Professional Documents
Culture Documents
Overview
What is M-Commerce?
Security Issues Usability Issues Heterogeneity Issues Business Model Issues Case Studies / Examples
What is M-Commerce?
E-Commerce with mobile devices (PDAs, Cell Phones, Pagers, etc.) Different than E-Commerce? No, but additional challenges:
Security Usability Heterogeneous Technologies Business Model Issues
Wireless Technologies
Link Layer (examples)
WAN:
Analog / AMPS CDPD: Cellular Digital Packet Data TDMA/GSM: Time Division Multiple Access, Global System for Mobile Communications (Europe) CDMA: Code Division Multiple Access Mobitex (TDMA-based) LAN: 802.11 Bluetooth
WAP/WML, HDML: Openwave iMode (HTML): NTT DoCoMo Web Clipping: Palm.net XHTML: W3C Voice-browser based: VoiceXML: W3C Client-side: J2ME: Java 2 Micro Edition (Sun) WMLScript: Openwave Messaging: SMS: Part of GSM Spec.
Example: WAP
WAP: Wireless Application Protocol Created by WAP Forum Founded June 1997 by Ericsson, Motorola, Nokia, Phone.com 500+ member companies Goal: Bring Internet content to wireless devices WTLS: Wireless Transport Layer Security
Internet
WAP Gateway
Security Challenges
Less processing power on devices
Slow Modular exponentiation and Primality Checking (i.e.,
Less memory (keys, certs, etc. require storage) Few devices have crypto accelerators, or support for
biometric authentication No tamper resistance (memory can be tampered with, no secure storage) Primitive operating systems w/ no support for access control (Palm OS)
well do an example: should we use RSA or ECC for WTLS mutual auth?
Control: WAP Gap
Authentication: Public-Key Crypto (CPU intensive!!!) Privacy: Symmetric Crypto Data Integrity: MACs
Mutual-Authentication: RSA
Operation Cryptographic Primitive(s) Time (ms) Required
RSA Signature Verification (Public decrypt, e=3) RSA Encryption encrypt) (Public
598
622
Client Authentication
21734
TOTAL
22954
Mutual-Authentication: ECC
Operation Server Certificate Verification Cryptographic Primitive(s) CA Public Key Expansion ECC-DSA Signature Verification Server Public Key Expansion Key Agreement ECC-DSA Signature Generation Time Required (ms) 254.8 1254 254.8 335.6 514.8 2614
The cryptographic execution time for mutually-authenticated 163-bit ECC handshakes is at least 8.64 times as fast as the cryptographic execution time for mutually-authenticated 1024-bit RSA handshakes on the Palm VII.
Operator
WAP Gateway
Internet
WAP Gateway
SSL
Web Server
Usability Challenges
Hard Data Entry
Poor Handwriting Recognition Numeric Keypads for text entry is error-prone Poor Voice Recognition
Small Screens
i.e., cant show users everything in shopping cart at
once!
Usability Approaches
Graffiti (Scaled-down handwriting recognition, Palm devices) T9 Text Input (Word completion, most cell phones) Full alphanumeric keypad & scrollbar (Blackberry) Restricted VoiceXML grammars for better voice recognition Careful task-based Graphical User Interface & Dialog Design Lots of room for improvement!
Heterogeneity Challenges
Many link layer protocols (different security available in each) Many application layer standards Businesses need to write to one or more standards or hire a company to help them! Many device types:
Many operating systems (Palm OS, Win CE, Symbian,
Heterogeneity Approaches
HTML/Web screen scraping
Protocol & Mark-up language translators Standardization
Trust issues between banks, carriers, and portals Lack of content / services
Case Studies
NTT DoCoMos I-Mode
Palm.net
Palm.Net
Low 100K users in USA Web Clipping (specialized HTML) microbrowser on Mobitex (TDMA) based network run by BellSouth (>98% coverage in urban areas) 100s of content sites (typically no charge for applications) Palm VII devices now selling for $100 due to user adoption problems. (Service plans range from $10 - $40 per month.)
THANK YOU
By SARTHAK SINGH BBS 1ST YEAR 8339