28
An Improved Approach for Secured Mobile
Payment System based on Ecies Cryptography
Ehab M. Alkhateeb, Mohammad A. Alia, and Adnan A. Hnaif
Faculty of Science and Information Technology, Al Zaytoonah University of Jordan
International Journal of Research in Computer Applications & Information Technology
Volume 3, Issue 3, May-June 2015, pp. 28-39
ISSN Online: 2347-5099, Print: 2348-0009, DOA : 12052015
© IASTER 2015, www.iaster.com
ABSTRACT
Mobile payment system is defined as mobile money transfer and mobile wallet. It is also defined as an
electronic payment method. Moreover, Mobile payment has been generated to be an attractive
alternative for the traditional payments systems. In this paper, we propose a new approach to mobile
payment system based on Elliptic Curve cryptography ECC. The proposed mobile payment system
includes three main processes: Authentication process, Member recognition process, and Payment
process. Furthermore, Elliptic Curve Integrated Scheme ECIES cryptographic protocol has been
applied to enhance the security of the proposed mobile payment system. Basically, this mobile
payment system is more efficient than other mobile payment systems since the client can pay from
his/her own mobile phone without any additional cost and effort.
Keywords: ECC, ECIES, Mobile Payment System, and Cryptography.
1. INTRODUCTION
The definition of a mobile payment is the payment for goods between two parties for which a mobile
device plays a key role in the realization of the payment, Mobile payment can be categorized into two
main types based on the geographical position between customers and merchant; these are (Remote
payment: The customer initiate payment remotely from the merchant, and POS (Point of Sale) or
Proximity mobile payment: The customer is near the merchant or retail [1]. These types have a variety
of different technologies that can be widely applied especially in the Middle East where there is a high
mobile device concentration [2]. The following are some of these technologies: SMS (Short messages
Service), USSD (Unstructured supplementary service data), NFC (Near field communication), RFID
(Radio frequencies identification). The security in mobile payment is divided since it relies on different
players or stakeholders [3]. One of the top industries worry about different attacks that can be launched
in retail payment such as; mobile, and Credit card payment methods [4]. One of the methods that can be
used to secure communications in presence of hackers is cryptography [5]. Moreover, the cryptanalysis
and attacking, protocols speed, and performance evaluation are the core elements in building a secure
mobile payment system. Therefore, this paper focuses its attention on these concerns by presenting a
mobile payment system which is based on public key cryptography. In this paper we propose efficient
cryptographic algorithm to be applied to the proposed mobile payment system that is based on Discrete
Logarithm Problem in Ellipic Curve Groups, also the system have easy payment experience since the
system only needs a mobile phone, mobile opreator, and market server.