Wireless Payment Protocol (WPP) Jeyanthi Hall, Susan Kilbank, - - PowerPoint PPT Presentation

Wireless Payment Protocol (WPP) Jeyanthi Hall, Susan Kilbank, Michel Barbeau and Evangelos Kranakis

Introduction

Problem

– Electronic credit card and debit card transactions

• ver wireless networks

Contribution

– Wireless Payment Protocol

Supports both credit- and debit-card transactions Uses WAP’s Wireless Transport Layer Security Combines smart card technology

WPP

Customer

Merchant Agent (MA) Customer Agent (CA) Merchant’s Bank Customer’s Bank

• 3. Notification
• f payment
• 4. Confirmation
• f payment
• 1. Invoice, certificate

& bank Information sent

• 2. Request for payment,

customer’s banking information & certificate, merchant’s banking information & certificate

Transaction Flow

Customer Agent to Customer’s Bank (no

intermediary – Merchant Agent)

Security

Payment instructions not sent to merchant Encryption provided by Wireless Transport Layer

Security

Merchant’s banking info and Customer’s payment

instructions are digitally signed

Smart Card stores customer’s encrypted banking info PIN authorizes access to Smart Card, doesn’t travel

• ver the net

Implementation

Uses Nokia’s WAP server and toolkit

– Merchant’s site and Nokia phone

Uses Java 1.2 and Java Cryptographic

Extension

– Banking service – Certificate distribution service

Execution

Conclusion

Non-proprietary solution Support for credit and debit card payments Customer’s private data sent directly to the

bank

Confidential information not transmitted to the

merchant

PIN numbers don’t travel over the network Lightweight