A web transaction security scheme based on disposable credit card numbers

Authors:
Mohammed Assora;James Kadirire;Ayoub Shirvani
Affiliations:
Anglia Ruskin University, Chelmsford, Essex CM1 1LL, UK.;Anglia Ruskin University, Chelmsford, Essex CM1 1LL, UK.;Anglia Ruskin University, Chelmsford, Essex CM1 1LL, UK
Venue:
International Journal of Electronic Security and Digital Forensics
Year:
2007

Citing 4
Cited 1

Cryptography: Theory and Practice,Second Edition

Cryptography: Theory and Practice,Second Edition
SecureClick: A Web Payment System with Disposable Credit Card Numbers

FC '01 Proceedings of the 5th International Conference on Financial Cryptography
Off-Line Generation of Limited-Use Credit Card Numbers

FC '01 Proceedings of the 5th International Conference on Financial Cryptography
Securing credit card transactions with one-time payment scheme

Electronic Commerce Research and Applications

A pragmatic approach to temporary payment card numbers

International Journal of Electronic Security and Digital Forensics

Quantified Score

Hi-index	0.00

Visualization

Abstract

Today, an e-commerce transaction is performed by sending the client's credit card details over a SSL/TLS connection. This form of transaction raises many security threats. The most important one is the client authentication. Because the client normally does not have a public key certificate, the client's authentication is achieved only by the credit card details. In addition, these details are stored unencrypted in the merchant's database. A Disposable Credit Card Number (DCCN) is a technique to overcome these security threats. This paper presents a scheme for off-line generation of the DCCNs. The scheme uses a pre-shared secret key between the issuer and the client to generate Hashed Message Authentication Code for some selected data from the transaction. The scheme is secure and adds minimum overhead on the issuer and client. Furthermore, the generated DCCN has all the features of classical credit card details.