UWSpace is currently experiencing technical difficulties resulting from its recent migration to a new version of its software. These technical issues are not affecting the submission and browse features of the site. UWaterloo community members may continue submitting items to UWSpace. We apologize for the inconvenience, and are actively working to resolve these technical issues.
 

SPP Secure Payment Protocol: Protocol Analysis, Implementation and Extensions

Simple item page
dc.contributor.authorKovan, Gerryen
dc.date.accessioned2006-08-22T14:22:42Z
dc.date.available2006-08-22T14:22:42Z
dc.date.issued2005en
dc.date.submitted2005en
dc.description.abstractInternet commerce continues to grow rapidly. Over 60% of US households use the internet to shop online. A secure payment protocol is required to support this rapid growth. A new payment protocol was recently invented at IBM. We refer to the protocol as SPP or Secure Payment Protocol. This thesis presents a protocol analysis of SPP. It is essential that a thorough security analysis be done on any new payment protocol so that we can better understand its security properties. We first develop a method for analyzing payment protocols. This method includes a list of desirable security features and a list of proofs that should be satisfied. We then present the results of the analysis. These results validate that the protocol does contain many security features and properties. They also help understand the security properties and identify areas where the protocol can be further secured. This led us to extend the design of the protocol to enhance its security. This thesis also presents a prototype implementation of SPP. Three software components were implemented. They are the Electronic Wallet component, the merchant software component and the Trusted Third Party component. The architecture and technologies that are required for implementation are discussed. The prototype is then used in performance measurement experiments. Results on system performance as a function of key size are presented. Finally, this thesis presents an extension of SPP to support a two buyer scenario. In this scenario one buyer makes an order while another buyer makes the payment. This scenario enables additional commerce services.en
dc.formatapplication/pdfen
dc.format.extent269171 bytes
dc.format.mimetypeapplication/pdf
dc.identifier.urihttp://hdl.handle.net/10012/1079
dc.language.isoenen
dc.pendingfalseen
dc.publisherUniversity of Waterlooen
dc.rightsCopyright: 2005, Kovan, Gerry. All rights reserved.en
dc.subjectComputer Scienceen
dc.subjectSecure Payment Protocolen
dc.subjectInternet Commerceen
dc.subjectPublic Key Cryptographyen
dc.subjectSSLen
dc.subjectDigital Signaturesen
dc.titleSPP Secure Payment Protocol: Protocol Analysis, Implementation and Extensionsen
dc.typeMaster Thesisen
uws-etd.degreeMaster of Mathematicsen
uws-etd.degree.departmentSchool of Computer Scienceen
uws.peerReviewStatusUnrevieweden
uws.scholarLevelGraduateen
uws.typeOfResourceTexten

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
gkovan2005.pdf
Size:
262.86 KB
Format:
Adobe Portable Document Format
Download

Collections

Theses
Computer Science