A breakthrough for prepaid payment: End to end token exchange and management using secure SSL channels created by EAP-TLS smart cards

Abstract

In this paper we present an innovative architecture for prepaid services. Digital tokens are securely exchanged between EAP-TLS smart cards used both by merchant and customer. We describe the global framework that comprises a back-office server delivering tokens, a front-office server collecting tokens from merchant terminal, merchants and customers equipped with smart cards. We detail data exchange choreography and discuss performances issues for the experimental platform built with commercial devices.