iKP - A Family of Secure Electronic Payment Protocols

This paper proposes a family of protocols -- iKP (i=1,2,3) - for secure electronic payments over the Internet. The protocols implement credit card-based transactions between the customer and the merchant while using the existing financial network for clearing and authorization. The protocols can be extended to apply to other payment models, such as debit cards and electronic checks. They are based on public-key cryptography and can be implemented in either software or hardware. Individual protocols differ in key management complexity and degree of security. It is intended that their deployment be gradual and incremental. The iKP protocols are presented herein with the intention to serve as a starting point for eventual standards on secure electronic payment.

[1]  염흥렬,et al.  [서평]「Applied Cryptography」 , 1997 .

[2]  B. Clifford Neuman,et al.  Requirements for network payment: the NetCheque perspective , 1995, Digest of Papers. COMPCON'95. Technologies for the Information Superhighway.

[3]  David Chaum,et al.  Achieving Electronic Privacy , 1992 .

[4]  L. Stein,et al.  The Green Commerce Model , 1995 .

[5]  Sanjoy Paul,et al.  Anonymous credit cards , 1994, CCS '94.

[6]  Ross J. Anderson.  Why cryptosystems fail , 1994, CACM.

[7]  Hugo Krawczyk,et al.  Design and Implementation of Modular Key Management Protocol and IP Secure Tunnel on AIX , 1995, USENIX Security Symposium.

[8]  Andreas Pfitzmann,et al.  Digital payment systems enabling security and unobservability , 1989, Comput. Secur..

[9]  Ronald Cramer,et al.  The ESPRIT Project CAFE - High Security Digital Payment Systems , 1994, ESORICS.

[10]  B. Clifford Neuman,et al.  NetCash: a design for practical electronic currency on the Internet , 1993, CCS '93.

[11]  Mihir Bellare,et al.  Optimal Asymmetric Encryption , 1994, EUROCRYPT.

[12]  Bill Cheswick,et al.  Firewalls and internet security - repelling the wily hacker , 2003, Addison-Wesley professional computing series.

[13]  Semyon Dukach.  SNPP: A simple network payment protocol , 1992, [1992] Proceedings Eighth Annual Computer Security Application Conference.

[14]  Marvin A. Sirbu,et al.  NetBill: an Internet commerce system optimized for network-delivered services , 1995, IEEE Wirel. Commun..

[15]  Andrew C. Payne,et al.  Payment switches for open networks , 1995, Digest of Papers. COMPCON'95. Technologies for the Information Superhighway.