title: Security enhanced EMV-based mobile payment protocol.
abstract: Near field communication has enabled customers to put their credit cards into a smartphone and use the phone for credit card transaction. But EMV contactless payment allows unauthorized readers to access credit cards. Besides, in offline transaction, a merchant's reader cannot verify whether a card has been revoked. Therefore, we propose an EMV-compatible payment protocol to mitigate the transaction risk. And our modifications to the EMV standard are transparent to merchants and users. We also encrypt the communications between a card and a reader to prevent eavesdropping on sensitive data. The protocol is able to resist impersonation attacks and to avoid the security threats in EMV. In offline transactions, our scheme requires a user to apply for a temporary offline certificate in advance. With the certificate, banks no longer need to lower customer's credits for risk control, and users can have online-equivalent credits in offline transactions.
authors.affiliation: Department of Information & Computer Engineering, Chung Yuan Christian University, 200 Chung Pei Road, Chung Li, Taoyuan County 32023, Taiwan.
authors.forename: Ming-Hour
authors.identifier: 0000-0003-4773-7352
authors.initials: MH
authors.lastname: Yang
mesh_terms: D000067:Accounts Payable and Receivable; D000465:Algorithms; D016494:Computer Security; D003219:Confidentiality; D006801:Humans; D015233:Models, Statistical