Security and Privacy in Communication Networks. 9th International ICST Conference, SecureComm 2013, Sydney, NSW, Australia, September 25-28, 2013, Revised Selected Papers

Research Article

An e-payment Architecture Ensuring a High Level of Privacy Protection

Download183 downloads
  • @INPROCEEDINGS{10.1007/978-3-319-04283-1_19,
        author={Aude Plateaux and Patrick Lacharme and Vincent Coquet and Sylvain Vernois and Kumar Murty and Christophe Rosenberger},
        title={An e-payment Architecture Ensuring a High Level of Privacy Protection},
        proceedings={Security and Privacy in Communication Networks. 9th International ICST Conference, SecureComm 2013, Sydney, NSW, Australia, September 25-28, 2013, Revised Selected Papers},
        proceedings_a={SECURECOMM},
        year={2014},
        month={6},
        keywords={Electronic payment privacy and security},
        doi={10.1007/978-3-319-04283-1_19}
    }
    
  • Aude Plateaux
    Patrick Lacharme
    Vincent Coquet
    Sylvain Vernois
    Kumar Murty
    Christophe Rosenberger
    Year: 2014
    An e-payment Architecture Ensuring a High Level of Privacy Protection
    SECURECOMM
    Springer
    DOI: 10.1007/978-3-319-04283-1_19
Aude Plateaux,*, Patrick Lacharme1,*, Vincent Coquet2,*, Sylvain Vernois1,*, Kumar Murty3,*, Christophe Rosenberger1,*
  • 1: ENSICAEN
  • 2: BULL SAS
  • 3: Department of Mathematics
*Contact email: aude.plateaux@ensicaen.fr, patrick.lacharme@ensicaen.fr, vincent.coquet@bull.net, sylvain.vernois@ensicaen.fr, murty@math.toronto.edu, christophe.rosenberger@ensicaen.fr

Abstract

Online shopping is becoming more and more interesting for clients because of the ease of use and the large choice of products. As a consequence, 2.3 billion online clients have been identified in 2011. This rapid increase was accompagnied by various frauds, including stolen smart cards or fraudulent repudiation. Several e-payment systems have been proposed to reduce these security threats and the 3D-Secure protocol is becoming a standard for the payment on the Internet. Nevertheless, this protocol has not been studied in-depth, particularly in terms of privacy. This paper proposes a detailed description and an analysis of the 3D-Secure protocol, through a new privacy-orienting model for e-payment architectures. Some improvements of 3D-Secure protocol, concerning the protection of banking information, are also presented. Then, this article presents and analyses a new online payment architecture centered on the privacy of individuals.