A Framework for Securing Electronic Payments via the Dual Channel Security Protocol

A major concern in e-payment systems is the privacy of user data. Recently, marketplaces have been utilizing point-of-sale terminals that use short-range communication for contactless payments. Such services primarily rely on the NearField Communication protocol. Previous works showed that this protocol is susceptible to many attacks such as eavesdropping, data corruption, and Man-in-the-middle. Dual Channel Security, or DCS, is one of the simplest and most efficient solutions that address the weaknesses inherent in protocols that employ an optical key agreement link. The main objective of DCS is to protect short-range communications against wireless attacks. In this paper, we describe a novel implementation of the DCS protocol and evaluate its effectiveness within a concrete ecommerce application. We utilize several algorithms to develop the proposed e-payment service. In addition, we describe the construction of the key exchanged between the devices using DCS, the use of P2P communication, and the socket.io technology that ensures data exchange between these devices.