Edinburgh Napier University

  Comcarde is developing a mobile payments system called Bridge that uses a patent pending algorithm which is extremely resilient to man-in-the-middle attacks. Combined with strong authentication, we believe that Bridge improves significantly on existing security mechanisms.

Comcarde is looking to commission an independent study by Edinburgh Napier to examine this in more detail as follows:
- Analyse Bridge’s architecture and comment on its strengths and weaknesses.
- Suggest measures, both quantitative and qualitative, that could be used to compare and contrast with different payment systems.
- Use the measures to evaluate Bridge versus a “card-not-present” and “card present” style architecture.
- Comment as to where the risk lies in each of these systems.
- Suggest improvements to Bridge’s architecture assuming attack vectors are found.
- If time remains, compare with other mobile payment technologies using the defined metrics.