Sigurnosna analiza beskontaktnih sustava plaćanja

professional thesis

• Title (english): Security analysis of contactless payment systems
• Author: Iva Musić
• Mentor: Mario Kovač (mentor)
• Committee member: Hrvoje Mlinarić (predsjednik povjerenstva)
• Committee member: Mario Kovač (član povjerenstva)
• Committee member: Željko Hocenski (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; (Department of Control and Computer Engineering); Zagreb
• Defense date and country: 2017, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Beskontaktni sustavi plaćanja kao sredstvo plaćanja koriste bankovne kartice s magnetnom trakom, čip kartice, ali i privjeske za ključeve, naljepnice i pametne mobitele. Tehnologija koja omogućava beskontaktno plaćanje je komunikacija bliskog polja (NFC). Za unapređenje sigurnosti plaćanja, pri plaćanju čip karticom ili pametnim mobitelom, koristi se EMV standard koji se koristi i pri kontaktnom plaćanju. EMV koristi napredne metode provjere vlasnika kartice, autentikaciju podataka, te kriptografiju za sigurnije transakcije. Za plaćanje pomoću pametnog telefona koriste se dva osnovna pristupa: sigurni element, te emulacija kartice. Pristup pomoću sigurnog elementa koristi čip poput onoga platne EMV kartice, dok se plaćanje pomoću emulacije kartice može koristiti na neizmjenjenim pametnim telefonima, ali je manje siguran od pristupa sa sigurnim elementom. Za smanjenje utjecaja prijevare uvodi se tokenizacija. Tokenizacija je proces zamjene osjetljivih podataka s tokenom s ograničenom mogućnosti upotrebe.

Abstract (english)

Contactless payment systems use magnetic stripe cards, smart cards, as well as key fobs, stickers and smart phones. The technology that supports contactless payment is Near Field Communication (NFC). To improve payment security, when smart card or smart phone is used, EMV standard is used as in contact payment. EMV combines advanced methods of cardholder verication, data authentication and cryptography for secure transactions. Mobile paymets use two basic approaches: secure element and host card emulation. Secure element approach uses a chip similar to an EMV payment card, while host card emulation payment can be used with unmodified smartphones, but is less secure than a secure element payment. To reduce the impact of fraud, tokenization is introduced. Tokenization is the process of replacing sensitive data with a token that has limited validity.

• Keywords: kartice; beskontaktno plaćanje; EMV; NFC; sigurni element; emulacija kartice; tokenizacija
• Keywords (english): cards; contactless; EMV; NFC; secure element; host card emulation; tokenization
• Language: croatian
• URN:NBN: urn:nbn:hr:168:927859
• Study programme: Title: Specialist study programme in information security; Study programme type: university; Study level: postgraduate specialist; Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2022-06-15 14:44:46