EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication

In 2014, Yang proposed a method to enhance the current EMV credit card protocol (EPMAR). However, the protocol ignores the exceeding of a credit quota caused by multiple offline transactions, with the result that the amount spent can exceed the risk control scope. In this paper, we proposed an EMV-c...

Full description

Bibliographic Details
Main Authors: Jia-Ning Luo, Ming-Hour Yang
Format: Article
Language:English
Published: MDPI AG 2019-10-01
Series:Sensors
Subjects:
Online Access:https://www.mdpi.com/1424-8220/19/21/4611
_version_ 1828350976119013376
author Jia-Ning Luo
Ming-Hour Yang
author_facet Jia-Ning Luo
Ming-Hour Yang
author_sort Jia-Ning Luo
collection DOAJ
description In 2014, Yang proposed a method to enhance the current EMV credit card protocol (EPMAR). However, the protocol ignores the exceeding of a credit quota caused by multiple offline transactions, with the result that the amount spent can exceed the risk control scope. In this paper, we proposed an EMV-compatible offline mobile payment protocol with mutual authentication (EOPMA) to enhance EPMAR. In EOPMA, we use the reverse hash chain technique to guarantee the payment, which solves the problem of credit quotas getting exceeded because of multiple offline payments. During a transaction, in addition to payment for merchandise, an offline authorization certificate for the transaction is sent to the merchant. The merchant can verify the correctness of the transaction in real time. Our protocol is compatible with the EMV standard, which is applicable to the retail environment of numerous merchants and effectively, making EMV transactions more secure and reliable. We use numerical analysis to examine the security and performance of the protocols. We formally check the correctness of EOPMA by using the Gong−Needham−Yahalom logic.
first_indexed 2024-04-14T01:33:51Z
format Article
id doaj.art-5599e6ff70a74e43ae9ac884658f10fd
institution Directory Open Access Journal
issn 1424-8220
language English
last_indexed 2024-04-14T01:33:51Z
publishDate 2019-10-01
publisher MDPI AG
record_format Article
series Sensors
spelling doaj.art-5599e6ff70a74e43ae9ac884658f10fd2022-12-22T02:20:04ZengMDPI AGSensors1424-82202019-10-011921461110.3390/s19214611s19214611EMV-Compatible Offline Mobile Payment Protocol with Mutual AuthenticationJia-Ning Luo0Ming-Hour Yang1Department of Information and Telecommunications Engineering, Ming-Chuan University, Taoyuan 33350, TaiwanDepartment of Information and Computer Engineering, Chung Yuan Christian University, Taoyuan 32023, TaiwanIn 2014, Yang proposed a method to enhance the current EMV credit card protocol (EPMAR). However, the protocol ignores the exceeding of a credit quota caused by multiple offline transactions, with the result that the amount spent can exceed the risk control scope. In this paper, we proposed an EMV-compatible offline mobile payment protocol with mutual authentication (EOPMA) to enhance EPMAR. In EOPMA, we use the reverse hash chain technique to guarantee the payment, which solves the problem of credit quotas getting exceeded because of multiple offline payments. During a transaction, in addition to payment for merchandise, an offline authorization certificate for the transaction is sent to the merchant. The merchant can verify the correctness of the transaction in real time. Our protocol is compatible with the EMV standard, which is applicable to the retail environment of numerous merchants and effectively, making EMV transactions more secure and reliable. We use numerical analysis to examine the security and performance of the protocols. We formally check the correctness of EOPMA by using the Gong−Needham−Yahalom logic.https://www.mdpi.com/1424-8220/19/21/4611nfcemvmobile paymentreverse hash chain
spellingShingle Jia-Ning Luo
Ming-Hour Yang
EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication
Sensors
nfc
emv
mobile payment
reverse hash chain
title EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication
title_full EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication
title_fullStr EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication
title_full_unstemmed EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication
title_short EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication
title_sort emv compatible offline mobile payment protocol with mutual authentication
topic nfc
emv
mobile payment
reverse hash chain
url https://www.mdpi.com/1424-8220/19/21/4611
work_keys_str_mv AT jianingluo emvcompatibleofflinemobilepaymentprotocolwithmutualauthentication
AT minghouryang emvcompatibleofflinemobilepaymentprotocolwithmutualauthentication