New Security Protocols for Offline Point-of-Sale Machines - Archive ouverte HAL
Communication Dans Un Congrès Année : 2022

New Security Protocols for Offline Point-of-Sale Machines

Emmanuel Bertin
  • Fonction : Auteur
  • PersonId : 976697
Mohamad Badra
  • Fonction : Auteur
  • PersonId : 1079690
Guy Pujolle

Résumé

EMV (Europay MasterCard Visa) is the protocol implemented to secure the communication between a client's payment device and a Point-of-Sale machine during a contact or an NFC (Near Field Communication) purchase transaction. In several studies, researchers have analyzed the operation of this protocol in order to verify its safety: unfortunately, they have identified two security vulnerabilities that lead to multiple attacks and dangerous risks threatening both clients and merchants. In this paper, we are interested in proposing new security solutions that aim to overcome the two dangerous EMV vulnerabilities. Our solutions address the case of Point-of-Sale machines that do not have access to the banking network and are therefore in the "offline" connectivity mode. We verify the accuracy of our proposals by using the Scyther security verification tool.
Fichier principal
Vignette du fichier
Final_Version (AINA_2022).pdf (2.48 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03559193 , version 1 (06-02-2022)

Identifiants

Citer

Nour El Madhoun, Emmanuel Bertin, Mohamad Badra, Guy Pujolle. New Security Protocols for Offline Point-of-Sale Machines. The 36th International Conference on Advanced Information Networking and Applications (AINA 2022), Apr 2022, Sydney, Australia. pp.446-467, ⟨10.1007/978-3-030-99587-4_38⟩. ⟨hal-03559193⟩
105 Consultations
386 Téléchargements

Altmetric

Partager

More