P1247176258xeYCM

1
(No Transcript)
2
PBS Mobile Payment Gateway

• PBS (Pengeinstitutternes BetalingsSystemer/Danish
  Payment Systems) is the only creditcard payment
  clearing house in Denmark.
• Main objectives of the system
• Boost number of purchases on the internet.
• High security.
• Usage of existing mobile phones
• Familiar UI.
• Minimum changes for merchants.
• Backward compatibility with early pilot.

3
Boosting internet purchases

• People are reluctant to enter creditcard numbers
  on the Internet
• This system will enable users to enter their
  mobile phone number instead.
• Why is that better?
• A confirmation message is pushed to the phone, an
  must be replied before a purchase is authorized.
• Not just for internet, but for all remote sales.
  Like calling for pizza.

4
How can the phone number be enough?

• On subscribing to the system, the user logically
  combines the mobile phone number to one or
  several creditcard numbers.
• Only the gateway holds, the phone-number to
  creditcard combination, and it is established
  offline, thus the creditcard numbers are never
  transported through the internet.

5
Architecture
6
Normal message flow
7
High security

• The user has to confirm a payment message before
  the transaction takes place.
• All communication between merchant and PBS are
  SSL, with client authentication.
• Sensitive information sent to/from the mobile
  telephone has end to end security between the
  phone's SIM card and the gateway's hardware
  crypto box.

8
How is the end to end security established?
9
How is the end to end security established?
10
Usage of existing mobile phones

• An application is put on the SIM card, this means
  that users have to get a new SIM card.
• The SIM card contains a microbrowser (WML subset).

11
Familiar UI

• The UI has been designed to mimic existing
  Dankort payment terminals.
• This should give the user the impression that the
  mobile phone, is her own personal card terminal.

12
Dialog example
13
Minimum changes for merchants.

• PSIP protocol is used for communication (extended
  subset of ISO 8583)
• Only change at merchant is ability for user to
  enter phone number instead of creditcard number.

14
Backward compatibility with early pilot.

• Made with Orange (at that time Mobilix)
• Special payments for prepaid airtime.
• requires the telco's PSIP implementation to act
  as a server for getting a special PSIP Advice
  message, sent by the gateway.
• done to eliminate one user interaction, when
  purchasing prepaid airtime.
• So far it looks like only Orange, will keep this
  scenario.

15
When will this happen?

• Pilot (another one) 1/10 (10 users only)
• Full rollout before X-mas

16
Was it pervasive computing?