Secure mobile payment framework based on UICC with formal verification

Ahamad, Shaik Shakeel; Sastry, V. N.; Udgata, Siba K.

doi:10.1504/ijcse.2014.060718

Cited by 13 publications

(10 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…C validates the certificate (AS9) received from Client C as listed in (Ahamad et al 2014). If the verification is successful then, Hence, from (1) to (4), Then, Step 3 was: C hashes the OI which it has received from POS, adds PI, TID, Amt, Cert POS , POS ID , T C , N C and sends MS1 to Issuer Bank (IB).…”

Section: Formal Verification Of Sppmc Protocol Using Ban Logicmentioning

confidence: 99%

“…Our proposed framework adopts the procedure proposed in Ahamad et al (2014) for the personalization; so there are four certificates at the client side which are issued by TSM (which is also a CA). Before describing the full authentication and transaction protocol, Table 1 shows all the major mathematical notations used in this paper along with their meanings.…”

Section: Uicc Personalizationmentioning

confidence: 99%

“…Proof MPA of the C is personalized by the IB Server using the procedure proposed in (Ahamad et al 2014).…”

Section: Security Proofmentioning

confidence: 99%

See 2 more Smart Citations

Trusted service manager (TSM) based privacy preserving and secure mobile commerce framework with formal verification

Ahamad

Pathan

2019

Complex Adapt Syst Model

Self Cite

View full text Add to dashboard Cite

Mobile contactless payment (MCP) is the future technology that is used for mobile payments, mobile wallet, transportation, and for mobile coupons. Existing solutions in this realm do not ensure end-to-end communication, information privacy, and the client’s anonymity. In order to overcome these flaws, we propose a secure and privacy preserving mobile commerce (SPPMC) framework for near-field communication (NFC) based proximity payments. SPPMC framework achieves both communication and information privacy. It ensures the client’s anonymity by making use of traceable anonymous certificates (TAC). Grid of secure elements (GSE) is used at the banking servers. The cost of computation and communication is very less. SPPMC ensures end-to-end security and withstands any type of known attack including multi-protocol attack. SPPMC is successfully verified using Burrows–Abadi–Needham (BAN) logic and Scyther tool. It ensures all the security properties.

show abstract

Section: Formal Verification Of Sppmc Protocol Using Ban Logicmentioning

confidence: 99%

Section: Uicc Personalizationmentioning

confidence: 99%

See 1 more Smart Citation

Trusted service manager (TSM) based privacy preserving and secure mobile commerce framework with formal verification

Ahamad

Pathan

2019

Complex Adapt Syst Model

Self Cite

View full text Add to dashboard Cite

show abstract

“…The main beliefs that participate in the protocol constantly change with the message. Finally, we check whether the protocol can achieve the desired objectives [11] .…”

Section: Terms and Rules Of Ban Logicmentioning

confidence: 99%

Dynamic measurement protocol in infrastructure as a service

Xiang

Zhao

et al. 2014

Tinshhua Sci. Technol.

View full text Add to dashboard Cite

Infrastructure as a Service (IaaS) has brought advantages to users because virtualization technology hides the details of the physical resources, but this leads to the problem of users being unable to perceive their security. This defect has obstructed cloud computing from wide-spread popularity and development. To solve this problem, a dynamic measurement protocol in IaaS is presented in this paper. The protocol makes it possible for the user to get the real-time security status of the resources, thereby solving the problem of guaranteeing dynamic credibility. This changes the cloud service security provider from the operator to the users themselves. This study has verified the security of the protocol by means of Burrow-Abadi-Needham (BAN) logic, and the result shows that it can satisfy requirements for innovation, privacy, and integrity. Finally, based on different IaaS platforms, this study has conducted a performance analysis to demonstrate that this protocol is reliable, secure, and efficient.

show abstract

“…Appendix B. Research methodology and methods Kim et al, 2010;Moroni et al, 2015;Silic et al, 2014;Zhao andKurnia, 2014 Focus groups 3 Di Pietro et al, 2015; Ahamad et al, 2014;Almuairfi et al, 2014;Ammayappan, 2015;Bottoni and Deni, 2007;Clarke, 2008;Conti et al, 2009;Fan and Huang, 2010;Fun et al, 2008;Godbole and Pais, 2008;Gold et al, 2015;Grønli et al, 2015;Hassinen et al, 2008;Hwang et al, 2007;Jiang et al, 2009;Kadambi et al, 2009;Konidala et al, 2012;Kousaridas et al, 2008;Lee et al, 2007;Lei et al, 2009;Li et al, 2012;Lin et al, 2008;Luo et al, 2016;Martínez-Peláez et al, 2015;Massoth and Bingel, 2009;Munch-Ellingsen et al, 2015;Ou and Ou, 2009;Pasquet et al, 2008;Popescu, 2009;Rahimian and Habibi, 2008;Sung et al, 2015;Wang et al, 2008;Yang and Chang, 2012;Yang and Lin, 2016;…”

mentioning

confidence: 99%

Mobile payments: A proposal for a context-oriented approach based on socio-technical theory

Apanasevic

Arvidsson

Markendahl

2018

jim

View full text Add to dashboard Cite

A recent review of mobile payment research by Dahlberg et al. (2015) concludes that there is a need to synthesise this research area by studying contexts in which innovation is carried out and to integrate different aspects of research. This article aims to provide a proposal for how to achieve such integration and context orientation by building on previous studies and offering an additional review. Our systematic literature review of mobile payments research is focused on papers published during 2006–2016. The main objective is to examine how mobile payments research has been conducted from the methodological and theoretical perspectives. Our findings show that research on mobile payments is a multidisciplinary research. Three main themes in the research (in line with previous studies) are customer adoption, technological aspects, and business aspects. Moreover, research is mainly analytical based on a deductive approach. To meet the challenge formulated in the previous research, we propose and apply a socio-technical system framework to achieve synthesis and context-specific consideration in future research on mobile payments.

show abstract

Secure mobile payment framework based on UICC with formal verification

Cited by 13 publications

References 19 publications

Trusted service manager (TSM) based privacy preserving and secure mobile commerce framework with formal verification

Trusted service manager (TSM) based privacy preserving and secure mobile commerce framework with formal verification

Dynamic measurement protocol in infrastructure as a service

Mobile payments: A proposal for a context-oriented approach based on socio-technical theory

Contact Info

Product

Resources

About