内容敏感的非主动性电子支付手段的技术可行性（英文）.pdf

Pers Ubiquit Comput (2017) 21:1113– 1125 DOI 10.1007/s00779-017-1035-z ORIGINAL ARTICLE Technical feasibility of context-aware passive payment authorization for physical points of sale Adam Wójtowicz 1 & Jacek Chmielewski 1 Published online: 17 June 2017 # The Author(s) 2017. This article is an open access publication Abstract In this work, the technical feasibility of passive 1 Introduction secure payments for brick-and-mortar points of sale is ana- lyzed. The core element of the proposed approach is a new In developed countries, payments in brick-and-mortar retail application for context-based risk and trust assessment. It al- stores are done mostly with smart cards. The most convenient lows for dynamic selection of payment authorization methods smart card payment method is contactless authorization. that constitutes accurate trade-off between security and con- However, this payment method has its drawbacks. First, it venience. Particularly, the payments can be performed and can be used only for small amounts; otherwise, knowledge- authorized in the background using biometric means (face based authorization is required. Second, the process still in- recognition), without user ’s explicit action. Generally, in the volves a number of steps: the seller indicates the ability to pay proposed approach, multiple devices are used for authoriza- using a payment terminal, the client finds her bag or wallet, tion: mobile, wearables, or stationary, client’s or seller’s, and the client draws the card, the client uses the card on the termi- multiple authorization methods are used: biometric, knowl- nal, and the client puts the card away. Since each of these edge-based, and possession-based. The reported research in- actions requires certain time and active commitment from