Secure mCommerce Service Discovery via NFC Smartphones and Tags: "TagBuddy"

标题：通过NFC智能手机和标签进行安全移动商务服务发现：“TagBuddy”许多移动商务（mCommerce）解决方案只关注个人服务或用户如何支付服务。在这样做的过程中，他们错过了至关重要的初步步骤；安全发现受信任的服务。例如，在日常生活中，所有类型和功能的用户都需要以他们可以信任的方式轻松地找到与他们的需求相关的服务。TagBuddy允许将标签放置在对象上，然后使用移动电话安全地访问，提供上下文、位置、用户和设备感知的可信信息和服务发现。标签是理想的射频识别（RFID），通过近场通信（NFC*）手机访问，然而TagBuddy也支持基于摄像头读取二维条形码（qr码）的过渡模式。部署的解决方案主要由附加到对象的标签、下载到用户智能手机的应用程序和后端服务器组成。现有的标签/移动解决方案已被证明易受修改、滥用和欺诈的影响；误导用户到成人和赌博网站，犯罪溢价服务，或假冒的网络钓鱼网站。但是TagBuddy有一个基于标签、电话和后台的有效的安全解决方案，对用户是透明的。TagBuddy应该代表一种受信任的、最简单/直观的访问服务的方式，特别是那些在指向服务提供者URL后可以通过电话浏览器访问的服务。基于标记访问发现的服务提供者、服务和/或信息是动态选择的，因此结果类似于由标记访问触发的谷歌搜索。结果应该与请求的一般上下文相匹配，但是，所提供的服务和服务提供者也可以基于业务标准，从而允许服务提供者为优先选择支付费用的模型。此外，服务提供商向用户提供服务的方式可以在语言、符号、音频和用户电话设备的适用性方面完全定制，使用在标签访问期间收集的信息。第一阶段项目是采用Crisp Telecom Limited现有的功能解决方案（用于其他目的），集成已确定的安全措施（以打击安全攻击和欺诈），增加对额外智能手机操作系统的支持（以显示多平台包容性），加入动态服务选择引擎（使业务模式可行），并进行小型试验，演示多语言/符号和音频/视频服务演示（以显示用户包容性）。主要目标是充分展示安全的产品功能，以便找到商业合作伙伴/被许可人来推动产品发挥其全部潜力。*NFC是一种短距离（几厘米）无线接口技术，允许移动电话模拟非接触式智能卡和射频识别，或者作为读取/写入设备访问非接触式智能卡和射频识别。还有一个点对点模式，可以让两部手机在非常接近的情况下进行通信。

Title: Secure mCommerce Service Discovery via NFC Smartphones and Tags: "TagBuddy" Many mobile commerce (mCommerce) solutions just focus on individual services or how users pay for services. In doing so, they miss out on a vital preliminary step; the secure discovery of trusted services. For example, in their normal day-to-day lives, users of all types and capabilities need to easily find the services that are relevant to their needs in a way that they can trust. TagBuddy allows tags to be placed on objects and then be securely accessed using a mobile phone, providing trusted information and service discovery that is context, location, user and device aware. The tags are ideally Radio Frequency Identifiers (RFID) accessed via Near Field Communication (NFC*) phones, however TagBuddy also supports a transitional mode based on camera reading of two-dimensional bar codes (QR-codes). The deployed solution consists primarily of the tags attached to objects, an application downloaded to the user's smart phone and a back-end server. Existing tag/mobile solutions have been shown to be vulnerable to modification, misuse and fraud; misdirecting users to adult and gambling sites, to criminal premium rate services, or to fake phishing sites. However, TagBuddy has an effective security solution based on the tags, phone and back-office, which is transparent to the user. TagBuddy should come to represent a trusted and most simple/intuitive way for accessing services, and in particular those that are accessible via the phone browser after direction to a service provider URL. The service provider, service and/or information that are discovered based on tag access, are dynamically chosen and so the result is analogous to a Google search triggered by the tag access. The result should match the general context of the request, however, the offered service and service provider may also be based on business criteria, permitting a model where service providers pay a fee for preferential selection. Furthermore, the way in which the service is presented to the user by the service provider can be fully customised in terms of language, symbols, audio and suitability for the user's phone device, using information gathered during the tag access. The Phase 1 project is to take an existing functional solution from Crisp Telecom Limited (that is being used for another purpose), integrate the identified security measures (to combat security attacks and fraud), add support for an additional smart phone OS (to show multi-platform inclusivity), incorporate a dynamic service selection engine (to enable the business model) and carry out a small trial demonstrating multi-lingual/symbol and audio/visual service presentation (to show user inclusivity). The primary goal is too fully demonstrate the secure product capability so that a commercial partner/licensee will be found to drive the product towards its full potential. *NFC is a short range (few cm) wireless interface technology that allows mobile phones to emulate contactless smart cards and RFIDs, or to behave as the reader/writer devices for accessing contactless smart cards and RFIDs. There is also a peer-to-peer mode that enables two phones to communicate when in very close proximity.