with observers [6] enabling off-line digital cash and credentials to be used in commercial settings.…”

Section: Related Workmentioning

confidence: 99%

Verification of Receipts from M-commerce Transactions on NFC Cellular Phones

Woo

Bhargav-Spantzel

Squicciarini

et al. 2008

2008 10th IEEE Conference on E-Commerce Technology and the Fifth IEEE Conference on Enterprise Computing, E-Commerce and E-Serv

View full text Add to dashboard Cite

Abstract-A main challenge in mobile commerce is to make it possible for users to manage their transaction histories from both online e-commerce transactions and in-person transactions. Such histories are typically useful to build credit or to establish trust based on past transactions. In this paper we propose an approach to manage electronic receipts on cellular devices by assuring their secure and privacy-preserving usage. We provide a comprehensive notion of transactions history including both on-line transaction and in-person transactions. We apply cryptographic protocols, such as secret sharing and zero knowledge proofs, in a potentially vulnerable and constrained setting. Specifically, our approach supports flexible strategies based on Shamir's secret sharing to cater to different user requirements and architectural constraints. In addition, aggregate zero knowledge proofs are used to efficiently support proofs of various receipt attributes. We have implemented the system on Nokia NFC cellular phones and report in the paper performance evaluation results.

show abstract

Localized credentials for server assisted mobile wallet

Cited by 5 publications

References 5 publications

VeryIDX - A Digital Identity Management System for Pervasive Computing Environments

VeryIDX - A Digital Identity Management System for Pervasive Computing Environments

Privacy-preserving management of transactions' receipts for mobile environments

Verification of Receipts from M-commerce Transactions on NFC Cellular Phones

Contact Info

Product

Resources

About