EMV-based Offline Payment with Multiple cards

• Main Authors: wei-che Li, 李維哲
• Other Authors: Ming-Hour Yang
• Format: Others
• Language: zh-TW
• Published: 2015
• Online Access: http://ndltd.ncl.edu.tw/handle/29531251876263138573

碩士 === 中原大學 === 資訊工程研究所 === 103 === EMV is a most generic standard of current credit cards that contains several security crises. In 2014, Yang et al. proposed an EMV-base offline payment protocol on NFC-phone (EPMAR), which focus on solving the mutual authentication problem of EMV standards. However, EPMAR suppose the user only owns a single credit card; can be only used in a single-card environment, EPMAR didn''t consider that user have multiple cards. If a user wants to do offline payments with multiple cards, the user needs to apply multiple offline certificates from different banks one-by-one, which may exceed the EMV transaction time limitation. In this paper we propose an EMV-based Offline Payment with Multiple cards (EOPMC) protocol, to improve the weakness of EPMAR. In EOPMC, the user must register himself to a trust service manager (TSM) to get a virtual token. The virtual token is stored in the secure element of a user’s NFC-phone. The user uses the virtual token to apply offline certificates of all credit cards from the TSM. In our proposed protocol, the user can get the offline certificates of all the credit cards from a TSM in a single transaction to fit the restriction of the EMV protocol. When the user performs transactions with a merchant, the user needs to send the offline certificates to the merchant. The merchant does not need to verify these certificates from the issuer banks of the specific credit card online.