{"title":"A Context-Aware Secure Two-Tier Account-Based Retail Central Bank Digital Currency Framework: A Case Study of Tanzania","authors":"Godbless Gibson Minja, Anael Elikana Sam, Devotha Godfrey Nyambo","doi":"10.1049/ise2/3917324","DOIUrl":null,"url":null,"abstract":"<p>Central bank digital currencies (CBDCs) are increasingly being explored as a means to enhance financial inclusion, reduce transaction costs and modernise payment systems. However, their design and implementation pose significant challenges, particularly in emerging economies such as Tanzania, where security risks, infrastructural constraints and interoperability issues persist in the digital financial services (DFS) ecosystem. This study proposes a context-aware, secure, two-tier, account-based retail CBDC framework for Tanzania, developed using the design science research (DSR) methodology. Furthermore, the proposed framework is structured around the access, service, asset and platform (ASAP) model and integrates the security-by-design principles, including zero-trust architecture, defence-in-depth and cryptographic agility. It further incorporates context-aware considerations, such as interoperability with existing mobile money systems, tiered know-your-customer mechanisms for financial inclusion, and support for connectivity and usability constraints. Moreover, the framework is demonstrated and evaluated using objective-based, security-oriented and contextual assessments. The evaluation indicated that the framework promises to provide a coherent and practical approach for the design of secure, interoperable and inclusive CBDC systems. This study contributes a prescriptive and contextually grounded CBDC design framework that offers both academic value and practical guidance for CBDC implementation in Tanzania and similar emerging economies.</p>","PeriodicalId":50380,"journal":{"name":"IET Information Security","volume":"2026 1","pages":""},"PeriodicalIF":2.0000,"publicationDate":"2026-07-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1049/ise2/3917324","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IET Information Security","FirstCategoryId":"94","ListUrlMain":"https://onlinelibrary.wiley.com/doi/10.1049/ise2/3917324","RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0
Abstract
Central bank digital currencies (CBDCs) are increasingly being explored as a means to enhance financial inclusion, reduce transaction costs and modernise payment systems. However, their design and implementation pose significant challenges, particularly in emerging economies such as Tanzania, where security risks, infrastructural constraints and interoperability issues persist in the digital financial services (DFS) ecosystem. This study proposes a context-aware, secure, two-tier, account-based retail CBDC framework for Tanzania, developed using the design science research (DSR) methodology. Furthermore, the proposed framework is structured around the access, service, asset and platform (ASAP) model and integrates the security-by-design principles, including zero-trust architecture, defence-in-depth and cryptographic agility. It further incorporates context-aware considerations, such as interoperability with existing mobile money systems, tiered know-your-customer mechanisms for financial inclusion, and support for connectivity and usability constraints. Moreover, the framework is demonstrated and evaluated using objective-based, security-oriented and contextual assessments. The evaluation indicated that the framework promises to provide a coherent and practical approach for the design of secure, interoperable and inclusive CBDC systems. This study contributes a prescriptive and contextually grounded CBDC design framework that offers both academic value and practical guidance for CBDC implementation in Tanzania and similar emerging economies.
期刊介绍:
IET Information Security publishes original research papers in the following areas of information security and cryptography. Submitting authors should specify clearly in their covering statement the area into which their paper falls.
Scope:
Access Control and Database Security
Ad-Hoc Network Aspects
Anonymity and E-Voting
Authentication
Block Ciphers and Hash Functions
Blockchain, Bitcoin (Technical aspects only)
Broadcast Encryption and Traitor Tracing
Combinatorial Aspects
Covert Channels and Information Flow
Critical Infrastructures
Cryptanalysis
Dependability
Digital Rights Management
Digital Signature Schemes
Digital Steganography
Economic Aspects of Information Security
Elliptic Curve Cryptography and Number Theory
Embedded Systems Aspects
Embedded Systems Security and Forensics
Financial Cryptography
Firewall Security
Formal Methods and Security Verification
Human Aspects
Information Warfare and Survivability
Intrusion Detection
Java and XML Security
Key Distribution
Key Management
Malware
Multi-Party Computation and Threshold Cryptography
Peer-to-peer Security
PKIs
Public-Key and Hybrid Encryption
Quantum Cryptography
Risks of using Computers
Robust Networks
Secret Sharing
Secure Electronic Commerce
Software Obfuscation
Stream Ciphers
Trust Models
Watermarking and Fingerprinting
Special Issues. Current Call for Papers:
Security on Mobile and IoT devices - https://digital-library.theiet.org/files/IET_IFS_SMID_CFP.pdf