ElasticPay：印度理工学院印多尔分校开发的新型离线数字支付系统

ElasticPay 是一种点对点离线数字支付系统，它使用三个关键组件：可信平台模块 (TPM)、可信执行环境 (TEE) 和安全元件 (SE)，以确保您的资金安全发送或接收，即使在您没有连接到互联网。

People traditionally used paper money to purchase items. With the advent of the digital age, transactions shifted online, allowing users to pay for goods and services using credit cards, smartphone applications, or online banking. However, these systems rely on the internet to connect a buyer's bank with the seller's bank to facilitate the transfer of funds.

人们传统上使用纸币购买物品。随着数字时代的到来，交易转移到网上，用户可以使用信用卡、智能手机应用程序或网上银行支付商品和服务费用。然而，这些系统依靠互联网将买方银行与卖方银行连接起来以促进资金转移。

To address the need for a secure and efficient offline digital payment system, researchers from the Indian Institute of Technology (IIT) Indore have developed a new system called ElasticPay. This system aims to enhance the ease and security of digital payments, even in the absence of an internet connection.

为了满足对安全、高效的离线数字支付系统的需求，印度理工学院 (IIT) 印多尔的研究人员开发了一种名为 ElasticPay 的新系统。该系统旨在提高数字支付的便利性和安全性，即使在没有互联网连接的情况下也是如此。

ElasticPay functions as a peer-to-peer offline digital payment system, utilizing three key components to ensure secure transactions. Trusted Platform Modules (TPMs) serve as digital vaults, securely storing critical information. Trusted Execution Environments (TEEs) create a protected space within a user's device, enabling sensitive operations to occur without being monitored by other components. Finally, Secure Elements (SEs) are chips that handle secure transactions and store important keys. ElasticPay combines these technologies to ensure the safe transfer or receipt of funds, even without an internet connection.

ElasticPay 充当点对点离线数字支付系统，利用三个关键组件来确保安全交易。可信平台模块 (TPM) 充当数字保管库，安全地存储关键信息。可信执行环境 (TEE) 在用户设备内创建一个受保护的空间，使敏感操作能够在不受其他组件监控的情况下进行。最后，安全元件（SE）是处理安全交易和存储重要密钥的芯片。 ElasticPay 结合了这些技术，即使没有互联网连接也能确保资金的安全转移或接收。

ElasticPay facilitates direct payments from one smartphone to another. When a user wishes to make a payment, ElasticPay generates a special token, akin to a digital check, which contains the transaction amount, recipient details, and a digital signature. This signature prevents any modifications to the token without rendering it invalid. ElasticPay ensures that each token can only be used once, preventing individuals from attempting to spend the same funds multiple times. Additionally, transaction details remain private throughout the process, ensuring data privacy and security.

ElasticPay 促进从一部智能手机到另一部智能手机的直接付款。当用户希望付款时，ElasticPay 会生成一个特殊的令牌，类似于数字支票，其中包含交易金额、收件人详细信息和数字签名。此签名可防止对令牌进行任何修改，而不会使其无效。 ElasticPay 确保每个代币只能使用一次，从而防止个人尝试多次使用相同的资金。此外，交易细节在整个过程中保持私密，确保数据隐私和安全。

Other key features of ElasticPay include:

ElasticPay 的其他主要功能包括：

Double Spending Protection: ElasticPay ensures each transaction is processed securely on a trusted device, preventing the use of the same payment token for multiple transactions. The token's cryptographic signature makes it tamper-proof, safeguarding against misuse or redirection of funds.

双重支出保护：ElasticPay 确保每笔交易都在受信任的设备上安全处理，从而防止在多个交易中使用相同的支付令牌。代币的加密签名使其防篡改，防止资金被滥用或重定向。

Replay Attack Prevention: The system detects and prevents the unauthorized reuse of a valid token by checking its usage history in both the sender's and receiver's Trusted Execution Environments (TEEs) and at the bank server.

重放攻击预防：系统通过检查发送者和接收者的可信执行环境 (TEE) 以及银行服务器中的使用历史记录来检测并防止未经授权地重复使用有效令牌。

Forgery Prevention: ElasticPay requires users to have digital certificates issued by an authoritative entity, ensuring that identities are verified and cannot be falsely assumed or replicated.

防伪：ElasticPay要求用户拥有权威机构颁发的数字证书，确保身份得到验证，不能被假冒或复制。

Non-Repudiation: Transactions are confirmed through digital signatures and explicit consent, ensuring that participants cannot deny their involvement, thus securing accountability and traceability.

不可否认性：交易通过数字签名和明确同意进行确认，确保参与者无法否认其参与，从而确保问责性和可追溯性。

Side-Channel Attack Prevention: The system uses TEEs and Secure Elements (SEs) to prevent the leakage of external information and protect against side-channel attacks.

侧通道攻击防护：系统通过TEE和SE（Secure Elements）来防止外部信息泄露，防止侧通道攻击。

Mitigation of Man-in-the-Middle Attacks: All communications are encrypted using advanced cryptographic protocols, thwarting interception or alteration of messages.

减轻中间人攻击：所有通信均使用高级加密协议进行加密，阻止消息被拦截或更改。

Hardware Control Attack Resilience: Comprehensive encryption measures protect against unauthorized access to application data, even if hardware manipulation is attempted.

硬件控制攻击弹性：全面的加密措施可防止未经授权的应用程序数据访问，即使尝试硬件操作也是如此。

Software Control Attack Defense: Secure boot processes with TPM technology to authenticate software integrity, preventing compromised software from executing.

软件控制攻击防御：使用 TPM 技术保护启动过程，以验证软件完整性，防止受感染的软件执行。

Privacy Preservation in Transactions: Only essential information is shared during transactions, minimizing the exposure of private data and maintaining user privacy.

交易隐私保护：交易过程中仅共享必要信息，最大限度减少私人数据暴露，维护用户隐私。

Recovery from Transaction Failures: The system provides mechanisms for retransmission or invalidation and regeneration of tokens in case of transaction failures, ensuring transaction integrity.

交易失败恢复：系统提供交易失败时代币重传或失效、再生的机制，保证交易完整性。

These features collectively ensure that ElasticPay offers secure, private, and reliable offline digital transactions, addressing key challenges in digital payment systems. The team, however, acknowledges limitations like fund inaccessibility during offline transactions and the sequential processing of transactions (processing multiple requests at the same time) and is working on addressing these.

这些功能共同确保 ElasticPay 提供安全、私密且可靠的离线数字交易，解决数字支付系统中的关键挑战。然而，该团队承认离线交易期间资金无法访问以及交易的顺序处理（同时处理多个请求）等限制，并正在努力解决这些问题。

As India transitions towards a digital economy, the heavy reliance on internet connectivity for digital transactions poses a barrier, especially in rural and remote areas where network access is inconsistent or absent. ElasticPay offers a viable solution to this challenge by enabling secure and private offline digital transactions. This system can significantly enhance financial inclusion, allowing individuals in underbanked and underserved regions to participate in the digital economy without the prerequisite of stable internet connectivity. By facilitating offline transactions, ElasticPay ensures that digital financial services are accessible to a broader population, bridging the digital divide and supporting the government's efforts to create a more inclusive financial ecosystem.

随着印度向数字经济转型，数字交易对互联网连接的严重依赖构成了障碍，特别是在网络访问不一致或缺乏的农村和偏远地区。 ElasticPay 通过支持安全且私密的离线数字交易，为这一挑战提供了可行的解决方案。该系统可以显着增强金融包容性，允许银行服务不足和服务不足地区的个人在没有稳定互联网连接的前提下参与数字经济。通过促进线下交易，ElasticPay确保更广泛的人群能够获得数字金融服务，弥合数字鸿沟并支持政府创建更具包容性的金融生态系统的努力。

This research news was partly generated using artificial intelligence and edited by an editor at Research Matters

该研究新闻部分是使用人工智能生成的，并由 Research Matters 的编辑编辑