Application of an improved authentication protocol in mobile electronic payment

Identification and authentication is the foundation of electronic payment. In recent years, several authentication protocols are proposed, while most of them have some shortcomings. Ren-Junn Hwang put forward an inter-domain authentication protocol in 2005, which fits for mobile network. Although the protocol's security is proved with BAN logic, we can also find a few secure holes after some simulation attacks. In this paper, an improved protocol is given, which satisfies the above characters. Finally, the improved protocol is used to the electronic payment scheme proposed by Yong Zhao in which there is no authentication between user and arbitrage.