行動票券應用之研究

A Study of Mobile Ticket Applications

莊仕祺(Shih-Chi Chuang)

指導教授 ： 薛夙珍

朝陽科技大學/資訊學院/資訊管理系/碩士(2010年)

摘要

豐富多樣的行動商務改變了日常生活的方式，尤其是能免除排隊困擾的行動票券應用，讓行動用戶可在任意時間或地點享有適地性的行動加值服務。由於行動票券是具有時效性之有價數位產品，若行動用戶因故無法使用票券時，通常必須將票券退票或移轉予他人使用，但行動用戶卻也因而必須承擔退票之手續費，或因自行移轉而衍生之重複兌現的問題。因此，本論文針對行動票券移轉議題作深入探討，運用數位權利管理(Digital Rights Management，DRM)之概念，設計出具安全性且可移轉之行動票券協定。協定中，行動用戶從不同的可信任個體分別取得票券內容與使用權，其中由權利物件(Rights Object，RO)所控管之使用權，是藉以防止行動票券之重複兌現；並且透過一次性密碼機制來驗證行動用戶之身份，以防止惡意使用者違法取得行動票券。
此外，當行動用戶使用同類型票券的頻率很高時，卻因現有之行動票券設計多以單次購買使用為原則，無法提供類似實體票券中月票或套票等型式之票券服務，每次都必須進行購買的程序。為能提昇經常性使用行動票券之行動用戶的便利性與彈性，本論文以一次購買多次使用之行動套票協定為另一研究主題。以數位權利管理分權概念，將行動套票分為使用權及所有權，讓行動用戶不但可擁有使用行動套票的便利性，也可輕易地將行動套票分享給其他的行動用戶。在所提出的行動票券協定中，亦加強了安全保護機制，讓行動用戶可安全地購買、兌現及移轉票券。

關鍵字

行動商務 ； 資訊安全 ； 數位權利管理 ； 行動票券

並列摘要

The increasingly matured mobile commerce enriches our daily lives. Mobile ticketing, a process that allows consumers to order, make payment, acquire, and authenticate tickets using their mobile phones, will become popular since it can be conducted from anywhere and at anytime. In the study, we discuss the mobile traffic tickets that are frequently used, and utilize the concept of Digital Rights Management (DRM) to design secure, transferable, and convenient mobile ticketing.
Mobile tickets generally have deadlines. If a mobile user cannot use the mobile ticket for certain reasons, the ticket should be refundable and transferable before expiration. Nevertheless, current schemes restrict mobile tickets to be non-transferable because any transferring will result in the ticket being invalidated. To overcome the non-transferability problem, we propose a transferrable mobile ticketing scheme, using the idea of digital rights managements to separate the content and the usage-rules of mobile tickets. A usage-rule, i.e. the rights object of a ticket, registers a ticket’s identification and a hashed number comprising an issuer’s random number and the International Mobile Equipment Identity (IMEI) of the ticket owner. The rights object is independently issued by a trusted third party. When a ticket is transferred, the issuer will be notified. The issuer then will modify the rights object with a new hash value, computed from a new random number and the IMEI of the new owner who receives the transferred ticket. Therefore, mobile tickets are secured
and transferrable in our proposed mobile ticketing scheme.
In addition, most mobile ticketing schemes require only one ticket can be purchased and used. Such a restriction is inconvenient for the purchase of multiple or periodical tickets such as monthly tickets because similar ticket purchasing must be repeated many times. Therefore, we design a scheme that supports multiple-purchase-at-one-time. The ownership and the usage-rules of mobile tickets are separated in our scheme to protect the mobile ticket. The ownership, i.e. the rights object of the ticket, manages the ticket owner. The usage-rule, i.e. the usage object of the ticket, regulates the ticket usage. Mobile users may easily transfer valid mobile tickets to others. In this study, we develop a secure mobile ticketing mechanism to protect mobile tickets while providing maximum user convenience. Mobile users may order, redeem, and transfer mobile tickets securely. Therefore, this study enhances the convenience and flexibility for the usage of mobile tickets.

並列關鍵字

information security ； digital rights management ； mobile ticket ； mobile commerce

參考文獻

[3] 鄭仁傑主編(2005)，數位智慧財產權管理，財團法人國家實驗研究院科

[8] 洪偉程(2009)，基於OMA DRM2.0規範的數位版權管理架構之實現，

[12] T. Bouchard, M. Hémon, F. Gagnon, V. Gravel, and O. Munger (2008), “Mobile Telephones Used as Boarding Passes：Enabling Technologies and Experimental Results,” Proceedings of the IEEE International Conference on Autonomic and Autonomous Systems, pp. 255-259.

[13] C. C. Chang, C. Y. Lee, and Y. C. Chiu (2009), “Enhanced Authentication

Scheme with Anonymity for Roaming Service in Global Mobility