1. MOBIILIMAKSU PAYMENT MODEL
Secure Systems Group, Aalto University
Nadin Vazquez Torralba
Security in Direct Carrier Billing
Motivation:
MOBIILIMAKSU PAYMENT MODEL
Cashless trends for e-commerce.
Mobile technologies development: SMS, USSD, 4G, NFC.
Mobile Payment models: Direct billing, credit card, carrier billing.
Increasing number of mobile subscribers.
Carrier
Consumer’s bank
Merchant’s bank
Payment
service provider
Merchant
Consumer
Problem:
Public communication channels.
Multi-party transactions.
Single-click transactions.
Identification.
Authentication / Authorization.
Findings
In the presence of a third party payment gateway, transactions can be triggered by merchants without the consumer consent.
The carrier does not verify the authorization from the subscriber.
Discussion
Conclusion
Should carrier billing be focused on simplicity and market coverage, exclusively?
Are payment service providers concerned only about identifying a payer?
What would happened if the payments change from micro to macro?
What are the guarantees for consumers?
Carrier billing does protect sensitive information.
App development enables mechanisms to strengthen security.
Problem designing an integral secure solution.
Direct authorization to the carrier should be mandatory.
Single-click transactions remain insecure.
References
Mobiilimaksu: mobiilimaksuinfo.fi
Tori: Tori.fi
PayiQ Tickets: