International Students Academic Conference 2013 An Approach to a Decentral Mobile Payment System using NFC and the German eid-card

Transcription

1 International Students Academic Conference 2013 An Approach to a Decentral Mobile Payment System using NFC and the German eid-card International Students Academic Conference 03/20/2012 Yuanpei University, Taiwan Jan (Yǎ ēn) Essbach, B. Sc. jan.essbach@student.htw-berlin.de

2 1. Introduction Table of Contents 1. Introduction 2. State of the Art 3. Scenarios 4. Decentral Mobile Payment System 5. Evaluation Results 6. Conclusion and Further Work 2

3 1. Introduction The Idea and Scope of Work The Idea Mobile payment framework for all mobile operating systems No third party Easy integration Low transaction costs Scope of Work Evaluation of suitable systems Research relates within Germany, Europe and Japan[14] System should be tested with a concrete application and setup 3

4 1. Introduction Definition of Mobile Payment The term mobile payment describes the type of payments wherein at least the payer uses mobile communication techniques for the three phases of initiation, authorization and realization of the payment [9] (K. Pousttchi) Initiation of payment trough the usage of a mobile device within a mobile application PD Dr. Key Pousttchi, Universität Augsburg 4

5 2. State of the Art Problems of Existing Mobile Payment Solutions Reviewed Mobile Payment Systems[13] PayPal, ClickandBuy, mpass, paysafecard and giropay Offer a great variety of different approaches Results of Review No Near Field Communication (NFC) capability yet No direct integration No framework available Third party is involved High transaction costs 5

6 3. Scenarios 1st Test Case Project Mobile Dinner Project Mobile Dinner (2011) see Julian Volmer Book and pay meal/drinks in a restaurant or bar Payment should be integrated directly into the app Payment had to be cheap according transaction fees to be competitive As a result the payment without usage of third party Authentication via electronic ID-Card[2] using Near Field Communication 6

7 3. Scenarios 2nd Test Case Project htw.sport Planer Project htw.sport Planer (2012) Students book and pay their sports courses via app Same requirements as Mobile Dinner Different Authentication Method Authentication via LDAP using students registration number and password 7

8 4. Decentral Mobile Payment System System Architecture payment 8

9 4. Decentral Mobile Payment System Workflow in Mobile Client Application Pay Cart After Pay Cart is clicked the communication with payment server starts Communication: three phases mentioned in the definition 9

10 4. Decentral Mobile Payment System Concept of Abstract Authentication Support different ways of authentication methods Mobile Dinner (with eid-card) htw.sport Planer (with LDAP) As a result an AbstractAuthenticator was designed Identity Interface holds the information about the user that initiates the payment process Class reference on the right side 10

11 5. Evaluation Results Resulting Solution and Proof of Concept All requirements realized Supporting all mobile operating systems Low transaction costs because of direct realization Possibility of abstract authentication (NFC, LDAP,...) Proof of Concept The system was successfully integrated into the application htw.sport Planer Tested with several bank servers 11

12 6. Conclusion and Further Work Future of the Payment System Supporting other mobile platforms ios and Windows Mobile Only Android is fully implemented Improvements on security Host validation via SSL (to prevent man-in-the-middle attacks) Key-phrase for the FinTS-Datafile has to be encrypted Future of this project Project will be published as open source project on Github in 2013 called imove Mobile Money 12

13 Do you have any questions? Thank you for your attention. 13

14 A. Appendix Literature and Sources [1] DPA. (2011) Prognose: Fast eine Milliarde Smartphones bis [Online].Available: [2] Bundesverbandes deutscher Banken e.v. (2006) FinTS-Spezifikation Version 3.0. [Online].Available: 0.htm [3] K. Finkenzeller, RFID-Handbuch: Grundlagen und praktische Anwendungen von Transpondern, kontaktlosen Chipkarten und NFC, 1st ed. München: Hanser, Carl, [4] EPA. (2011) Statistiken neuer Personalausweis. [Online].Available: node.html [5] M. Hauck. (2010) Mobile Payment süss-sauer. [Online].Available: praesentation.pdf [6] Technische Universität Darmstadt. (2011) MONA - Mobile Usage of the New German eid Card. [Online].Available: [7] S. Online. (2012) Kontaktlose Geldkarte verrät ihren Besitzer. [Online].Available: [8] Google. (2012) Google Wallet - how it works. [Online].Available: [9] K. Pousttchi, Mobile Payment in Deutschland: Szenarienübergreifendes Referenzmodell für mobile Bezahlvorgänge, 1st ed. Wiesbaden: Dt. Univ.-Verl., [10] Apache Software Foundation. (2010) Apache XML-RPC. [Online].Available: [11] A. Christian. (2010) SIMON RPC Software Engineering. [Online].Available: [12] S. Palme. (2010) HBCI4Java - Open-Source HBCI-Client- und Server-Bibliothek für Java. [Online]. Available: [13] J. Essbach. (2012) Mobile Payment - Entwurf und Implementierung einer HBCI-FinTS-Banking Lösung für mobile Geräte. [Online].Available: [14] J. Essbach. (2012) An Approach to a. [Online].Available: 14