Convergence of credit cards and NFC mobile phones – world trend in the market of micropayments
Peppercoin Micropayments
description
Transcript of Peppercoin Micropayments
![Page 1: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/1.jpg)
Peppercoin Micropayments
Ronald L. RivestMIT CSAIL
(joint work with Prof. Silvio Micali)
![Page 2: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/2.jpg)
Outline
Micropayment examples Challenges Aggregation methods The “Peppercoin” method
(In England a peppercorn is smallest amount that can be paid in a contract)
![Page 3: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/3.jpg)
What is a “micropayment”?
A payment in the range 0.1¢ to $10.
A payment small enough that processing it is relatively costly. (Processing one credit-card payment costs about 25¢ …)
Processing cost is the key issue for micropayment methods.
![Page 4: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/4.jpg)
Lydians invented coins 640 B.C.
Before 640 B.C.: gold bars, barter
small purchases difficult. After 640 B.C.: coins
small purchases easy. Before 2003: credit cards
small on-line purchases difficult. After 2003: …
![Page 5: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/5.jpg)
Generic Payment Framework
Consumer Alice Merchant Bob
Authori-zation Deposit(s)
Merchant PSP
Consumer PSP
Settlement
Payment(s)
Billing
![Page 6: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/6.jpg)
How we’ll make small payments
Web download– Music (even
streaming)
Mobile phone– Map– Ringtones
Physical POS– Vending machine
![Page 7: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/7.jpg)
Challenges:
Ease-of-use Low-Cost Extending existing payment
framework Security … (many other issues, too)
![Page 8: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/8.jpg)
Aggregation To reduce cost, micropayments must be
aggregated into fewer macropayments. Possible levels of aggregation:
– None: Every payment deposited with PSP– Merchant-level: A consumer’s payments are
aggregated by merchant– MicroPSP: Monopoly service that
disintermediates existing payment services; doesn’t scale well
– Universal: Payments aggregated across all users and merchants, even those supported by different cooperating PSPs
![Page 9: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/9.jpg)
No Aggregation
Alice
Bill
Inefficient!
![Page 10: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/10.jpg)
Previous Work: Digital Cash
Example: Chaum’s digital coins Emphasis on anonymity:
Withdrawals use blind signatures Problem of double-spending
handled by having doubler-spenders revealed (e.g. Brand’s protocol)
No aggregation: every coin spent is returned to the PSP.
![Page 11: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/11.jpg)
Merchant-Level Aggregation
Alice
Bill
Only works sometimes!
![Page 12: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/12.jpg)
Previous Work: PayWord Rivest and Shamir ’96 Emphasis on reducing public-key
operations by using per user/merchant hash-chains instead: x0 x1 x2 x3 … xn
User signs x0 over to merchant and releases next xi for next payment
Merchant-level aggregation only.
![Page 13: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/13.jpg)
MicroPSP Aggregation
Alice
MicroPSPBill
Doesn’t scale up!
![Page 14: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/14.jpg)
Universal Aggregation Universal aggregation dramatically
reduces processing cost, independent of spending patterns.
Also called many/many/many aggregation: Aggregates payments from– Many consumers– Many merchants– Many PSP’sin any combination. No need to aggregate sales
per consumer.
![Page 15: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/15.jpg)
Universal Aggregation Idea
Would merchant prefer: (a) twenty 50 cent payments, or (b) $0 for 19 payments, and $10 for one? No difference to merchant, on average
![Page 16: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/16.jpg)
Universal Aggregation Idea
Would merchant prefer: (a) twenty 50 cent payments, or (b) $0 for 19 payments, and $10 for one? No difference to merchant, on average.
What if processing costs 20 cents per payment? (a) nets only 30 cents per payment (b) nets 49 cents net per payment!Merchant strongly prefers (b) !
![Page 17: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/17.jpg)
Peppercoin’s Universal Aggregation
One micropayment in 20 is “cryptographically selected” by merchant, and deposited for 20x its value,as a macropayment!
Yet consumer pays only for what she has spent: each micropayment records cumulative amount she has spent at all merchants.
![Page 18: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/18.jpg)
Peppercoin’s Universal Aggregation
19 / 20
LogAlice
50 cents
($8.50 cumulative)
![Page 19: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/19.jpg)
Peppercoin’s Universal Aggregation
19 / 20
LogCharles
50 cents
($12.79 cumulative)
![Page 20: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/20.jpg)
Peppercoin’s Universal Aggregation
Efficient always and scalable: !! 20 transactions for the cost of
1 !!
Alice
1 / 20
$10
$10
Bill $11 (exactly cover cumulative amount she spent at all merchants)
50 cents
($11.00 cumulative)
![Page 21: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/21.jpg)
Peppercoin Extends Existing Payment Systems to Micropayments
Consumer Alice Merchant Bob
Existing Payment System
Mic
rop
aym
en
tsM
acro
paym
en
ts
![Page 22: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/22.jpg)
Dimensions to consider:
Aggregation (universal) PSP on-line or off-line ? (off-line) Interactive vs. non-interactive (non)
– (e.g. anti-spam payment in email) Computation Cost (cheap) User-fairness (fair) … (many other issues, too)
![Page 23: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/23.jpg)
Previous Work: Lottery Tickets
“Electronic Lottery Tickets as Micropayments” – Rivest FC ’97(similar to “Transactions using Bets” proposal by Wheeler ’96)
Payments are probabilistic First schemes to provide
universal aggregation: payments aggregated acrossall user/merchant pairs.
![Page 24: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/24.jpg)
“Lottery Tickets” Explained
Assume micropayments are for ten cents. Merchant gives user y = hash(x) for random
x. User writes check: “Pay Merchant $10 if two
low-order digits of hash-1(y) are 75.” (Signed by user, with cert from his PSP.)
Merchant “wins” $10 with probability 1/100. Expected value of payment is 10 cents.
Bank sees only 1 out of every 100 payments.(A plus for user privacy!)
![Page 25: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/25.jpg)
Non-interactive
Revised check: “Pay Merchant $10 if two low-order digits of the hash of Merchant’s digital signature on this check are 75.”
Merchant’s deterministic signature scheme unpredictable to user.
Merchant can convince PSP to pay.
![Page 26: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/26.jpg)
Computation Cost Digital signatures are still
relatively expensive --- but much cheaper than they used to be!
It now seems reasonable to base micropayments on digital signatures. (E.g. Java card in cell phone)
User and merchant are anyways involved with each transaction; digital signatures add only a few milliseconds.
On-line/Off-line signature can also help.
![Page 27: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/27.jpg)
Optimization for less Signing
“Pay Merchant $10 if the two low-order digits of the hash of Merchant’s digital signature on the date of this check are 75.”
Merchant only signs once a day.
![Page 28: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/28.jpg)
Variable-sized payments To make micropayment of size m:
– Chance of “winning” becomes m / Mwhere M is the macropayment size.
For example, a $1 micropayment converts to a $10 macropayment with probability 1/10.
A one-penny micropayment converts to a $10 macropayment with probability 1/1000.
![Page 29: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/29.jpg)
Is revenue variance an issue?
Theorem. If Peppercoin reduces merchant fees by R percent of transaction value, then merchant will be ahead (with probability 999,999/1,000,000) after only (5 / R)2
macropayments have been received.
Example: micro = 0.10, macro = $10, otherfee = 0.03, peppercoinfee = 0.01, R = 0.20, (5/R)2 = 625 or $6250 total value.
![Page 30: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/30.jpg)
Fraud models Security is challenging to achieve given
that PSP has only partial information, parties may collude, and payment schedules are decoupled.
For example, consumer and merchant may try to collude to defraud PSP’s.
One effective countermeasure is to make macropayment to merchant only from revenues from that specific consumer (perhaps deferring payment if necessary).
![Page 31: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/31.jpg)
Conclusion
Peppercoin micropayments are– Easy to use– Low-cost even for small payments– Flexible
(interface with existing payment systems)
– Secure www.peppercoin.com
Thanks!
![Page 32: Peppercoin Micropayments](https://reader035.fdocuments.us/reader035/viewer/2022062301/5681515b550346895dbf7f54/html5/thumbnails/32.jpg)
(The End)