A Secured Mobile Payment Transaction Handling System using Internet of Things with Novel Cipher Policies

Research into a mobile payment protocol within the context of the IoT has received significant attention due to the proliferation of smart gadgets. Current authentication mechanisms for mobile payments either place an undue burden on a smart device's limited resources or fail to protect users' anonymity when making a purchase, both of which are major roadblocks to wider adoption of mobile payment systems. This study provides a lightweight and privacy-preserving security mechanisms for mobile payment within the context of the IoT, which neatly addresses these problems. The top transaction scheme fails to maintain its stated security due to vulnerabilities in the underlying Certificate-less Signature System (CSS). In this paper, we detail a forgery attack on the CSS and show how it exposes the inability of the current method to provide the desired level of security. In addition to addressing the previously described vulnerabilities, a more secure CSS structure is shown. Under the random oracle model, where it is assumed that the discrete logarithm issue cannot be solved efficiently, the Forking lemma provides a formal proof of our enhanced method. Lastly, based on our enhanced CSS scheme, we offer a secure transaction protocol for android-based mobile payments. Our architecture decreases the computational and networking burden of other IoT devices inside a given administrative area by requiring only a single unit of high-effectiveness embedded computers to serve the whole domain.