Abstract

In a mobile emerging world, user authentication, service provider authentication and security is very important in mobile commerce. User authentication is performed by using fingerprint based biometric methodology. Existing system used for Mobile purchasing/payment services in handheld devices does not analyze fingerprint matching and feature extraction techniques in an efficient way. Also the existing system is not secure and accurate for m-payments applications. We propose secure, efficient and accurate m-commerce architecture for m-commerce applications. This involves fusion of Minutiae Maps (MM) and Orientation Maps (OM) for fingerprint feature extraction. The fingerprint is sent to the biometric server in a secure way using Discrete Wavelet Transform (DWT) data hiding method. User fingerprint will be checked and compared using MM and OM methods to figure out the fingerprint threshold matching score. If the threshold is 80-99% PIN distribution process is initiated, otherwise user authentication is failed. The user PIN is converted into a unique sequence and divided into two parts. Along with the user PIN, user IP address, time stamp, user ID are encrypted using RC4 (stream cipher) algorithm. Also a hash function is appended to the cipher text using Secure Hash Algorithm (SHA4). One half is verified by the authentication server and the other half is verified by the external server. After verification both the servers sends only OK message to the bank. This study looks to provide a high secure and efficient solution for m-commerce applications.

Keywords:

Biometric server, discrete wavelet transform, m-commerce, minutiae maps, orientation maps, secure hash function , stream cipher,

References

1. Abdelwahab, A.A. and L.A. Hassaan, 2008. A discrete wavelet transform based technique for image data hiding. Proceeding of the National Radio Science Conference (NRSC’08), pp: 1-9.
   CrossRef    
2. Arunprakash, R., K.M. Mehata and C. Chellappan, 2011. Improved pin distribution techniques in M-commerce system. Proceeding of the 3rd International Conference on Machine Learning and Computing.
   
3. Arun Prakash, R., K.M. Mehata and C. Chellappan, 2014. A novel hybrid authentication method based on orientation maps and server aided signature for M commerce secured transactions. J. Theor. Appl. Inf. Technol., 64(1): 84-94.
   
4. Asokan, N., G. Tsudik and M. Waidner, 1996. Server-supported signatures. J. Comput. Secur., 5: 131-43.
   CrossRef    
5. Belkhede, M., V. Gulhane and P. Bajaj, 2012. Biometric mechanism for enhanced security of online transaction on android system: A design approach. Proceeding of the 14th International Conference on Advanced Communication Technology (ICACT, 2012). PyeongChang, pp: 1193-1197.
   
6. Chang, J.M., W. Joseph and H. George, 2014. Mobile commerce. IEEE IT Prof., 16(3): 2-3.
   CrossRef    
7. Earley, S., 2014. Mobile Commerce: A Broader Perspective. IT Prof., 16(3): 61-65.
   CrossRef    
8. Han, F. and R.V. Schyndel, 2012. M-identity and its authentication protocol for secure mobile commerce applications. In: Xiang, Y. et al. (Eds.), CSS, 2012. LNCS 7672, Springer-Verlag, Berlin, Heidelberg, pp: 1-10.
   CrossRef    
9. Henry, E., 1900. Classification and Uses of Fingerprints. Routledge, London.
   PMCid:PMC2506114    
10. Kulkarni, J.V., R.S. Holambe and D.P. Bhushan, 2005. Fingerprint feature extraction: A review. Proceeding of the National Conference on Signal Processing, Communication and Control (SPCCN01-2005). Vishwakarma Institute of Technology, Pune, pp: 379-382.
    
11. Ponnarasi, S.S. and M. Rajaram, 2012. Impact of algorithms for the extraction of minutiae points in fingerprint biometrics. J. Comput. Sci., 8(9): 1467-1472.
    CrossRef    
12. Rajanna, U., A. Erol and G. Bebis, 2010. A comparative study on feature extraction for fingerprint classification and performance improvements using rank-level fusion. Pattern Anal. Appl., 13(3): 263-272.
    CrossRef    
13. Sankaran, A., M. Vatsa and R. Singh, 2012. Hierarchical fusion for matching simultaneous latent fingerprint. Proceedings of the IEEE 5th International Conference on Biometrics Compendium, IEEE Biometrics: Theory, Applications and Systems, pp: 377-382.
    CrossRef    
14. Shashi, M.S. and M. Rajan, 2011. Comparative analysis of encryption algorithms for data communication. Int. J. Comput. Sci. Technol., 2(2): 292-294.
    
15. Singhal, N. and J.P.S. Raina, 2011. Comparative analysis of AES and RC4 algorithms for better utilization. Int. J. Comput. Trends Technol., 2(6): 177-181.
    

Competing interests

The authors have no competing interests.

Open Access Policy

This article is distributed under the terms of the Creative Commons Attribution 4.0 International License (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license, and indicate if changes were made.

Copyright

The authors have no competing interests.