통합인증센터를 활용한 일회용 가상카드번호 생성 및 결제 서비스 프로토콜
One-Time Virtual Card Number Generation & Transaction Protocol using Integrated Authentication Center
0
조회
0
다운로드
6
인용
0
참고문헌
키워드
초록
Recently, famous online shopping websites were hit by hacking attack, and many users' personal information such as ID, password, account number, personal number, credit card number etc. were compromised. Hackers are continuing to attack online shopping websites, and the number of victims of these hacking is increasing. Especially, the exposure of credit card numbers is dangerous, because hackers maliciously use disclosed card numbers to gain money. In 2007 Financial Cryptography Conference, Ian Molly et al. firstly proposed dynamic card number generator, but it doesn't meet reuse resistant. In this paper, we analyzed security weaknesses of Ian Molly's scheme, and we proposed a new one-time virtual card number generator using a mobile device which meets security requirements of one-time virtual card numbers. Then, we propose one-time credit card number generation and transaction protocol using Integrated Authentication Center for user convenience and security enhancement.
Abstract
Recently, famous online shopping websites were hit by hacking attack, and many users' personal information such as ID, password, account number, personal number, credit card number etc. were compromised. Hackers are continuing to attack online shopping websites, and the number of victims of these hacking is increasing. Especially, the exposure of credit card numbers is dangerous, because hackers maliciously use disclosed card numbers to gain money. In 2007 Financial Cryptography Conference, Ian Molly et al. firstly proposed dynamic card number generator, but it doesn't meet reuse resistant. In this paper, we analyzed security weaknesses of Ian Molly's scheme, and we proposed a new one-time virtual card number generator using a mobile device which meets security requirements of one-time virtual card numbers. Then, we propose one-time credit card number generation and transaction protocol using Integrated Authentication Center for user convenience and security enhancement.
참고문헌 (12)
- 서승현, "OTP 기술현황 및 국내 금융권 OTP 도입사례", 정보보호학회지, 17(3), pp.18~25 (2007)
- 세계일보, "신용카드 일련번호 규칙성 뚫렸다", 2007년 4월, ~
- 아시아경제, "옥션 해킹 피해자, 1081만명에 달해", 2008년 4월, ~ (2008)
- 연합뉴스, "1천만명 정보유출", 2008년 9월, ~ (2008)
- "신용카드", 위키백과[URL]
- 한국경제신문, "씨티銀 인터넷 뱅킹 해킹 사고‥카드 결제대행 보안 시스템 뚫어 ‘충격’", 2007년 2월, ~ (2007)
- M.Bellare, "Keying hash functions for message authentication", CRYPTO’96,LNCS 1109, pp.1~15 (1996)
- I.Molly, "Dynamic Virtual Credit Card Numbers", Financial Cryptography and Data Security,11th International Conference,FC 2007,LNCS 4886, pp.208~223 (2007)
- "Citi identity theft solutions:Virtual account numbers"[URL]
- "Discover card:Secure online account numbers"[URL]
- "ShopSafe Service: Safe Online Shopping from Bank of America"[URL]
- "PayPal Virtual Debit Card"[URL]