Audio from the session at OSCON (Portland, OR) on July 22nd, 2015 is available at https://archive.org/details/protecting_future_mobile_payments We are now in an age where more people have phones than toilets, and there are more active cell phones than people on the planet. How do we protect all of these devices as they’re roaming around unsecured locations, especially when we want to pay for something. In this talk we’re going to rip apart the illusion of mobile security and explore some of the most difficult to secure experiences: payments. We’ll cover the concepts of building a rich feature set to protect the user, how to encrypt all interactions, building scalable trust zones, and extending identification with wearables and biometrics.

1. Protecting the Future
of Mobile Payments
Jonathan LeBlanc (@jcleblanc)
Head of Global Developer Advocacy (PayPal / Braintree)

2. The Concept of the
Invisible Application
twitter: @jcleblanc | hashtag: #OSCON

3. twitter: @jcleblanc | hashtag: #OSCON
The Makeup of an App

4. What about Payments?
twitter: @jcleblanc | hashtag: #OSCON

5. Securing User Data
twitter: @jcleblanc | hashtag: #OSCON

6. Identity Protection
twitter: @jcleblanc | hashtag: #OSCON

7. Task Management
twitter: @jcleblanc | hashtag: #OSCON

8. Securing Data in an
Unsecure Environment
twitter: @jcleblanc | hashtag: #OSCON

9. Ease of Payment
Location Security
Variable Environments
Shifting Locations
twitter: @jcleblanc | hashtag: #OSCON
Main Issues

10. Start by Hardening
Your Data
twitter: @jcleblanc | hashtag: #OSCON

11. twitter: @jcleblanc | hashtag: #OSCON
Properly Encrypting
Personal Information

12. Goal: Add Hurdles to Slow
Down Decryption
twitter: @jcleblanc | hashtag: #OSCON

13. Understanding Usage
Irregularities
twitter: @jcleblanc | hashtag: #OSCON

14. Establishing Trust Zones
twitter: @jcleblanc | hashtag: #OSCON

15. Location Awareness
Habit Awareness
Browser Uniqueness
Device Fingerprinting
twitter: @jcleblanc | hashtag: #OSCON
There’s More to it

16. twitter: @jcleblanc | hashtag: #OSCON
Location Awareness

17. twitter: @jcleblanc | hashtag: #OSCON
Browser Uniqueness
https://panopticlick.eff.org/

18. twitter: @jcleblanc | hashtag: #OSCON
Device Fingerprinting

19. twitter: @jcleblanc | hashtag: #OSCON
Variable Authentication

20. twitter: @jcleblanc | hashtag: #OSCON
Irregular Usage Spikes

21. How to Increase Usability
Using Buying Habits?
twitter: @jcleblanc | hashtag: #OSCON

22. Lastly, Look at Ways to Pair
with Other Data Sources
twitter: @jcleblanc | hashtag: #OSCON

23. twitter: @jcleblanc | hashtag: #OSCON
Wearables as Unique
Hardware Identifiers

24. twitter: @jcleblanc | hashtag: #OSCON
Extending the Operating
System Further

25. Simplifying the Experience
twitter: @jcleblanc | hashtag: #OSCON

26. Thank you!
http://slideshare.net/jcleblanc
Jonathan LeBlanc (@jcleblanc)
Head of Global Developer Advocacy (PayPal / Braintree)