engleski

Securing Transactions in One-Way Communication Systems Based on Elliptic Curve Cryptography

Ericsson Nikola Tesla, the Croatian affiliate of the Swedish company Ericsson, has already deployed a mobile payment solution in Bosnia and Herzegovina. It allows paying for clients’ spending together with the phone bill, and not with the credit cards, as usual. It relies on a USIM type of a SIM card, which handled security (encryption, signatures, etc.). Because of some drawbacks, a new solution has been developed, with a goal of keeping the same security level. It has been developed in cooperation with Professor Mario Čagalj and colleague Josip Vuković. The security protocol is divided into the registration and transaction phase. The registration phase is done via unsecure channel and requires an internet connection. The transaction phase does not require internet connection and is characterized by one-wayness. It means that there is only one direction of data flow between the smartphone and the desk application with the NFC reader. The connection between the desk application and servers is both ways, via an SSL channel. The protocol is designed to be used with any kind of data transmission method. It can also be applied outside the mobile payments domain. The thesis of a colleague Josip Vuković covers the cryptographic libraries used in this thesis, which covers the development of a simple prototype for the Android operating system, together with the back-end side.

mobile payments secure protocols NFC elliptic curve cryptography Android

nije evidentirano