A Study of Secure Mobile Payment Mechanism Based on Credit Card and Smart Phones

• Main Authors: Ming Jiun, Lee, 李明駿
• Other Authors: Chern Tang Lin
• Format: Others
• Language: zh-TW
• Online Access: http://ndltd.ncl.edu.tw/handle/56496188438141304872

碩士 === 國立嘉義大學 === 資訊管理學系碩士班 === 100 === Recently, with the continuous progress of mobile technology, and maturity of wireless communications, “mobile payment” is considered to be the next trend in electronic commerce. However, the mobile payment is still not popular in our country. To promote the progress of mobile payment, in this paper, we propose a mobile payment mechanism which is paid by credit card and run on the smart phone. The user, in advance, stores the credit card numbers and other information within the smart phone. When the user needs to pay, he just uses the payment app on his phone to send credit card number to the merchant. After the merchant confirms the credit card number is correct, the transaction is completed. Although this merchant can meet most requirements, the security is still need to consider. Therefore, in our paper, we design the secure architecture for this merchant, and divide this architecture into initial connection phase and transaction confirmation phase. The purpose of the initial connection phase is to generate the session key and the authentication key for the transaction confirmation phase, and the purpose of the transaction confirmation phase is to ensure the transaction can be exchanged safely. Moreover, based the requirement of the non-repudiation, our paper propose to use the PKI, 3-D secure, and the SIM card to expand the architecture and to meet this requirement. The first advantage of our mechanism is we make this payment mechanism more convenient than traditional credit card payment, but it’s also secure. Second, the users don’t need to change their habit of paying, so that it is easy to promote the mechanism. Finally, this mechanism has more opportunity to extend extra market applications, such as electronic invoice, mobile advertising, or integrating with the member card.