A Secure Short-range Wireless Connectivity Scheme for Mobile Wallet Services
Gunil Ma, Hyeong-Chan Lee, Jeong Hyun Yi · 2011
Mobile wallet is a mobile enabled application and payment service provider to make convenient payments by integrated payment method. Mobile wallet service is able to be provided using a variety of short-range wireless connectivity techniques between the designated payment server and the smartphone. However, wireless communication is inherently vulnerable to security threats. To cope with wireless vulnerability in smart wallet applications, secure session management should be employed to set up a secret key between the payment server and smart wallet. Although the numbers of studies for secure session management have been proceeded, it is necessary to study techniques geared to establishing secure session of mobile wallet system in order to adopt these techniques successfully to mobile wallet. In this paper, we propose session key establishment protocol which uses Out-Of-Band authentication channel as secure session technique of mobile wallet payment service. And we authentication methods which are applied to Out-Of-Band channel authentication phase of the proposed protocol. We also show thorough performance analysis of the proposed scheme with real implementation.