Search

The growth of wireless networks and the increasing popularity of mobile devices present a significant opportunity to empower them as payment devices. Unfortunately, several problems hinder the widespread acceptance of mobile payments, for example, privacy protection and user anonymity. We propose a new system to enhance the level of anonymity and increase the privacy of transaction records in micro and macro mobile payments. We rely on IPAS (Implicit Password Authentication System) (Almuairfi et al., 2011 IEEE Workshops of International Conference on Advanced Information Networking and Applications, and Almuairfi et al., Math Computer Model 58:108-116, ) as the underlying authentication protocol to support our proposed idea. [ABSTRACT FROM AUTHOR]

Abstract: Authentication is the first line of defense against compromising confidentiality and integrity. Though traditional login/password-based schemes are easy to implement, they have been subjected to several attacks. As an alternative, token and biometric-based authentication systems were introduced. However, they have not improved substantially to justify the investment. Thus, a variation to the login/password scheme, viz. graphical scheme was introduced. But it also suffered due to shoulder-surfing and screen-dump attacks. In this paper, we introduce a framework of our proposed (IPAS) Implicit Password Authentication System, which is immune to the common attacks suffered by other authentication schemes. [Copyright &y& Elsevier]