iKP – A Family of Secure Electronic Payment Protocols

 

Quantities for all iKP

TID      Transaction ID

desc     Goods description, delivery address, credit card name, bank id number, currency

CAN    customer account number – payment key, credit card number

CID     customer psuedo-ID, CID = hash(R_C, CAN)

Y/N     yes or no, or authorization code

PIN      customer to enhance security

V         random number generated in 2KP, 3KP for proof that merchant accepted payment

[x]        x is optional

E_A()     Public Encryption for A

S_A()      Private signing for A

SK_A       Signing key for A

PK_A       Public Encryption Key for A

 

1KP

 

Composite fields

common           price, ID_M, TID_M, date, N_M, CID, hash(desc, salt_C)

clear                 ID_M, TID_M, date, N_M, hash(common)

SLIP                price, hash(common), CAN, R_C, [PIN]

 

Starting info

C         desc, CAN, PK_CA, [PIN]

M         desc, PK_CA, CERT_A

A         SK_A, CERT_A

 

Protocol

Initiate:                         C -> M: salt_C, CID

Invoice:                        M -> C: ID_M, TID_M, date, N_M, hash(common)

Payment:                      C -> M: E_A(SLIP)

 Auth-Request:             M -> A: clear, hash(desc, salt_C), E_A(SLIP)

Auth-Response:            A -> M: Y/N, S_A(Y/N, hash(common))

Confirm:                       M -> A: Y/N, S_A(Y/N, hash(common))

 

2KP

 

Composite fields

common           price, ID_M, TID_M, date, N_M, CID, hash(desc, salt_C), hash(V)

clear                 ID_M, TID_M, date, N_M, hash(V), hash(common)

SLIP                price, hash(common), CAN, R_C

Sig_M                 S_M(hash(common), hash(v))

 

Starting info

C         desc, CAN, PK_CA

M         desc, PK_CA, CERT_A, SK_M, CERT_M

A         PK_A, SK_A, CERT_A

 

Protocol

Initiate:                         C -> M: salt_C, CID

Invoice:                        M -> C: ID_M, TID_M, date, N_M, hash(V), hash(common), Sig_M, CERT_M

Payment:                      C -> M: E_A(SLIP)

 Auth-Request:             M -> A: clear, hash(desc, salt_C), E_A(SLIP), Sig_M, CERT_M

Auth-Response:            A -> M: Y/N, S_A(Y/N, hash(common))

Confirm:                       M -> A: Y/N, V, S_A(Y/N, hash(common))

 

3KP

 

Composite fields

Same as 2KP plus

SigC                 S_C(E_A(SLIP), hash(common))

 

Starting info

C         desc, CAN, PK_CA, SK_C, CERT_C

M & A same as 2KP

 

Protocol

Initiate:                         C -> M: salt_C, CID, CERT_C

Invoice:                        M -> C: ID_M, TID_M, date, N_M, hash(V), hash(common), Sig_M

Payment:                      C -> M: E_A(SLIP), S_C(E_A(SLIP), hash(common))

 Auth-Request:             M -> A: clear, hash(desc, salt_C), E_A(SLIP), Sig_M, Sig_C

Auth-Response:            A -> M: Y/N, S_A(Y/N, hash(common))

Confirm:                       M -> A: Y/N, V, S_A(Y/N, hash(common))