دانلود رایگان مقاله انگلیسی پرداخت موبایلی استوار به صورت ناشناس در برابر ارائه دهنده ی خدمات شخص ثالث نادر - اشپرینگر 2018

Abstract

M-commerce provides convenient services and has developed rapidly in recent years. But security and privacy have always been major concerns for most users. Among existing payment systems, PayPal as well as Alipay has a third-party payment provider (TPP) but does not provide anonymity. Bitcoin provides anonymity but its decentralized framework without TPP causes high energy consumption and security attack issues. Further information can be deduced from the public decentralized ledger, Bitcoin cannot ofer strong privacy guarantees. Therefore, unifying strong anonymity, security and efciency is challenging in mobile payment. This paper proposes a strong anonymous mobile payment against a curious thirdparty provider (SATP). A ticket as a new means of payment is partially blindly signed by TPP using certifcateless cryptographic primitives. SATP can ensure confdentiality of payment data, non-repudiation and revocation of payment operation, and anonymity of payer’s identity. Especially, it can enable a user to pay anonymously even in face of a curious TPP. Performance analysis shows that SATP avoids high energy consumption like Bitcoin, and its communication cost is less than that of the existing anonymous research work.

7 Conclusion

Security, anonymity and efciency are the most concerned issues in mobile payment. Among prevailing payment systems, PayPal has a serious privacy leakage issue, the same as Alipay. Bitcoin provides anonymity. But high energy consumption and security threats become its weaknesses. And it does not have strong anonymity.

We propose a SATP scheme, where a ticket, as a way of payment, is partially blindly signed by TPP. No matter TPP, a payee or a malicious user, no one can know the identity of a payer from transaction messages. Moreover, if the payer does not receive the requested service, he can revoke the payment. Our mobile payment scheme has confdentiality, unforgeability, strong anonymity and revocation. Since no public key certifcate is required, it has clear communication advantage. Security analysis and performance analysis show that SATP has high security and it can be applied in mobile payment efciently.