New Security Protocols for Offline Point-of-Sale Machines - Archive ouverte HAL Access content directly
Conference Papers Year : 2022

New Security Protocols for Offline Point-of-Sale Machines

Emmanuel Bertin
  • Function : Author
  • PersonId : 976697
Mohamad Badra
  • Function : Author
  • PersonId : 1079690
Guy Pujolle

Abstract

EMV (Europay MasterCard Visa) is the protocol implemented to secure the communication between a client's payment device and a Point-of-Sale machine during a contact or an NFC (Near Field Communication) purchase transaction. In several studies, researchers have analyzed the operation of this protocol in order to verify its safety: unfortunately, they have identified two security vulnerabilities that lead to multiple attacks and dangerous risks threatening both clients and merchants. In this paper, we are interested in proposing new security solutions that aim to overcome the two dangerous EMV vulnerabilities. Our solutions address the case of Point-of-Sale machines that do not have access to the banking network and are therefore in the "offline" connectivity mode. We verify the accuracy of our proposals by using the Scyther security verification tool.
Fichier principal
Vignette du fichier
Final_Version (AINA_2022).pdf (2.48 Mo) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03559193 , version 1 (06-02-2022)

Identifiers

Cite

Nour El Madhoun, Emmanuel Bertin, Mohamad Badra, Guy Pujolle. New Security Protocols for Offline Point-of-Sale Machines. The 36th International Conference on Advanced Information Networking and Applications (AINA 2022), Apr 2022, Sydney, Australia. pp.446-467, ⟨10.1007/978-3-030-99587-4_38⟩. ⟨hal-03559193⟩
70 View
321 Download

Altmetric

Share

Gmail Mastodon Facebook X LinkedIn More