A trustworthy and untraceable centralised payment protocol for mobile payment

[thumbnail of A_Trustworthy_and_Untraceable_Centralised_Payment_Protocol_for_Mobile_Payment_Camera_Ready.pdf]
Preview
Text - Accepted Version
· Please see our End User Agreement before downloading.
| Preview

Please see our End User Agreement.

It is advisable to refer to the publisher's version if you intend to cite from this work. See Guidance on citing.

Add to AnyAdd to TwitterAdd to FacebookAdd to LinkedinAdd to PinterestAdd to Email

Neera, J., Chen, X. orcid id iconORCID: https://orcid.org/0000-0001-9267-355X, Aslam, N. and Issac, B. (2025) A trustworthy and untraceable centralised payment protocol for mobile payment. ACM Transactions on Privacy and Security, 28 (2). ISSN 2471-2574 doi: 10.1145/3706421

Abstract/Summary

Current mobile payment schemes gather detailed information about purchases customers make. This data can then be used to infer a customer’s spending behaviour, potentially violating their privacy. To tackle this problem, we propose an untraceable mobile payment scheme that strikes a better balance, preserving user privacy while allowing the Third-Party Service Provider (TPSP) to collect necessary information such as card details and transaction amount for regulatory compliance. Our scheme offers untraceability for legitimate users from malicious adversaries and curious TPSPs using cryptographic primitives such as partially blind signatures, zero-knowledge proofs and identity-based signatures. It also guarantees that only authorised TPSPs can issue valid payment tokens, and even with limited data the TPSP can still prevent dishonest customers/merchants from double-spending a payment token. We also propose a comprehensive evaluation framework to assess the untraceable payment schemes against seven key criteria such as untraceability, exculpability - merchant double-spending, exculpability - customer double-spending, unforgeability, confidentiality, message authenticity, efficiency and regulatory compliance. We rigorously benchmark the security and privacy of our proposed payment scheme against this framework and other established schemes. Furthermore, we formally verify these properties using complexity-based analysis and Proverif modelling.

Altmetric Badge

Item Type Article
URI https://reading-clone.eprints-hosting.org/id/eprint/119815
Identification Number/DOI 10.1145/3706421
Refereed Yes
Divisions Science > School of Mathematical, Physical and Computational Sciences > Department of Computer Science
Publisher ACM
Download/View statistics View download statistics for this item

Downloads

Downloads per month over past year

University Staff: Request a correction | Centaur Editors: Update this record

Search Google Scholar