EMV96的潜在缺陷和改进意见  

Some Potential Defects in EMV96 and Improvement Advice

作　　者：沈炜[1] 陈纯[2] 

机构地区：[1]浙江大学计算机系,浙江杭州310027 [2]浙江大学信雅达计算机信息安全研究中心,浙江杭州310027

出　　处：《电子学报》2002年第5期731-733,共3页Acta Electronica Sinica

摘　　要：EMV96是Europay、MasterCard、Visa提出的目前具有代表性的IC卡交易规范 .相当多的IC卡交易系统和规范都建立EMV96的基础之上 .本文系统地分析了EMV96的交易协议中的安全机制 ,得出EMV96用以实现应用的一些重要安全性假设 ;进一步分析表明 :EMV96的一些假设使得EMV96不能很好地满足交易的四个条件 ,在不改变交易流程的前提下 ,针对EMV96的潜在缺陷 。EMV96 is a representative IC card payment specification presented by Europay,MasterCard and Visa.Many IC card payment schemes are implemented based on it.In this paper,we analyze the security mechanism of payment protocols of EMV96 and put forward some assumptions based on which EMV96 sets up its payment application.Further analysis shows that EMV96 can't satisfy secure payment based on those assumptions.Finally,we present our improvement advice without modifying the flow of application.

关 键 词：EMV96 IC卡 支付协议 

分 类 号：TN915.04[电子电信—通信与信息系统]