Browse > Article
http://dx.doi.org/10.13089/JKIISC.2013.23.6.1007

A Study on Structural Vulnerability of MobilePhone Micropayment System And Improvement of Standard Payment Module for User Protection  

Park, Kwang Sun (Seoul Metropolitan Police Agency)
Lee, Sang-Jin (Center for Information Security Technologies, Korea University)
Abstract
The automatic payment process of mobile phone micropayment system has not checked user's authentication. That is the structural vulnerability of mobile phone micropayment system. The malicious contents provider can cheat users and payment gateway through abusing the structural vulnerability. The payment gateway applies standard payment module after August, 2012 in order to solve the problem. But the standard payment module also has the vulnerability that makes damage of users. So the purpose of this paper is to suggest efficient improvement of standard payment module for user protection.
Keywords
Mobile Phone Micropayment System; Standard Payment Module; Vulnerability;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Cho Yong Hyuk, Nam Kwang Woo, Jung Yun Hee, Yoon Doo Young, Kim Sun A, Korea Internet Law Society, Korea Communications Agency And Korea Communications Commision, A study on legal improvement for telecommunication-based payment service, Korea Communications Commission, Nov. 2010.
2 Kim Boo Hyun, "An Analysis of the Use of Cellular-phone's micro payment - The Actural Condition and its Problems," Master Thesis, Seoul National University, Feb. 2007.
3 Press release by Korea Communications Commission, "Korea Communications Commission, the announcement for the improvement plans of communication tariff service user protection," Mar 14. 2013.
4 Advice by Anti-corruption & Civil Rights Commission, "Improvement of the system to prevent small-amount payment victim," May. 2010.
5 Ryu Suk Il, A Study on Improvement for the Problem of Mobile Phone Micropayment System , Korea Consumer Agency, Sep. 2011.
6 Press release by Seoul Metropolitan Police Agency, "Exposure of the swindlers of 200 millionKorean won using small-amount of payment through a mobile phone without certification," Mar 18. 2013.
7 Press release by Fair Trade Commission, "Strengthen of consumers' payment security through compulsory verification of purchase safety service membership," Aug 7. 2012.
8 Press release by the Ministry of Science, ICT, and Future Planning, "Rapid increase of conflicts about small-amount payment using a mobile phone, such as downloading music and movies in 2012," May 16. 2013.