A fool-proof tech for cell phone payments

WASHINGTON, USA: New technology developed by researchers will make money transactions through mobile phones foolproof.

The technology is designed to work in almost all situations: Person-to-person, in a shop or restaurant, at a vending machine, online, or as part of phone chats.

The need for such a secure system has been heightened by reported decision of the UK Payments Council to phase out cheques by 2018.

"A key requirement of new payment systems will be the ability to make payments from person to person, such as paying a builder or a friend," said Bill Roscoe, professor at the Oxford University's Computing Lab.

Consider the following scenarios:

Emma chooses a ticket online on her PC and pays with her phone. Her phone and the agency connect by telephony. She enters the code and confirms the payment, perhaps by entering her PIN.

Jim wants to make a low-value payment, say for a bus ticket. His phone makes a Bluetooth connection with the bus, and he confirms that the codes displayed on his phone and the ticket machine are equal by buying the ticket of this choice.

A child has run out of credit. He rings his mother, who transfers money without fuss: she has previously created a permanent key between their phones that allows her to transfer credit without the child needing to take any action.

"What we have is technology which enables anyone to easily create a secure connection between two devices: It can work via Bluetooth, WiFi, the internet or across ordinary telephone or SMS connections," Roscoe added.

"The core of our technology is a new security protocol that enables strong cryptographic keys to be created with the least possible work. The key to the protocol is that it prevents anyone from doing any searching to break into the transaction," Roscoe pointed out.

Isis Innovation, University of Oxford's technology transfer company, is working with Roscoe and his team to commercialise the technology.

The Oxford technology uses a system in which the payer checks whether a short numeric code (4-8 digits for most applications) generated within their own phone is the same as the one generated by the payee.

This number is random and does not have to be kept secret. This ensures that the customer's mobile is connected to the correct store, or to the mobile of the person they wish to pay.

Payment then occurs without the exchange of sensitive details such as credit card numbers or the PIN, said an Oxford release.

It is expected that no hardware modifications to the phones will be needed, and the Oxford team have built demonstration systems for a variety of uses.

©IANS