Secure mCommerce Service Discovery via NFC Smartphones and Tags: "TagBuddy"

职务名称：通过NFC智能手机和标签进行安全的移动商务服务发现："TagBuddy"许多移动的商务（mCommerce）解决方案只关注单个服务或用户如何为服务付费。在这样做的过程中，他们错过了一个重要的初步步骤：安全地发现可信服务。例如，在日常生活中，所有类型和能力的用户都需要以他们可以信任的方式轻松找到与其需求相关的服务。TagBuddy允许将标签放置在对象上，然后使用移动的电话安全地访问标签，提供可信的信息和上下文、位置、用户和设备感知的服务发现。理想的标签是通过近场通信（NFC *）手机访问的射频识别（RFID），然而TagBuddy也支持基于摄像头阅读二维条形码（QR码）的过渡模式。已部署的解决方案主要由附加到对象的标签、下载到用户智能手机的应用程序和后端服务器组成。现有的标签/移动的解决方案已被证明容易受到修改、滥用和欺诈;将用户误导到成人和赌博网站、犯罪溢价服务或假冒网络钓鱼网站。然而，TagBuddy有一个有效的安全解决方案，基于标签，电话和后台，这对用户是透明的。TagBuddy应该代表一种可信赖的、最简单/直观的访问服务的方式，特别是那些在指向服务提供商URL后可以通过手机浏览器访问的服务。基于标签访问发现的服务提供商、服务和/或信息是动态选择的，因此结果类似于由标签访问触发的Google搜索。结果应与请求的一般内容相匹配，但是，所提供的服务和服务提供商也可以基于商业标准，允许服务提供商为优先选择支付费用的模式。此外，通过使用在标签访问期间收集的信息，服务提供商向用户呈现服务的方式可以在语言、符号、音频和对用户的电话设备的适用性方面完全定制。第一阶段项目是采用Crisp Telecom Limited现有的功能解决方案（用于其他目的），整合已确定的安全措施（打击安全攻击和欺诈），添加对额外智能手机操作系统的支持（展示多平台包容性），结合动态服务选择引擎（以实现商业模式）并进行一次小型试验，演示多语言/符号和音频/视频服务演示（以显示用户包容性）。主要目标是充分展示安全产品的能力，以便找到商业合作伙伴/许可证持有人来推动产品发挥其全部潜力。* NFC是一种短距离（几厘米）无线接口技术，允许移动的手机模拟非接触式智能卡和RFID，或作为读写器设备访问非接触式智能卡和RFID。还有一种点对点模式，使两部手机在非常接近的情况下进行通信。

Title: Secure mCommerce Service Discovery via NFC Smartphones and Tags: "TagBuddy" Many mobile commerce (mCommerce) solutions just focus on individual services or how users pay for services. In doing so, they miss out on a vital preliminary step; the secure discovery of trusted services. For example, in their normal day-to-day lives, users of all types and capabilities need to easily find the services that are relevant to their needs in a way that they can trust. TagBuddy allows tags to be placed on objects and then be securely accessed using a mobile phone, providing trusted information and service discovery that is context, location, user and device aware. The tags are ideally Radio Frequency Identifiers (RFID) accessed via Near Field Communication (NFC*) phones, however TagBuddy also supports a transitional mode based on camera reading of two-dimensional bar codes (QR-codes). The deployed solution consists primarily of the tags attached to objects, an application downloaded to the user's smart phone and a back-end server. Existing tag/mobile solutions have been shown to be vulnerable to modification, misuse and fraud; misdirecting users to adult and gambling sites, to criminal premium rate services, or to fake phishing sites. However, TagBuddy has an effective security solution based on the tags, phone and back-office, which is transparent to the user. TagBuddy should come to represent a trusted and most simple/intuitive way for accessing services, and in particular those that are accessible via the phone browser after direction to a service provider URL. The service provider, service and/or information that are discovered based on tag access, are dynamically chosen and so the result is analogous to a Google search triggered by the tag access. The result should match the general context of the request, however, the offered service and service provider may also be based on business criteria, permitting a model where service providers pay a fee for preferential selection. Furthermore, the way in which the service is presented to the user by the service provider can be fully customised in terms of language, symbols, audio and suitability for the user's phone device, using information gathered during the tag access. The Phase 1 project is to take an existing functional solution from Crisp Telecom Limited (that is being used for another purpose), integrate the identified security measures (to combat security attacks and fraud), add support for an additional smart phone OS (to show multi-platform inclusivity), incorporate a dynamic service selection engine (to enable the business model) and carry out a small trial demonstrating multi-lingual/symbol and audio/visual service presentation (to show user inclusivity). The primary goal is too fully demonstrate the secure product capability so that a commercial partner/licensee will be found to drive the product towards its full potential. *NFC is a short range (few cm) wireless interface technology that allows mobile phones to emulate contactless smart cards and RFIDs, or to behave as the reader/writer devices for accessing contactless smart cards and RFIDs. There is also a peer-to-peer mode that enables two phones to communicate when in very close proximity.