An Open, PKI-Based Mobile Payment System

• Published in: Emerging Trends in Information and Communication Security pp. 86 - 100
• Main Authors: Hassinen, Marko, Hyppönen, Konstantin, Haataja, Keijo
• Format: Book Chapter
• Language: English
• Published: Berlin, Heidelberg Springer Berlin Heidelberg 2006
• Series: Lecture Notes in Computer Science
• Subjects: Mobile Network Operator; Mobile Payment; Mobile Phone; Near Field Communication; Short Message Service
• ISBN: 9783540346401; 3540346406
• ISSN: 0302-9743; 1611-3349
• DOI: 10.1007/11766155_7

Most mobile commerce applications require a secure mobile payment solution for performing financial transactions. However, it is difficult to strongly authenticate users remotely and provide non-repudiation of transactions. In this paper, we present a novel mobile payment scheme which supports both virtual point-of-sale (POS) and real POS transactions. For user authentication, our scheme uses PKI-SIM cards. In virtual POS payments, the mobile phone communicates with a service provider through SMS messaging or IP-based data transfer (e.g. GPRS). In real POS payments, Bluetooth is used as the communication channel. Communication with a bank is done using either SMS messaging or IP-based data transfer. The system is open to any mobile network operator, any merchant, and any financial institution.