Formally verified TSM centric privacy preserving NFC mobile payment framework and protocol

摘要

Near field communication is on the verge of broad adoption worldwide. The combination of NFC and smart mobile devices are making the way of life more easier for millennials. Sensitive consumer information can be predicted using data aggregation and predictive data mining approaches on any profit-oriented open e-commerce business models which may potentially cause a privacy breach. In mobile payment, which is a popular ecommerce sub domain application, consumers' sensitive information potentially sits on retailers' server over which consumer has no control but hackers can exploit. This paper presents a new TSM centric privacy preserving framework and a protocol for NFC-based proximity payments. It prevents consumer data from ever touching a merchant's server where the majority of data breaches occur. The correctness of proposed privacy preserving NFC payment protocol is ensured here via formal modelling and verification using Proverif.