The Experts below are selected from a list of 18651 Experts worldwide ranked by ideXlab platform

Cetin Kaya Koc - One of the best experts on this subject based on the ideXlab platform.

  • consepp convenient and secure Electronic Payment protocol based on x9 59
    Annual Computer Security Applications Conference, 2001
    Co-Authors: Albert Levi, Cetin Kaya Koc
    Abstract:

    The security of Electronic Payment protocols is of interest to researchers in academia and industry. While the ultimate objective is the safest and most secure protocol, convenience and usability should not be ignored, or the protocol may not be suitable for large-scale deployment. Our aim is to design a practical Electronic Payment protocol which is both secure and convenient. ANSI X9.59 standard describes secure Payment objects to be used in Electronic Payment in a convenient and secure way. It has many useful convenience features for large-scale consumer market deployment, the best being the elimination of consumer certificates. Consumer public keys are stored in account records at financial institutions; the digital signatures issued by consumers are verified by financial institutions. Encryption is deliberately not provided by X9.59. We propose a new Internet e-Payment protocol, namely CONSEPP (CONvenient and Secure E-Payment Protocol), based on the account authority model of ANSI X9.59 standard. CONSEPP is the specialized version of X9.59 for Internet transactions (X9.59 is multi-purpose). It has some extra features on top of the X9.59 standard. X9.59 requires merchant certificates; in CONSEPP we propose a lightweight method to avoid the need for merchant certificates. Moreover, we propose a simple method for secure shopping experience between merchant and consumer. Merchant authentication is embedded in the Payment cycle. CONSEPP aims to use current financial transaction networks, like VisaNet, BankNet and ACH networks, for communications among financial institutions. No certificates (in the classical sense) or certificate authorities exist in CONSEPP. Convenience is not traded for security; basic security requirements are fulfilled in the Payment authorization cycle without extra messaging and significant overhead.

Michael Waidner - One of the best experts on this subject based on the ideXlab platform.

  • design implementation and deployment of the ikp secure Electronic Payment system
    IEEE Journal on Selected Areas in Communications, 2000
    Co-Authors: Mihir Bellare, Juan A Garay, R Hauser, Amir Herzberg, Hugo Krawczyk, Michael Steiner, Gene Tsudik, E Van Herreweghen, Michael Waidner
    Abstract:

    This paper discusses the design, implementation, and deployment of a secure and practical Payment system for Electronic commerce on the Internet. The system is based on the iKP family of protocols-(i=1,2,3)-developed at IBM Research. The protocols implement credit card-based transactions between buyers and merchants while the existing financial network is used for Payment clearing and authorization. The protocols are extensible and can be readily applied to other account-based Payment models, such as debit cards. They are based on careful and minimal use of public-key cryptography, and can be implemented in either software or hardware. Individual protocols differ in both complexity and degree of security. In addition to being both a precursor and a direct ancestor of the well-known SET standard, iKP-based Payment systems have been in continuous operation on the Internet since mid-1996. This longevity-as well as the security and relative simplicity of the underlying mechanisms-makes the iKP experience unique. For this reason, this paper also reports on, and addresses, a number of practical issues arising in the course of implementation and real-world deployment of a secure Payment system.

  • The state of the art in Electronic Payment systems
    Computer, 1997
    Co-Authors: Nadarajah Asokan, Michael Steiner, Philippe Janson, Michael Waidner
    Abstract:

    The exchange of goods conducted face-to-face between two parties dates back to before the beginning of recorded history. Traditional means of Payment have always had security problems, but now Electronic Payments retain the same drawbacks and add some risks. Unlike paper, digital "documents" can be copied perfectly and arbitrarily often, digital signatures can be produced by anybody who knows the secret cryptographic key, and a buyer's name can be associated with every Payment, eliminating the anonymity of cash. Without new security measures, widespread Electronic commerce is not viable. On the other hand, properly designed Electronic Payment systems can actually provide better security than traditional means of Payments, in addition to flexibility. This article provides an overview of Electronic Payment systems, focusing on issues related to security.

Danielle Drainville - One of the best experts on this subject based on the ideXlab platform.

  • An Analysis of the Bitcoin Electronic Cash System
    University of Waterloo, 2012
    Co-Authors: Danielle Drainville
    Abstract:

    In a world that relies heavily on technology, privacy is sought by many. Privacy, among other things, is especially desired when making an online Payment. This motivates the use of Electronic cash, a form of Electronic Payment system based on the paper cash system used daily. The most successful and widely used of these services is Bitcoin { a decentralized peer-to-peer Electronic cash system. This paper provides a broad introduction to Bitcoin, while analyzing its construction and investigating some of its perks and aws. It can be seen that, when compared to paper cash and Electronic cash, Bitcoin is in a class of its own.

Albert Levi - One of the best experts on this subject based on the ideXlab platform.

  • consepp convenient and secure Electronic Payment protocol based on x9 59
    Annual Computer Security Applications Conference, 2001
    Co-Authors: Albert Levi, Cetin Kaya Koc
    Abstract:

    The security of Electronic Payment protocols is of interest to researchers in academia and industry. While the ultimate objective is the safest and most secure protocol, convenience and usability should not be ignored, or the protocol may not be suitable for large-scale deployment. Our aim is to design a practical Electronic Payment protocol which is both secure and convenient. ANSI X9.59 standard describes secure Payment objects to be used in Electronic Payment in a convenient and secure way. It has many useful convenience features for large-scale consumer market deployment, the best being the elimination of consumer certificates. Consumer public keys are stored in account records at financial institutions; the digital signatures issued by consumers are verified by financial institutions. Encryption is deliberately not provided by X9.59. We propose a new Internet e-Payment protocol, namely CONSEPP (CONvenient and Secure E-Payment Protocol), based on the account authority model of ANSI X9.59 standard. CONSEPP is the specialized version of X9.59 for Internet transactions (X9.59 is multi-purpose). It has some extra features on top of the X9.59 standard. X9.59 requires merchant certificates; in CONSEPP we propose a lightweight method to avoid the need for merchant certificates. Moreover, we propose a simple method for secure shopping experience between merchant and consumer. Merchant authentication is embedded in the Payment cycle. CONSEPP aims to use current financial transaction networks, like VisaNet, BankNet and ACH networks, for communications among financial institutions. No certificates (in the classical sense) or certificate authorities exist in CONSEPP. Convenience is not traded for security; basic security requirements are fulfilled in the Payment authorization cycle without extra messaging and significant overhead.

Aboul Ella Hassanien - One of the best experts on this subject based on the ideXlab platform.

  • towards secure mobile agent based e cash system
    International Workshop on Security, 2011
    Co-Authors: Mostafa A Salama, Nashwa Elbendary, Aboul Ella Hassanien
    Abstract:

    Electronic cash is a Payment system that enables a secure off-line transaction without revealing the payers identity. Concerning anonymity of user, it may be misused for illegal purposes through cloning the signed code delivered to a client in order to be spent in multi-Payment processes, which is called "double spending". Many proposed Electronic Payment schemes have failed to reach a solution to prevent the double spending problem. This paper presents a solution for the double spending problem during Electronic cash Payment phase via proposing a mobile agent based Electronic cash system. This has been achieved through combining an Optical Memory Card with mobile agent technology that are presenting hardware and software, respectively.