Leakage-Resistant Payment and Trusted Auditing Scheme for Mobile Banking: A Collaborative Application of ORAM and Blockchain

Abstract

The proliferation of mobile payments has brought about increasingly severe security challenges, including data breaches and identity forgery, which pose a significant threat to user assets and privacy. To meet the stringent security requirements of China’s multi-level protection scheme (MLPS) level 3 for financial systems, this study proposes an innovative privacy-enhancing protection scheme for mobile banking payments. This scheme is designed to provide comprehensive security throughout the entire lifecycle, from payment authentication to subsequent auditing. Specifically, our solution introduces two core mechanisms: the privacy-preserving authentication (PPA) protocol, which ensures the privacy of user identities and transaction data during the payment process by combining the private data access characteristics of oblivious RAM (ORAM) with zero-knowledge proof technology; and the distributed ledger audit mechanism (DLAM), which utilizes the decentralized and immutable features of blockchain, supplemented by ORAM, to guarantee the integrity of system logs and the privacy of the auditing process.