Peer to Peer Mobile Payment System with Biometric Authentication

Abstract

A secured payment system using facial authentication is designed and built in this project. In this secure payment system, payments are authenticated. The transaction cannot be controlled or faked by attackers. Facial authentication is applied to ensure the authenticity of the system.

Modern facial recognition usually relies on microcontrollers, such as proximity sensor and infrared camera to increase accuracy and reduce the risk of a spoofing attack. The necessity of microsensors becomes a barrier to popular facial authentication because not every electronic device is installed with those sensors. Therefore, the project's primary focus is to develop a way to implement secure facial authentication without the aid of microsensors.

Second, data confidentiality is another big concern in E-Payment. We cannot bear the risk that cardholders’ data, such as PAN and CVV, are stolen during the payment process. Therefore, modern cryptography for online payment, payment tokenization, takes place in this project. Other than the authenticity of the system, the underlying payment data are also protected.

Ultimately, a payment system that ensures payment authenticity and protects data confidentiality is produced in this project. The facial authentication only relies on the front camera. Then a combination of head pose detection and 2-factor authentication is applied to ensure the liveness of the facial authentication. Last but not least, custom payment tokenization that follows the industrial standard is designed and implemented to provide advanced confidentiality of payment data.