Trusted integration of cloud-based NFC transaction players

Abstract

Abstract-Near Field Communication (NFC) is a short range wireless technology that provides contactless transmission of data between devices. With an NFC enabled device, users can exchange information from one device to another, make payments and use their NFC enabled device as their identity. As the main payment ecosystem players such as service providers and secure element issuers have crucial roles in a multi-application mobile environment similar to NFC, managing such an environment has become very challenging. One of the technologies that can be used to ensure secure NFC transaction is cloud computing which offers wide range of advantages compare to the use of a Secure Element (SE) as a single entity in an NFC enabled phone. This approach provides a comprehensive leadership of the cloud provider towards managing and controlling customer's information where it allows the SE which is stored within an NFC phone to deal with authentication mechanisms rather than storing and managing sensitive transaction information. This paper discusses the NFC cloud Wallet model which has been proposed by us previously [1] and introduces a different insight that defines a new integrated framework based on a trusted relationship between the vendor and the Mobile Network Operator (MNO). We then carry out an analysis of such a relationship to investigate different possibilities that arise from this approach.

A mobile payment mechanism with anonymity for cloud computing

“…A C C E P T E D M A N U S C R I P T 16 The proposed mechanism provide anonymity because all the transaction steps are designed by using the client's anonymous identity NIDC. Thus, the client can transact with the merchant anonymously.…”

“…We find that their mechanism satisfies the requirements of cloud computing because the transaction messages can be stored and protected in the payment gateway. That is, the payment gateway can be implemented as a cloud server for the e-payment in mobile commerce [10][11][12][13][14][15][16][17][18][19][20].…”

The Survey on Near Field Communication

“…NFC technology also provides important contributions to the development of CC services. In particular, storing private data on the Cloud instead of on smartphones is an important recent development; and several significant studies on Cloud-based NFC services exist [ 15 , 16 , 17 ] which are further discussed in Section 3 .…”

“…Moreover, a smartphone may not connect to the Internet during the transaction for some reason, and thus cannot communicate with the SE on the cloud. In a study that includes a cloud-based HCE approach [ 16 ], the data is retrieved from the virtual SE on the cloud to the smartphone’s internal SE in encrypted format. The contactless terminal reads data from SE and performs required operations such as a credit card authorization afterwards.…”

“…In that study; a Smartphone remotely uses a SE that is hosted on the servers by establishing a secure TLS channel, and the system is able to solve trust issues for Internet users, mobile applications, and virtual machines environments [ 15 ]. In another proposed solution [ 16 ], Cloud-based SE securely stores personal data such as credit or debit card information, user identification number, loyalty program data, payment applications, PINs and personal contacts securely. Furthermore, UICC in the smartphone stores authentication data such as keys, certificates, protocols, and cryptographic mechanisms.…”