Mobile CommerceMobile Commerce

BYBY

Y.PHANI SANKARY.PHANI SANKAR

(07501A1223)(07501A1223)

OutlineOutline

M-Commerce OverviewM-Commerce Overview InfrastructureInfrastructure M-Commerce ApplicationsM-Commerce Applications Mobile PaymentMobile Payment LimitationsLimitations Security in M-CommerceSecurity in M-Commerce

Mobile Commerce: Mobile Commerce: OverviewOverview

Can be done via the Internet, private Can be done via the Internet, private communication lines, smart cards, etc.communication lines, smart cards, etc.

Creates opportunity to deliver new Creates opportunity to deliver new services to existing customers and to services to existing customers and to attract new onesattract new ones

Mobile commerce from the Mobile commerce from the Customer‘s point of viewCustomer‘s point of view

The customer wants to access The customer wants to access information, goods and services any time information, goods and services any time and in any place on his mobile device.and in any place on his mobile device.

He can use his mobile device to purchase He can use his mobile device to purchase tickets for events or public transport, tickets for events or public transport, download content.download content.

He should be offered appropriate payment He should be offered appropriate payment methods. methods.

Mobile commerce from the Mobile commerce from the Provider‘s point ofProvider‘s point of viewview

The future development of the mobile The future development of the mobile telecommunication sector is heading more and telecommunication sector is heading more and more towards value-added services. more towards value-added services.

Analysts forecast that soon half of mobile Analysts forecast that soon half of mobile operators‘ revenue will be earned through operators‘ revenue will be earned through mobile commerce. mobile commerce.

Innovative service scenarios will be needed that Innovative service scenarios will be needed that meet the customer‘s expectations.meet the customer‘s expectations.

Mobile Computing Mobile Computing InfrastructureInfrastructure

ScreenphonesScreenphones E-mail handheldsE-mail handhelds WirelinedWirelined

Cellular (mobile) Cellular (mobile) phonesphones

PDAsPDAs Interactive pagersInteractive pagers Other devicesOther devices

NotebooksNotebooks HandheldsHandhelds SmartpadsSmartpads

Hardware

Mobile Computing Mobile Computing InfrastructureInfrastructure

(cont.)(cont.) Unseen infrastructure requirementsUnseen infrastructure requirements

Web server with wireless supportWeb server with wireless support Database serverDatabase server GPS locator used to determine the GPS locator used to determine the

location of mobile computing device location of mobile computing device carriercarrier

M-Commerce ApplicationsM-Commerce Applications

M- commerce

Entertainment• Music• Games• Graphics• Video

Communications• Short Messaging• Multimedia Messaging• e-mail• Chatrooms• Video - conferencing

Transactions• Banking• Shopping• Auctions• Betting• Booking & reservations

Information• News• City guides• Maps• Traffic and weather• Market data

Mobile Payment forMobile Payment for M-M-CommerceCommerce

Customer requirementsCustomer requirements:: a larger selection of merchants with whom they a larger selection of merchants with whom they

can tradecan trade a more consistent payment interface when a more consistent payment interface when

making the purchase with multiple payment making the purchase with multiple payment schemes, like:schemes, like:

• Credit Card paymentCredit Card payment• Bank Account/Debit Card Payment Bank Account/Debit Card Payment

Merchant benefits:Merchant benefits:• brands to offer a wider variety of paymentbrands to offer a wider variety of payment• Easy-to-use payment interface developmentEasy-to-use payment interface development

Bank and financial institution benefitsBank and financial institution benefits• to offer a consistent payment interface to to offer a consistent payment interface to

consumer and merchantsconsumer and merchants

Payment via Internet Payment via Internet Payment ProviderPayment Provider

WAP GW/Proxy

SSL tunnel

MeP

GSM Security

SMS-C

User

Browsing (negotiation)

Merchant

Mobile Wallet

CC/Bank

IPP

Payment via integrated Payment Payment via integrated Payment ServerServer

WAP GW/Proxy

ISO8583 BasedCP

Mobile CommerceServer

GSM Security

SMS-C

User

Browsing (negotiation)

CC/Bank

Merchant

Mobile Wallet

Voice PrePaid

VPP IF

SSL tunnel

Limitations of M-CommerceLimitations of M-Commerce

Usability ProblemUsability Problem small size of mobile devices (screens, small size of mobile devices (screens,

keyboards, etc)keyboards, etc) limited storage capacity of deviceslimited storage capacity of devices hard to browse siteshard to browse sites

Technical LimitationsTechnical Limitations lack of a standardized security protocollack of a standardized security protocol insufficient bandwidthinsufficient bandwidth 3G liscenses3G liscenses

Limitations of M-CommerceLimitations of M-Commerce

Technical Limitations…Technical Limitations… transmission and power consumption transmission and power consumption

limitationslimitations multipath interference, weather, and distance-multipath interference, weather, and distance-

limited connectionslimited connections

WAP LimitationsWAP Limitations SpeedSpeed CostCost AccessibilityAccessibility

WAP ArchitectureWAP Architecture

Web Server

Content

CGIScripts

etc.

WM

L D

ecks

wit

h W

ML

-Scr

ipt

WAP Gateway

WML Encoder

WMLScriptCompiler

Protocol Adapters

Client

WML

WML-Script

WTAI

Etc.

HTTPWSP/WTP

Platform RisksPlatform Risks

Without a secure OS, achieving security Without a secure OS, achieving security on mobile devices is almost impossibleon mobile devices is almost impossible

Learned lessons:Learned lessons: Memory protection of processesMemory protection of processes Protected kernel ringsProtected kernel rings File access controlFile access control Authentication of principles to resourcesAuthentication of principles to resources Differentiated user and process privilegesDifferentiated user and process privileges Biometric authentication Biometric authentication

New Security RisksNew Security Risksin M-Commercein M-Commerce

• Malicious domainsMalicious domains

• A single malicious domain can compromise A single malicious domain can compromise devices by downloading malicious codedevices by downloading malicious code

• Roaming (are you going to the bad guys ?)Roaming (are you going to the bad guys ?)

• Users roam among non-trustworthy domainsUsers roam among non-trustworthy domains

New Security Risks New Security Risks (cont.)(cont.)

• Launching attacks from mobile devicesLaunching attacks from mobile devices

• With mobility, it is difficult to identify attackersWith mobility, it is difficult to identify attackers

• Loss or theft of deviceLoss or theft of device

• More private information than desktop computersMore private information than desktop computers

• Security keys might have been saved on the deviceSecurity keys might have been saved on the device

• Access to corporate systemsAccess to corporate systems

Conclusion

• Mobile commerce is an interesting and challenging area of research and development.

• It is believed that user trust will play a crucial role in acceptance and widespread deployment of mobile commerce applications.

References

www.fcc.gov

www.mobilecommerce.com

www.whitepapers.com

Thank U for listening.