Towards a Secure Zero-rating Framework with Three Parties