Secure Short Message Peer-to-Peer Protocol

Saurabh Samanta；Radhesh Mohandas；Alwyn R. Pais

SMS ； SMPP ； SMSC ； Secure SMPP

International Journal of Electronic Commerce Studies

3卷1期（2012 / 06 / 01）

45 - 60

英文

Short Message Service (SMS) has become an extension of our lives and plays an important role in daily chores. SMS is a popular medium for delivering Value Added Services and are suitable for mobile banking, payment reminders, SOS calls, stock and news alerts, railway and flight enquiries etc. These types of messages are normally computer generated messages sent over Short Message Peer-to-Peer (SMPP) protocol. SMPP is an application layer protocol to send messages over TCP/IP connection. SMPP protocol has no security measures specified which allows fast delivery of SMS messages in bulk. Compromised messages or loss of messages can cause lot of revenue loss and fatal consequences. A secure SMPP protocol is proposed and implemented by introducing Transport Layer Security (TLS) with SMPP protocol specifications. A client tool is developed to securely connect to the server. Secure Short Message Peer-to-Peer protocol will enhance the security of fast growing messaging and telecommunication world.

1. GSM 03.40 Technical realization of the Short Message Service (SMS), Retrieved on May 05, 2010, from http://www.3gpp.org/ftp/Specs/html-info/0340.htm.
2. Java Secure Socket Extension Reference Guide, Retrieved on May 20, 2010, from http://java.sun.com/j2se/1.4.2/docs/guide/security/jsse/JSSERefGuide.html#HowSSLWorks.
3. Short Message Service Center, Retrieved on May 17, 2010, from http://www.ozeki.hu/.
4. The SMS Forum, Retrieved on May 15, 2010, from http://www.smsforum.net.
5. Short Message Peer to Peer Protocol Specification v3.4, Retrieved on April 10, 2010, from http://www.smsforum.net.
6. SMPP Protocol, Open source, Retrieved on May 15, 2010, from http://opensmpp.logica.com/.
7. SMS Spoofing, Retrieved on May 20, 2010, from http://www.openmindnetworks.com/SMSSpoofing.asp.
8. Short Message Peer to Peer Protocol Specification v5.0, Retrieved on April 10, 2010, from http://www.smsforum.net.
9. Croft, NJ ,Olivier, MS(2007).A Silent SMS Denial of Service (DoS) Attack.Southern African Telecommunication Networks and Applications Conference 2007 (SATNAC 2007),Mauritius:
10. T. Dierks, and E. Rescorla, The Transport Layer Security (TLS) Protocol Version 1.1, RFC 4346. Retrieved on March 10, 2010, from http://www.ietf.org/rfc/rfc4346.txt.