用於共享經濟的安全行動支付協議

A Secure Transaction Protocol for Sharing Economy

近年來，共享經濟成為了一種新的商業模式，就是將個人的閒置資產租借給他人使用。這種新興的經濟模式，帶來了資訊安全疑慮。共享經濟的交易模式通常使用行動支付，而行動支付使用的智慧裝置，經常使用無線網路進行資料傳輸。在這樣的環境裡，惡意攻擊者將可能使用特殊設備攔截機密資訊。若機密訊息沒有經過特殊處理或加密，惡意攻擊者將可得知訊息內容。因此，本論文設計了共享經濟的安全交易協議。當使用者使用共享經濟平台且啟動交易時，將由服務商產生該筆交易的金鑰與隨機數，讓使用者與資源提供者能共享金鑰，並且透過一次性的隨機數來驗證交易的有效性。因此惡意攻擊者攔截到訊息也無法於下回交易使用，降低了共享經濟交易中的安全風險。 In recent years, sharing economy has become a new business model that is the personal idle assets leased to others. This emerging model has brought information security problems. The sharing economy transaction usually uses mobile payment, while smart devices for mobile payments often use wireless networks for data transmission. In such an environment, a malicious attacker could use special equipment to intercept confidential information. If a confidential message has not been specially processed or encrypted, a malicious attacker will be able to know the message content. Therefore, this paper designs the secure transaction protocol for sharing economy. When the user uses the sharing economy platform and launches the transaction, the key and random number will be generated by the service provider so that the user and the resource provider can share the key to encrypt confidential information, and through the random number to verify. A malicious attacker intercepted the message cannot be used in the next transaction, so the sharing economy payment is more security.

In recent years, sharing economy has become a new business model that is the personal idle assets leased to others. This emerging model has brought information security problems. The sharing economy transaction usually uses mobile payment, while smart devices for mobile payments often use wireless networks for data transmission. In such an environment, a malicious attacker could use special equipment to intercept confidential information. If a confidential message has not been specially processed or encrypted, a malicious attacker will be able to know the message content. Therefore, this paper designs the secure transaction protocol for sharing economy. When the user uses the sharing economy platform and launches the transaction, the key and random number will be generated by the service provider so that the user and the resource provider can share the key to encrypt confidential information, and through the random number to verify. A malicious attacker intercepted the message cannot be used in the next transaction, so the sharing economy payment is more security.