Technology Challenges in Mobile Payments

Security at Mobile Channel Level

• Voice Channel : DTMF for IVRS
• Text Channel : SMS, USSD
• MMS Channel : GPRS
• GSM Security Mechanisms
• Equipment Identity Register (EIR)
• Black list – stolen or non-type mobiles
• White list - valid mobiles
• Gray list – local tracking mobiles
• Central Equipment Identity Register (CEIR)
• Approved mobile type (type approval authorities)
• Consolidated black list (posted by operators)

• March 29, 2012

Security at Mobile Application level

• Client Application developed by the Mobile Payment Provider (MPP)
• Server Application of the MPP at the Bank level
• Security Testing
• Key Generation and storage process
• Check Sum implemented
• Reaching to the destined address only ?

• March 29, 2012

Multiple Standard Challenges

• March 29, 2012

• ISO Standards
• IEEE Standards
• PCI DSS Standards
• Regulatory Standards
• Global platform Standards
• EMV Standards
• NIST Standards
• SFMS, SWIFT Standards
• NFC Standards

Mobile ad hoc network technologies

• March 29, 2012

Technology Standard	Theoretical Bit Rate	Frequency	Range	Power Consumption
IEEE 802.11b	1,2,5.5, 11 Mbits/s	2.4 GHz	100m-500m	30mW
IEEE 802.11g	Upto 54 Mbits/s	2.4 GHz	25-50m	79mW
IEEE 802.11a	Upto 54 Mbits/s	5 GHz	40m	250mW
Bluetooth IEEE 802.11.15.1	1 Mbits/s	2.4 GHz	10 m-100m	1mW
UWB (IEEE 802.15.3)	110 - 480 Mbit/s	10 GHz	10m	200 mW
Hiper LAN2	Upto 54 Mbits/s	5 GHz	150m	200 mW
IrDA	4Mbits	850 nm	10 m	200mW
IEEE 802.11n	600 Mbits/s	5 GHz	100m - 250m	1500W

Consolidation Level Challenges

• March 29, 2012

• Server capabilities to handle high volume mobile payment transactions
• Periodic and round the clock clearing services for mobile payments
• Net and Real time funds settlement between Banks
• Cash management issues at ATMs on account of high velocity mobile payments.
• Offering Mobile Banking Application as a Cloud Service

Some Innovative solutions of

• Some Innovative solutions of
• Mobile Payments in India:
• Bringing all stakeholders of Mobile Payments into one platform by the Mobile Payment Forum of India (MPFI) in 2006
• Use of Mobile Phone Number and MMID only for Mobile Payments
• Use of AADHAR number and BIN for Mobile Payments
• Use of USSD based Mobile Payments
• Development of MANETS for Financial Inclusion by IDRBT
• And many other solutions reported in the workshop

• March 29, 2012

MANET Ecosystem for Mobile Payments

• MANET nodes.
• Gateway.
• Backbone Network.
• Bank Server.
• Fixed Relay.

• March 29, 2012

Mobile ad-hoc Network (MANET)

• It is a Mobile wireless network.
• MANET nodes are rapidly deployable, self configuring and capable of doing autonomous operation in the network.
• Nodes co-operate to provide Connectivity and Services.
• Operates without base station and centralized administration.
• Nodes exhibit mobility and the topology is dynamic.
• Nodes must be able to relay traffic sense.
• A MANET can be a standalone network or it can be connected to external networks(Internet).

• March 29, 2012

MANET based Mobile Payments

• I

• Cellular Network /Satellite Technology
• Internet /
• Private LAN

• Gateway

• Fixed Relays

• Bank Server

• Mobile ad hoc Network

• Village

• MANET node

• Backbone

• March 29, 2012

Testbed

• Mobile Node C
• 192.168.1.3

• Mobile Node B
• 192.168.1.3

• Mobile Node D
• 192.168.1.4

• Mobile Node A
• 192.168.1.2

• Gateway

• 192.168.1.1

• Fixed Relay

• MANET in a Village

• Cellular Network/
• ISDN/PSTN/ LLN/
• Satellite Network

• Bank-A Server
• 172.16.0.8

• Bank-B Server
• 162.16.6.124

• March 29, 2012

• March 29, 2012

• Thank you...