An online security protocol for NFC payment: Formally analyzed by the scyther tool

Madhoun, Nour El; Guenane, Fouad Amine; Pujolle, Guy

doi:10.1109/mobisecserv.2016.7440225

Cited by 24 publications

(16 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The properties and attacks of the security protocols were analysed with the help of a backward search algorithm method that provided a set of infinite pattern traces to approve the correctness of events by using the Scyther model checker [26] Proposed a new security protocol that was able to overcome the vulnerabilities found in the EMV protocol.…”

Section: Discussionmentioning

confidence: 99%

“…Finally, El-Madhoun et al [26] have proposed a new security protocol used in near field communication (NFC) payment systems instead of Europay Mastercard Visa (EMV) security protocols. The new security protocol helped to overcome the vulnerabilities found in the EMV protocol.…”

Section: ) Review Of the Selected Verification Approaches For Securimentioning

confidence: 99%

“…The tool can help the protocol to suspect and analysis any attacks that can occur and identify the protocol behaviour [40]. Moreover, El Madhoun et al [26] have verified a new proposed security protocol that was used in NFC payment systems instead of www.ijacsa.thesai.org Europay Mastercard Visa (EMV) security protocols. A model was built for the new protocol based on security protocol description language (SPDL) to input it into Scyther tool for verification purposes.…”

Section: Verification Toolsmentioning

confidence: 99%

See 2 more Smart Citations

A Review on the Verification Approaches and Tools used to Verify the Correctness of Security Algorithms and Protocols

Al-humaikani¹,

Rahim²

2019

IJACSA

View full text Add to dashboard Cite

Security algorithms and protocols are typical essential upgrades that must be involved within systems and their structures to provide the best performance. The protocols and systems should go through verification and testing processes in order to be more efficient and accurate. In the testing of software, traditional methods are used for accuracy check-up. However, this could not fulfill the measurement of all the testing requirements. The usage of formal verification approaches in checking security properties considers their best environment to be applied. The available literature discussed several approaches on developing the most robust formal verification methods for addressing and analyzing errors that face systems. This could be during the implantation process, unknown attacks, and nondeterministic adversary on the security protocols and algorithm. In this paper, a comprehensive review of the main formal verification approaches such as model checking and theorem approving has been conducted. Moreover, the use of verification tools was briefly presented and explained thoroughly. Those formal verification methods could be involved in the design, redesign of security protocols, and algorithms based on standards and determined sizes that is decided by these techniques' analysis. The critical analysis of the methods used in verifying the security of systems showed that model checking approaches and its tools were the most used approaches among all the reviewed methods.

show abstract

Section: Discussionmentioning

confidence: 99%

Section: ) Review Of the Selected Verification Approaches For Securimentioning

confidence: 99%

Section: Verification Toolsmentioning

confidence: 99%

See 1 more Smart Citation

A Review on the Verification Approaches and Tools used to Verify the Correctness of Security Algorithms and Protocols

Al-humaikani¹,

Rahim²

2019

IJACSA

View full text Add to dashboard Cite

show abstract

“…Nowadays, mobile payment methods are becoming more popular due to their convenience, time saving, and personalization. For example, Near-Field Communication (NFC) technology, a wireless proximity technology operating at 13.56 MHz [13] , is convenient for booking travel tickets. NFC technology offers several features for mobile handsets, such as hand-free charging and fast matching [7] .…”

Section: Related Workmentioning

confidence: 99%

Secure Authentication Protocol for Mobile Payment

Fan

Jiang

et al. 2018

Tsinghua Sci. Technol.

View full text Add to dashboard Cite

With the increasing popularity of fintech, i.e., financial technology, the e-commerce market has grown rapidly in the past decade, such that mobile devices enjoy unprecedented popularity and are playing an everincreasing role in e-commerce. This is especially true of mobile payments, which are attracting increasing attention.However, the occurrence of many traditional financial mishaps has exposed the challenges inherent in online authentication technology that is based on traditional modes of realizing the healthy and stable development of mobile payment. In addition, this technology ensures user account security and privacy. In this paper, we propose a Secure Mutual Authentication Protocol (SMAP) based on the Universal 2nd Factor (U2F) protocol for mobile payment. To guarantee reliable service, we use an asymmetric cryptosystem for achieving mutual authentication between the server and client, which can resist fake servers and forged terminals. Compared to the modes currently used, the proposed protocol strengthens the security of user account information as well as individual privacy throughout the mobile-payment transaction process. Practical application has proven the security and convenience of the proposed protocol.

show abstract

“…By using this payment, the customer has been allowed to transfer money to the merchant using the mobile device (Ukalkar, 2017). In addition, it can be used on transportation tokens/tickets in addition to access badges or keys to restricted locations (Thammarat and Kurutach, 2019;El Madhoun et al, 2016).…”

Section: Introductionmentioning

confidence: 99%

Design and Development of an Advanced Authentication Protocol for Mobile Applications using NFC Technology

Abouhogail¹,

Ali²

2019

Journal of Computer Science

View full text Add to dashboard Cite

In this paper, we proposed a new Authentication Protocol for Mobile Applications using NFC technology (AP for MAN). The proposed protocol minimizes the required time to complete the authentication process between the shared entities with a high level of privacy. According to the main security measures, the proposed protocol is evaluated. The current paper presents a new idea for preventing denial of service attack and preserves the limited mobile device capability. The proposed protocol is checked using BAN logic and established that it has no redundancy, the mutual authentication property between the shared parties is verified. The implementation of the proposed protocol shows that it works as designed and it is practical.

show abstract

An online security protocol for NFC payment: Formally analyzed by the scyther tool

Cited by 24 publications

References 16 publications

A Review on the Verification Approaches and Tools used to Verify the Correctness of Security Algorithms and Protocols

A Review on the Verification Approaches and Tools used to Verify the Correctness of Security Algorithms and Protocols

Secure Authentication Protocol for Mobile Payment

Design and Development of an Advanced Authentication Protocol for Mobile Applications using NFC Technology

Contact Info

Product

Resources

About