{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T15:50:40Z","timestamp":1781106640122,"version":"3.54.1"},"reference-count":26,"publisher":"IGI Global Scientific Publishing","issue":"2","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012,4,1]]},"abstract":"<p>The authors propose a Secure and Optimized Mobile based Merchant Payment (SOMMP) Protocol using Signcryption scheme with Forward Secrecy (SFS) based on elliptic curve which consumes less computational and communication cost. In SOMMP client sends message in the form of TransCertC (Transaction Certificate) which is a X.509 SLC (X.509 Short Lived Certificate) thereby reducing the client interactions with the engaging parties thereby reducing the consumption of resources (from Client\u2019s perspective) which are very scarce in Resource Constrained Devices like Mobile Phones. In SOMMP protocol WSLC (WPKI Short Lived Certificate) eliminates the need of certificates validation and removes the hurdle of PKI thereby reducing storage space, communication cost and computational cost. Their proposed SOMMP ensures Authentication, Integrity, Confidentiality and Non Repudiation, achieves Identity protection from merchant and Eavesdropper, achieves Transaction privacy from Eavesdropper and Payment Gateway, achieves Payment Secrecy, Order Secrecy, forward secrecy, and prevents Double Spending, Overspending and Money laundering. In addition to these SOMMP withstands Replay, Man in the Middle and Impersonation attacks. The security properties of the proposed SOMMP protocol have been verified using BAN Logic, AVISPA and Scyther Tools and presented with results.<\/p>","DOI":"10.4018\/jisp.2012040105","type":"journal-article","created":{"date-parts":[[2012,12,11]],"date-time":"2012-12-11T11:39:14Z","timestamp":1355225954000},"page":"64-94","source":"Crossref","is-referenced-by-count":0,"title":["Secure and Optimized Mobile Based Merchant Payment Protocol using Signcryption"],"prefix":"10.4018","volume":"6","author":[{"given":"Shaik Shakeel","family":"Ahamad","sequence":"first","affiliation":[{"name":"Institute for Development and Research in Banking Technology and University of Hyderabad, India"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"V. N.","family":"Sastry","sequence":"additional","affiliation":[{"name":"Institute for Development and Research in Banking Technology and University of Hyderabad, India"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Siba K.","family":"Udgata","sequence":"additional","affiliation":[{"name":"Institute for Development and Research in Banking Technology and University of Hyderabad, India"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"2432","reference":[{"key":"jisp.2012040105-0","doi-asserted-by":"crossref","unstructured":"Armando, A., Basin, D., Boichut, Y., Chevalier, Y., Compagna, L., Cuellar, J., et al. (2005). The AVISPA tool for the automated validation of Internet security protocols and applications. In K. Etessami & S. K. Rajamani (Eds.), Proceedings of the 17th International Conference on Computer Aided Verification (LNCS 3576, pp. 281-285).","DOI":"10.1007\/11513988_27"},{"key":"jisp.2012040105-1","doi-asserted-by":"publisher","DOI":"10.1049\/ip-com:20010511"},{"issue":"1-2","key":"jisp.2012040105-2","first-page":"1","article-title":"Hardware architectures for public key cryptography.","volume":"34","author":"L.Batina","year":"2003","journal-title":"Integration the Very Large System Integration Journal"},{"key":"jisp.2012040105-3","unstructured":"Blanchet, B. (2009). An efficient cryptographic protocol verifier based on prolog rules. In Proceedings of the 14th IEEE Computer Security Foundations Workshop, Cape Breton, NS, Canada (pp. 82-96)."},{"key":"jisp.2012040105-4","doi-asserted-by":"publisher","DOI":"10.1098\/rspa.1989.0125"},{"key":"jisp.2012040105-5","doi-asserted-by":"publisher","DOI":"10.1145\/77648.77649"},{"key":"jisp.2012040105-6","unstructured":"Buyya, R., Ma, T., Safavi-Naini, R., Steketee, C., & Susilo, W. (2006, January 16-19). Formal analysis of card-based payment systems in mobile devices. In Proceedings of the Fourth Australasian Symposium on Grid Computing and e-Research and the Fourth Australasian Information Security Workshop on Network Security, Hobart, Tasmania, Australia (pp. 213-220)."},{"key":"jisp.2012040105-7","doi-asserted-by":"publisher","DOI":"10.1002\/dac.1158"},{"key":"jisp.2012040105-8","unstructured":"Cremers, C. J. F. (2006). Scyther-semantics and verification of security protocols (Unpublished doctoral dissertation). Eindhoven University of Technology, Eindhoven, The Netherlands."},{"key":"jisp.2012040105-9","unstructured":"Cremers, C. J. F., & Lafourcade, P. (2007). Comparing state spaces in automatic security protocol verification. In Proceedings of the 7th International Work-shop on Automated Verification of Critical Systems (pp. 49-63)."},{"key":"jisp.2012040105-10","doi-asserted-by":"publisher","DOI":"10.1016\/S0164-1212(00)00072-8"},{"key":"jisp.2012040105-11","doi-asserted-by":"publisher","DOI":"10.1016\/j.amc.2004.06.124"},{"key":"jisp.2012040105-12","doi-asserted-by":"crossref","unstructured":"Muhammad, S., Furqan, Z., & Guha, R. K. (2006, March). Understanding the intruder through attacks on cryptographic protocols. In Proceedings of the 44th ACM Southeast Conference (pp. 667-672).","DOI":"10.1145\/1185448.1185594"},{"key":"jisp.2012040105-13","doi-asserted-by":"publisher","DOI":"10.1504\/IJITST.2007.014834"},{"key":"jisp.2012040105-14","doi-asserted-by":"publisher","DOI":"10.1145\/24592.24593"},{"key":"jisp.2012040105-15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-17878-8_42"},{"key":"jisp.2012040105-16","doi-asserted-by":"crossref","unstructured":"Song, D. (1999). Athena: A new efficient automatic checker for security protocol analysis. In Proceedings of the 12th IEEE Computer Security Foundations Workshop (pp. 192-202).","DOI":"10.1109\/CSFW.1999.779773"},{"key":"jisp.2012040105-17","doi-asserted-by":"crossref","unstructured":"Syverson, P. F., & Cervesato, I. (2001). The logic of authentication protocols. In R. Focardi & R. Gorrieri (Eds.), Tutorial Lectures on Foundations of Security Analysis and Design, Bertinoro, Italy (LNCS 2171, pp. 63-136).","DOI":"10.1007\/3-540-45608-2_2"},{"key":"jisp.2012040105-18","doi-asserted-by":"crossref","unstructured":"Syverson, P. F., & Oorschot, P. C. V. (1994, August). On unifying some cryptographic protocol logics. In Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA (pp. 14-28).","DOI":"10.21236\/ADA465512"},{"key":"jisp.2012040105-19","unstructured":"T\u00e9llez, J., & Sierra, J. (2007a). A secure payment protocol for restricted connectivity scenarios in M-commerce. In Proceedings of the 8th International Conference on E-commerce and Web Technologies (pp. 1-10)."},{"key":"jisp.2012040105-20","doi-asserted-by":"crossref","unstructured":"T\u00e9llez, J., & Sierra, J. (2007b). An anonymous account-based mobile payment protocol for a restricted connectivity scenario. In Proceedings of the 18th International Workshop on Database and Expert Systems Applications (pp. 688-692).","DOI":"10.1109\/DEXA.2007.132"},{"key":"jisp.2012040105-21","doi-asserted-by":"crossref","unstructured":"T\u00e9llez, J., & Sierra, J. (2007c). Anonymous payment in a client centric model for digital ecosystems. In Proceedings of the Inaugural IEEE International Conference on Digital Ecosystems and Technologies (pp. 422-427).","DOI":"10.1109\/DEST.2007.372011"},{"key":"jisp.2012040105-22","doi-asserted-by":"crossref","unstructured":"T\u00e9llez, J., Sierra, J., Izquierdo, A., & Carbonell, M. (2006a). Payment in a kiosk centric model with mobile and low computational power devices. In Proceedings of the International Conference on Computational Science and its Applications, Part V (pp. 798-807).","DOI":"10.1007\/11751649_88"},{"issue":"2","key":"jisp.2012040105-23","doi-asserted-by":"crossref","first-page":"1","DOI":"10.3390\/jtaer1020009","article-title":"Anonymous payment in a Kiosk centric model using digital signature scheme with message recovery and low computational power devices.","volume":"1","author":"J.T\u00e9llez","year":"2006","journal-title":"Journal of Theoretical and Applied Electronic Commerce Research"},{"key":"jisp.2012040105-24","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2008.03.012"},{"key":"jisp.2012040105-25","doi-asserted-by":"publisher","DOI":"10.1016\/S0096-3003(02)00010-3"}],"container-title":["International Journal of Information Security and Privacy"],"original-title":[],"language":"ng","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=68822","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,23]],"date-time":"2025-04-23T10:29:42Z","timestamp":1745404182000},"score":1,"resource":{"primary":{"URL":"https:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/jisp.2012040105"}},"subtitle":[""],"short-title":[],"issued":{"date-parts":[[2012,4,1]]},"references-count":26,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2012,4]]}},"URL":"https:\/\/doi.org\/10.4018\/jisp.2012040105","relation":{},"ISSN":["1930-1650","1930-1669"],"issn-type":[{"value":"1930-1650","type":"print"},{"value":"1930-1669","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,4,1]]}}}