Misrepresentation Versatile Device for offline Micro-payoffs (MDoMP)
Loading...
Files
Date
2019-06-28T07:02:56Z
Authors
Journal Title
Journal ISSN
Volume Title
Publisher
Abstract
Credit and debit card data theft is one of the earliest forms of cybercrime. Still, it is one of the most common nowadays. Attackers often aim at stealing such customer data by targeting the Point of Sale (for short, PoS) system, i.e. the point at which a retailer first acquires customer data. Modern PoS systems are powerful computers equipped with a card reader and running specialized software. Increasingly often, user devices are leveraged as input to the PoS. In these scenarios, malware that can steal card data as soon as they are read by the device has flourished. As such, in cases where customer and vendor are persistently or intermittently disconnected from the network, no secure on-line payment is possible. This paper describes MDoMP, a secure off-line micro-payment solution that is resilient to PoS data breaches. Our solution improves over up to date approaches in terms of flexibility and security. To the best of our knowledge, MDoMP is the first solution that can provide secure fully off-line payments while being resilient to all currently known PoS breaches. In particular, we detail MDoMP architecture, components, and protocols. Further, a thorough analysis of MDoMP functional and security properties is provided, showing its effectiveness and viability.
Description
Keywords
1NH16MCA01