Nokia Launches Pay-By-Phone Service
adeelarshad82 writes "The world's top mobile phone maker, Nokia, said it would launch a mobile financial service next year targeting consumers, mainly in emerging markets, with a phone but no banking account. Nokia's Money service was based on the mobile payment platform of Obopay, a privately-owned firm that Nokia invested in earlier this year, and it is now building up a network of agents. Obopay, which uses text messaging and mobile Internet access, charges users a fee to send money or to top up their accounts."
Oh you mean in a similar way that O2 (a UK mobile company) started doing in the UK recently with their Cash Manager card?
O2 Cash Manager - "You load money onto the card, (using your phone or other methods) then whenever you use it you'll receive a free real time text alert. This will tell how much money you've loaded, spent or withdrawn, and how much you've got left. Simple."
Last time we were trying to push USSD based 'small payment system' in GSM networks, the Central Bank (of that country) launched an independent study which found that security practices in GSM networks were below standards to permit financial transactions. Cloning and some weaknesses in A3, A5 and A8 (and other algorithms/mechanisms) played major concerns.
TFA does not mention anything about security, but, I was wondering how exactly they would take care of this.
hilarious
Need? Who said anything about need? Look at the title again - "Nokia is launching..."
This is being launched on a phone because it's being launched by a company that makes phones.
Sure, this could all be done with a credit card and an RFID chip, but then Nokia wouldn't be launching it, would they? :)
Nokia wants your phone to be your phone, your Internet connection and email client, your camera, and now your wallet. The more functions they can put on a phone and have them generally accepted, the more people will need to carry them, and if this payment system is exclusive to Nokia phones you're more likely to buy one.
"This post contains words, known to the State of California to cause thought. Wash brain thoroughly after reading."
If proper certificates preinstalled on the phone and bank server by phone manufacturer, public key crypto shouldn't be vulnerable to man in the middle, and insecurity of GSM wouldn't matter. Nokia is exactly in position to do it.
GSM only authenticates one way, not both, so it is almost ideal setup for man in the middle attacks. One of the presentations at last year's CCC, the 25C3 covered this, but you can find plenty of older and newer material on it elsewhere.
Any GSM phone-based payment system has some big challenges. GPRS could be better, since you can then run something behind SSL or SSH. However, even then, when it comes to money, the designers must design the system on the assumption that the network is insecure, perhaps even the endpoints.
Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
.. here in Philippines.
I believed this service is far more successful in third world country. In some place there's no paypal or even
the concept of wire transfer is quite alien to them. it's easier to send money through sms than going to the
bank and depositing money to someone's account.