Provably unlinkable smart card-based payments
Bursuc, Sergiu and Horne, Ross and Mauw, Sjouke and Yurkov, Semen (2023) Provably unlinkable smart card-based payments. Other. arXiv, Ithaca, NY. (https://doi.org/10.48550/arXiv.2309.03128)
Preview |
Text.
Filename: Bursuc_etal_arXiv_2023_Provably_unlinkable_smart_card_based_payments.pdf
Final Published Version License: Download (1MB)| Preview |
Abstract
The most prevalent smart card-based payment method, EMV, currently offers no privacy to its users. Transaction details and the card number are sent in cleartext, enabling the profiling and tracking of cardholders. Since public awareness of privacy issues is growing and legislation, such as GDPR, is emerging, we believe it is necessary to investigate the possibility of making payments anonymous and unlinkable without compromising essential security guarantees and functional properties of EMV. This paper draws attention to trade-offs between functional and privacy requirements in the design of such a protocol. We present the UTX protocol - an enhanced payment protocol satisfying such requirements, and we formally certify key security and privacy properties using techniques based on the applied pi-calculus.
ORCID iDs
Bursuc, Sergiu, Horne, Ross ORCID: https://orcid.org/0000-0003-0162-1901, Mauw, Sjouke and Yurkov, Semen;-
-
Item type: Monograph(Other) ID code: 86881 Dates: DateEvent6 September 2023Published6 September 2023Published OnlineSubjects: Science > Mathematics > Electronic computers. Computer science Department: Faculty of Science > Computer and Information Sciences Depositing user: Pure Administrator Date deposited: 06 Oct 2023 12:51 Last modified: 01 Sep 2024 01:50 URI: https://strathprints.strath.ac.uk/id/eprint/86881