Secure Mobile Payments Based on Cloud Services: Concepts and Experiments
Pascal Urien, Xavier Aghina · 2016
This paper presents an innovative and open concept for secure mobile payments, based on payment applications hosted in the cloud. It details an experimental Android platform, and NFC payment experiments performed with this platform. All the platform components rely on open technologies, i.e. available in commercial devices or specified by IETF drafts. On the mobile side security is enforced by a dedicated protocol (based on TLS), running in a secure element. This protocol manages the access to remote payment applications, running in secure elements, hosted in dedicated servers. This approach creates a new entity that collects meaningful and relevant data, dealing with user's purchases. It also increases the level of trust both for consumers and banks.