EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication
In 2014, Yang proposed a method to enhance the current EMV credit card protocol (EPMAR). However, the protocol ignores the exceeding of a credit quota caused by multiple offline transactions, with the result that the amount spent can exceed the risk control scope. In this paper, we proposed an EMV-c...
Main Authors: | , |
---|---|
Format: | Article |
Language: | English |
Published: |
MDPI AG
2019-10-01
|
Series: | Sensors |
Subjects: | |
Online Access: | https://www.mdpi.com/1424-8220/19/21/4611 |
_version_ | 1828350976119013376 |
---|---|
author | Jia-Ning Luo Ming-Hour Yang |
author_facet | Jia-Ning Luo Ming-Hour Yang |
author_sort | Jia-Ning Luo |
collection | DOAJ |
description | In 2014, Yang proposed a method to enhance the current EMV credit card protocol (EPMAR). However, the protocol ignores the exceeding of a credit quota caused by multiple offline transactions, with the result that the amount spent can exceed the risk control scope. In this paper, we proposed an EMV-compatible offline mobile payment protocol with mutual authentication (EOPMA) to enhance EPMAR. In EOPMA, we use the reverse hash chain technique to guarantee the payment, which solves the problem of credit quotas getting exceeded because of multiple offline payments. During a transaction, in addition to payment for merchandise, an offline authorization certificate for the transaction is sent to the merchant. The merchant can verify the correctness of the transaction in real time. Our protocol is compatible with the EMV standard, which is applicable to the retail environment of numerous merchants and effectively, making EMV transactions more secure and reliable. We use numerical analysis to examine the security and performance of the protocols. We formally check the correctness of EOPMA by using the Gong−Needham−Yahalom logic. |
first_indexed | 2024-04-14T01:33:51Z |
format | Article |
id | doaj.art-5599e6ff70a74e43ae9ac884658f10fd |
institution | Directory Open Access Journal |
issn | 1424-8220 |
language | English |
last_indexed | 2024-04-14T01:33:51Z |
publishDate | 2019-10-01 |
publisher | MDPI AG |
record_format | Article |
series | Sensors |
spelling | doaj.art-5599e6ff70a74e43ae9ac884658f10fd2022-12-22T02:20:04ZengMDPI AGSensors1424-82202019-10-011921461110.3390/s19214611s19214611EMV-Compatible Offline Mobile Payment Protocol with Mutual AuthenticationJia-Ning Luo0Ming-Hour Yang1Department of Information and Telecommunications Engineering, Ming-Chuan University, Taoyuan 33350, TaiwanDepartment of Information and Computer Engineering, Chung Yuan Christian University, Taoyuan 32023, TaiwanIn 2014, Yang proposed a method to enhance the current EMV credit card protocol (EPMAR). However, the protocol ignores the exceeding of a credit quota caused by multiple offline transactions, with the result that the amount spent can exceed the risk control scope. In this paper, we proposed an EMV-compatible offline mobile payment protocol with mutual authentication (EOPMA) to enhance EPMAR. In EOPMA, we use the reverse hash chain technique to guarantee the payment, which solves the problem of credit quotas getting exceeded because of multiple offline payments. During a transaction, in addition to payment for merchandise, an offline authorization certificate for the transaction is sent to the merchant. The merchant can verify the correctness of the transaction in real time. Our protocol is compatible with the EMV standard, which is applicable to the retail environment of numerous merchants and effectively, making EMV transactions more secure and reliable. We use numerical analysis to examine the security and performance of the protocols. We formally check the correctness of EOPMA by using the Gong−Needham−Yahalom logic.https://www.mdpi.com/1424-8220/19/21/4611nfcemvmobile paymentreverse hash chain |
spellingShingle | Jia-Ning Luo Ming-Hour Yang EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication Sensors nfc emv mobile payment reverse hash chain |
title | EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication |
title_full | EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication |
title_fullStr | EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication |
title_full_unstemmed | EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication |
title_short | EMV-Compatible Offline Mobile Payment Protocol with Mutual Authentication |
title_sort | emv compatible offline mobile payment protocol with mutual authentication |
topic | nfc emv mobile payment reverse hash chain |
url | https://www.mdpi.com/1424-8220/19/21/4611 |
work_keys_str_mv | AT jianingluo emvcompatibleofflinemobilepaymentprotocolwithmutualauthentication AT minghouryang emvcompatibleofflinemobilepaymentprotocolwithmutualauthentication |