臺灣博碩士論文加值系統

近年來，行動支付的崛起提供了另一種不一樣的支付方式。然而，在沒有任何管理及保護的機制下，行動支付的過程是有很大的風險從公開網路受到攻擊。保護行動支付的安全同時又具有效能及效率成為了一個重要的課題。本篇論文研究Apple Pay的付款流程，並且基於該付款流程提出了一套新的行動支付機制。之後，我們分析了該付款機制是否達到資訊安全的特性。我們也在Raspberry Pi 3上實驗本機制將會用到的安全模組。實驗的結果顯示我們提出的行動支付機制在行動裝置上能有很好的性能。因此我們認為該付款機制是非常適合運應在這個行動支付的時代。

Recently, the mobile payment raises up, provides a different way to pay. However, without any management and mechanism to secure the mobile payment processes, must increase the risk of being attacked from the public networks. To secure the mobile payment process and achieve the efficiency and effectiveness becomes a vital problem. In this paper, we investigate a famous mobile payment scheme: Apple Pay. Then we propose a new mobile payment mechanism based on it. In addition, we analyze the security property of our proposed payment mechanism and run an experiment of every secure component used in our scheme on Raspberry Pi 3. All the results show that our payment scheme has a good performance on a mobile device. Note that our proposed payment mechanism is very suitable for the generation of the mobile payment.

Abstract I
摘要 III
致謝 V
Content VII
List of Figures IX
List of Tables XI
Chapter 1 Introduction 1
Chapter 2 Related Work 5
2.1 Mobile Payment 5
2.2 Apple Pay 5
2.2.1 Payment Token Format Reference 5
2.2.2 Apple Pay Payment Flow 8
2.3 The State-of-the-Art 10
Chapter 3 Preliminaries 13
3.1 Elliptic curve Diffie–Hellman 13
3.2 Bilinear Pairing 13
3.3 Certificateless Signature 14
Chapter 4 The Proposed Mobile Payment Scheme 15
4.1 Our Certificateless Signature Scheme 15
4.2 The Proposed Mobile Payment Mechanism 18
Chapter 5 Analysis and Discussion 23
Chapter 6 Performance Evaluation and Results 25
Conclusion 27
References 29

[1] Y. Chen and Z. Zheng, “A Low-power 2K/4K Range-controlled communication chip design for mobile payment”, in proc. 2016 IEEE International Nanoelectronics Conf., China, 2016, Pages: 1 – 2
[2] V. Daza et al., “FRoDO: Fraud resilient device for off-line micro-payments”, in IEEE Transactions on Dependable and Secure Computing, Volume 13, Issue 2 Pages: 296 – 311, June, 2015
[3] R. K. Garg and N. K. Garg, “Developing secured biometric payments model using tokenization”, in proc. 2015 Int. Conf. Soft Computing Techniques and Implementations, India, 2015, Pages: 110 – 112
[4] G. Jetsiktat et al., “Enhancing user authentication of online credit card payment using face image comparison with MPEG7-edge histogram descriptor”, in proc. 2015 Int. Conf. Intelligent Informatics and Biomedical Sciences, Japan, 2015, Pages: 67 – 74
[5] R. F. Lima and A. C. M. Pereira, “A fraud detection model based on feature selection and undersampling applied to web payment systems”, in proc. 2015 IEEE/WIC/ACM Int. Conf. Web Intelligence and Intelligent Agent Technology, Singapore, 2015, Pages: 219 – 222
[6] S. W. Park and I. Y. Lee, “Transaction authentication scheme based on enhanced signature RTD for NFC payment service environments”, in proc. 2016 Int. Conf. Platform Technology and Service, Korea, 2016, Pages: 1 – 4
[7] I. Turk and A. Cosar, “An open, NFC enabler independent Mobile payment and identification method: NFC feature box”, in proc. 2016 IEEE 17th Int. Symp. A World of Wireless, Mobile and Multimedia Networks, Portugal, 2016, Pages: 1 – 3
[8] P. Urien, “Innovative mobile payments in the cloud for connected citizen the MobiSIM project”, in proc. 2016 18th Mediterranean Electrotechnical Conf., Cyprus, 2016, Pages: 1 – 6
[9] P. Urien and X. Aghina, “Secure mobile payment based on cloud Services: Concepts And Experiments”, in proc. 2016 IEEE 2nd Int. Conf. Big Data Security on Cloud, IEEE Int. Conf. High Performance and Smart Computing, and IEEE Int. Conf. Intelligent Data and Security, USA, New York, 2016, Pages: 333 – 338
[10] P. Urien and X. Aghina, “The SIMulation project demonstrating mobile payment based on cloud services”, in proc. 2016 IEEE 17th Int. Symp. A World of Wireless, Mobile and Multimedia Networks, Portugal, 2016, Pages: 1 – 3
[11] R. X. Yang, “Design of secure mobile payment system based on IBC”, in proc. 2015 10th Int. Conf. Broadband and Wireless Computing, Communication and Applications, Poland, 2015, Pages: 422 – 425
[12] X. Zheng et al., “TrustPayz: Trusted mobile mayment on security enhanced ARM TrustZone platforms”, in proc. 2016 IEEE Symp. Computers and Communication, Italy, 2016, Pages: 456 – 462
[13] Apple Pay, http://www.apple.com/apple-pay/
[14] Apple Pay Processing Payment, https://developer.apple.com/apple-pay/get-started/