An Authenticated Short Message Service (SMS)-Based Transactions System Without SIM Modification

摘要

The bulk of mobile commerce or m-commerce continues to be transacted from conventional cell phones in the near term as these comprise the majority of current installed base. Due to their limited processing intelligence, a solution such as the SIM (Subscriber Identity Module) Application Toolkit (SAT) has been devised to augment transactions security. However, SAT solutions are generally costly to implement and administer, and tend to lock in users to specific applications and service providers. This is a reason why the SAT remains largely a niche technology despite the proliferation of cell phones worldwide. In this paper, we propose an authenticated Short Message Service (SMS)-based m-commerce transactions system that does not involve any SIM modification. The SAT was avoided to reduce associated deployment costs and overheads, and to improve flexibility and user choice. The use of relatively law cost and ubiquitous SMS technology as delivery platform is congruous to the primary design objectives of user familiarity and accessibility.