Towards more secure EMV purchase transactions - Archive ouverte HAL
Article Dans Une Revue Annals of Telecommunications - annales des télécommunications Année : 2021

Towards more secure EMV purchase transactions

Résumé

EMV is the protocol implemented to secure the communication, between a client’s payment device and a merchant’s payment device, during a contact or an NFC purchase transaction. It represents a set of security messages and rules, exchanged between the different transaction actors, guaranteeing several important security properties, such as authentication, non-repudiation and integrity. Indeed, researchers, in various studies, have analyzed the operation of this protocol in order to verify its safety: unfortunately, they have identified two security vulnerabilities that lead to multiple attacks and dangerous risks threatening both clients and merchants. In this paper, we are firstly interested in presenting a general overview of the EMV protocol and secondly, in proposing a new security solution that enhances the EMV protocol by solving the two dangerous EMV vulnerabilities. We verify the accuracy of our solution by using the Scyther security verification tool.
Fichier non déposé

Dates et versions

hal-03981012 , version 1 (09-02-2023)

Identifiants

Citer

Nour El Madhoun, Emmanuel Bertin, Mohamad Badra, Guy Pujolle. Towards more secure EMV purchase transactions. Annals of Telecommunications - annales des télécommunications, 2021, 76 (3-4), pp.203-222. ⟨10.1007/s12243-020-00784-1⟩. ⟨hal-03981012⟩
77 Consultations
0 Téléchargements

Altmetric

Partager

More