Security Enhancements in EMV Protocol for NFC Mobile Payment - Archive ouverte HAL Access content directly
Conference Papers Year : 2016

Security Enhancements in EMV Protocol for NFC Mobile Payment

Nour El Madhoun
Guy Pujolle

Abstract

Today, by integrating Near Field Communication (NFC) technology in smartphones, bank cards and payment terminals, a purchase transaction can be executed immediately without any physical contact, without entering a PIN code or a signature. Europay Mastercard Visa (EMV) is the standard dedicated for securing contactless-NFC payment transactions. However, it does not ensure two main security proprieties: (1) the authentication of the payment terminal to the client’s payment device, (2) the confidentiality of personal banking data. In this paper, we first of all detail EMV standard and its security vulnerabilities. Then, we propose a solution that enhances the EMV protocol by adding a new security layer aiming to solve EMV weaknesses. We formally check the correctness of the proposal using a security verification tool called Scyther.
Fichier principal
Vignette du fichier
PID4336321.pdf (1.59 Mo) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01340315 , version 1 (30-06-2016)

Identifiers

  • HAL Id : hal-01340315 , version 1

Cite

Nour El Madhoun, Guy Pujolle. Security Enhancements in EMV Protocol for NFC Mobile Payment. The 15th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom-16), Aug 2016, Tianjin, China. ⟨hal-01340315⟩
274 View
880 Download

Share

Gmail Facebook X LinkedIn More