Overview of Security and Payments for Mobile Commerce

AMIR A. HERZBERG NewGenPay - General; IBM Research - E-Business and Security Technologies

Abstract:

We review security and payments in the mobile commerce environment, considering unique problems and concerns due to mobility, as well as opportunities due to the use of personal trusted device (PTD). We present a simplified three layers model for secure commerce: network layer, transport layer and application layer. For each layer, we discuss security and payments objectives, considerations and approaches. We review the important technologies for each layer, including Bluetooth, WAP/WTLS and IBM Micro Payments. Where necessary, we identify weaknesses and suggest improvements. We also show how mobile personal trusted devices could be enhanced to provide secure non-repudiation, the `holy grail` of secure commerce. We argue that some financial (esp. brokerage) services offered today, without a reasonably secure PTD solution, are creating a serious risk to the economy.

Facts on IBM Software

WebSphere refers to a brand of IBM software products, although the term also popularly refers to one specific product: WebSphere Application Server (WAS).

Lotus Software (called Lotus Development Corporation before its acquisition by IBM) is an American software company with its headquarters in Cambridge, Massachusetts. Lotus was founded in 1982 by partners Mitch Kapor and Jonathan Sachs. Lotus' first product was presentation software for the Apple II known as Lotus Executive Briefing System, but the company is more broadly known for its groundbreaking Lotus 1-2-3 spreadsheet application released in January 1983.

ObjecTime developed the original product in Kanata, Canada prior to its acquisition by Rational Software on December 14, 1999.

This site is growing and will contain info on subjects like lotus notes, ibm websphere and uml tutorial.