E-commerce transaction validation using IMS

E-commerce transaction validationby service providers

Dominique Sandraz+, Paul Serra+, Antoni Drudis+,Claude Florin*

Hewlett-Packard

+ publication authors, * presenter at ICIN 07 conference

2October 8, 2007 E-commerce transaction validation - [email protected]

Web e-commerce transactions

• Context − Credit card and web clearing-house are widely adopted by e-commerce consumers and

merchants − Mobile payment initiatives and services, using NFC, SMS, WAP, applications and IVRs

• Investigation of possible improvements for IMS subscribers :− Stronger authentication to prevent identity theft− Enhanced privacy of buyer’s identity− Support of anonymous transactions− Enhanced fraud protection

BuyersPayment

Shipment

Merchant


Improving e-commerce security

− Trusted party to validate buyers and merchants transactions • Enhances validation for specific applications using speech processing• Protects from denial of service attacks, reduce order repudiation

− Protection of buyer’s privacy • ID management• Anonymous transactions

− Complement clearing house payment services• Micro-payments, pre-paid debits, mobile 2.0 group split-billing• Clearing-house, credit-card interface aggregation, reporting

BuyersPayment

Shipment

Merchant

Validation service


IMS Architecture - mobile

Mw/dd

Cx/16

ISC/12SIP

Sh/11

Mr/24

Diameter

RfSIP

Mw/ddGm/hh

Visiteddomain

Homedomain

P-CSCF I-CSCF S-CSCF

Applicationserver

OSA AS

User interaction

UE /

ISIM

2G SCP

Leveraging IMS for Web transactionsPayment

Transaction validation

PLMN

HSSAuC

Buyers identity

Note : simplified view

MRF

Charging OCS

Merchant / clearing service

HTTPS

Parlay XWSDL

SfNETANNMSCML

CCXMLVXML

Web

AKA


Payment validation

Buyer interaction

2-3G

Service provider

Transactionvalidation service

HSSValidation request

SMS / voiceConfirmation

SMS / DTMF

Validationrequest

WSL

Validationresponse

WSL

DTMFASRTTS

SMS

IP Merchant service

ASDB

Order XML HTTP Request

Confirmation XML HTTP Response

Merchant

Paymentservice

AS

Clearing

OK

Web browser


User authentication

2-3G

IP Merchant service

ASDB


Validation request


SMS / DTMF


Merchant

Ordering key request - response

SMS / DTMF

Ord

erin

g ke

y

PIN

Service provider


HSS

Validationrequest

WSL

Validationresponse

WSL

DTMFASRTTS

SMS

Paymentservice

AS

ClearingWeb browser


Transaction micro-payment

Service provider

IP Merchant service

ASDB


Validation request

WSL

Validation response

WSL


Merchant

Clearing

Buyer interaction

2-3GTransactionvalidation service

HSSValidation request


SMS / DTMFDTMFASRTTS

SMS

Prepaid

Debit

CD

R

Com

mun

ities

Note : many users may be sharing the order in a community using split-billing

OK

Web browser


Mobile clearing house validation

Buyer interaction

2-3G

Service provider


HSSPayment request


SMS / DTMF

Payment

request

WSL

Payment

response

WSL

DTMFASRTTS

SMS

IP Merchant service

ASDB



Merchant

Paymentservice

AS

Clearing

OK

Web browser


Anonymous user validationHiding billing and shipment addresses

2-3G

Service provider

IP


HSS

Merchant service

ASDB


Validation request


SMS / DTMF

Validation request

WSL

Validation response

WSL


Merchant

DTMFASRTTS

SMS

Shipmentservice

AS

Warehouse

Ordering key request - response

SMS / DTMF

Ord

erin

g ke

y

Address

WSL

Shippingnum

ber

WSL

Note : user is anonymous to the merchant

PIN

Web browser


Telecom service providers added-value• Ubiquitous service access : ~2.5 *109 mobile

users−Voice interaction with low literacy consumers −SMS, WAP, …

• Micro-billing and credit : > 500 *109 € / year−Users < 18 years old, with low credit, P2P and C2B−3rd party billing for value-added services (premium SMS

and voice)−Mobile commerce revenue 2006 > 25 *109 €−Split billing to mobile 2.0 communities (games, sharing)

• Strong user authentication−SIM / USIM authentication


Investigation results :• An application layer to validate e-commerce

transactions can be deployed over an IMS architecture

• Telecom service providers can add value in specific use cases to grow Web e-commerce :−Trust, authentication−Micro-payment−Mobile clearing house validation−Anonymous transactions−Ubiquitous access

Thank youhttp://www.hp.com/go/opencall


Context : mobile payment services• Discontinued initiatives −Simpay (20 countries)−Paybox (< 1M users)

• Current mobile payment players−Paypal mobile (26 B$ in 2006)−Obopay, Kushcash, Paybytext, Firethorn, Clairmail,

mFoundry, mobileLime, PHIRE, Cyphermint, C-Sam, Lending Club, Billeo, Yodlee, Firethorn, Monitise, Clairmail, mShift, mFoundry, iPay

−GSMA • MasterCard global hub for migrant workers remittances• Pay-Buy Mobile initiative

Date post:	01-Nov-2014
Category:	Economy & Finance
Upload:	claude-florin
View:	2,198 times
Download:	1 times

E-commerce transaction validation using IMS

Economy & Finance