(A) study on effortless mobile payment system

Abstract

A smartphone is a versatile tool to make the user experience of payment better in terms of both security and usability. Nowadays, many mobile payment systems have been proposed and deployed to replace the traditional payment system using a plastic card.However, the mobile payment systems including Apple Pay, Samsung Pay, and Android Pay do not seem to resolve the inherent problem, which is the usability to make payment convenient. Still, in the systems, a user should take every step of taking his/her smart-phone out of the pocket, making it ready for payment after biometric authentication such as a fingerprint, and touching it to a payment device. Somehow, these mobile payment systems made a user more cumbersome by introducing the biometric authentication step.This observation motivated us to design a \effortless mobile payment" system of this dissertation, where the payment removes steps to take a smartphone out of the pocket and to make it ready for payment after authentication. To this end, we introduce a concept of \payment zone". By standing in the zone near a casher, a user is regarded to express his or her intention of purchase. With the concept of the payment zone, a user does not need to do any cumbersome task for payment, but a smartphone does all thenecessary tasks for payment. It is enough for a user to stand in the payment zone and say \yes" for payment. This can improve significantly usability during payment process.To implement the idea of payment zone, we propose a method to form a paymentzone accurately by iBeacon. To accurately determine whether a user is within a payment zone or not, we used RSSI values from two iBeacons. The values were very noisy, so we applied EWMA (Exponential Weighted Moving Average) filter to obtain the best results. We were finally able to achieve 0% error detection rate in our experiments by applying the time-window algorithm and the advanced payment zone detection algorithm that tookadvantage of RSSI trend of an approaching user. For secure mobile payment, we propose a secure payment protocol that does not reveal any private information during the transaction and also a new scanning scheme called POTS (POint-of-sale Terminal Scanner) that enables payment service providers to check if the merchants have deleted their customer's data previously downloaded from the clouds. we believe that early detection of customer information inside POS terminals helps to reduce the damage from potential cyber attacks since critical data can be removed a priori. Experiments showed that the proposed scheme using Jaccard containment cansuccessfully identify undeleted user profiles, and that the advanced scheme with sampling can reduce the amount of network trac by orders of magnitude, compared with the naive scheme, while preserving detection accuracy. We showed feasibility and effectiveness of our mobile payment system by implement-ing a pilot system, which has been deployed for about a month at a cafeteria of BC card company in December, 2014. The results from the pilot study confirmed that our payment system was able to improve greatly the usability for payment.Keywords: Mobile payment, effortless mobile payment zone, beacon-based zone de-tection, data leakage from POS terminal, customer data scanner.