The document discusses mobile commerce (m-commerce), including its infrastructure, applications, payment methods, limitations, and security issues. It covers topics such as wireless networks, mobile devices, m-commerce applications in various industries, and the use of technologies like WAP, Bluetooth, and mobile payment. Key security challenges addressed are related to the open nature of wireless networks, scripting vulnerabilities, and privacy concerns from location tracking.

1. Mobile Commerce CMSC 466/666 UMBC

17. Classes of M-Commerce Applications

32. Payment via Internet Payment Provider WAP GW/Proxy SSL tunnel MeP GSM Security SMS-C Browsing (negotiation) Mobile Wallet CC/Bank IPP User Merchant

33. Payment via integrated Payment Server WAP GW/Proxy ISO8583 Based CP Mobile Commerce Server GSM Security SMS-C Browsing (negotiation) CC/Bank Mobile Wallet Voice PrePaid VPP IF SSL tunnel User Merchant

40. Security in M-Commerce: Environment WAP1.2(WIM) (SIM) Operator centric model CA Bank (FI) Merchant Shopping Content Aggregation Internet SAT GW WAP GW Mobile Network Mobile Bank WAP1.1(+SIM where avail.) Security and Payment Mobile e-Commerce Server Mobile IP Service ProviderNetwork

41. WAP Architecture Web Server Content CGI Scripts etc. WML Decks with WML-Script WAP Gateway WML Encoder WMLScript Compiler Protocol Adapters Client WML WML-Script WTAI Etc. HTTP WSP/WTP

42. Comparison between Internet and WAP technologies HTML JavaScript HTTP TLS - SSL TCP/IP UDP/IP Wireless Application Protocol Wireless Application Environment (WAE) Session Layer (WSP) Security Layer (WTLS) Transport Layer (WDP) Other Services and Applications Transaction Layer (WTP) SMS USSD CSD IS-136 CDMA CDPD PDC-P Etc.. Bearers: