A Robust Security Mechanism for Mobile Commerce Transactions

作者：Yoon Eun Jun; Yoo Kee Young^*

来源：IEICE Transactions on Information and Systems, 2010, E93D(11): 2898-2906.

DOI：10.1587/transinf.E93.D.2898

• cryptography
• security analysis
• security protocol
• mobile commerce
• WAP authentication

In 2006 Yeh and Tsai proposed a mobile commerce security mechanism However in 2008 Yum et al pointed out that Yeh Tsai security mechanism is not secure against malicious WAP gateways and then proposed a simple countermeasure against the attack is to use a cryptographic hash function instead of the addition operation Nevertheless this paper shows that both Yeh Tsai s and Yum et al s security mechanisms still do not provide perfect forward secrecy and are susceptible to an off line guessing attack and Denning Sacco attack In addition we propose a new security mechanism to overcome the weaknesses of the previous related security mechanisms

• 出版日期2010-11