J 2008

Authorizing Card Payments with PINs

MATYÁŠ, Václav; Daniel CVRČEK; Jan KRHOVJÁK a Marek KUMPOŠT

Základní údaje

Originální název

Authorizing Card Payments with PINs

Název česky

Autorizace platebních transakcí PINem

Vydání

Computer, Los Alamitos, IEEE Computer Society, 2008, 0018-9162

Další údaje

Jazyk

angličtina

Typ výsledku

Článek v odborném periodiku

Obor

10201 Computer sciences, information science, bioinformatics

Stát vydavatele

Spojené státy

Utajení

není předmětem státního či obchodního tajemství

Odkazy

Impakt faktor

Impact factor: 2.093

Označené pro přenos do RIV

Ano

Kód RIV

RIV/00216224:14330/08:00024644

Organizační jednotka

Fakulta informatiky

Klíčová slova anglicky

Chip and PIN technology; ecommerce; PIN pads

Příznaky

Mezinárodní význam, Recenzováno
Změněno: 22. 6. 2009 13:33, prof. RNDr. Václav Matyáš, M.Sc., Ph.D.

Anotace

V originále

Chip \& PIN is the name of the new technology supposed to considerably decrease fraud related to payment cards. While this is definitely true from the banks' point of view, what is not so clear are implications for customers -- the ultimate card users. Introduction of smartcards within the Chip \& PIN deployment exercise is quite likely the most extensive deployment of computers in the human history, with security as a major aspect. We first review some of the most critical issues related to the introduction of Chip \& PIN card payment authorization, and then discuss our two-phase experiment.\footnote{This experiment was partly supported by the FIDIS (Future of Identity in the Information Society) Network of Excellence.} Our experiment examined, in two phases, whether the introduction of this authorization method is advantageous for an opportunistic thief and whether the customer truly benefits from the Chip \& PIN technology with respect to this opportunistic thief. This is, to our best knowledge, the first presentation of non-trivial field experiment results on the ease of PIN in-shop observation to the general public.

Česky

Chip \& PIN is the name of the new technology supposed to considerably decrease fraud related to payment cards. While this is definitely true from the banks' point of view, what is not so clear are implications for customers -- the ultimate card users. Introduction of smartcards within the Chip \& PIN deployment exercise is quite likely the most extensive deployment of computers in the human history, with security as a major aspect. We first review some of the most critical issues related to the introduction of Chip \& PIN card payment authorization, and then discuss our two-phase experiment.\footnote{This experiment was partly supported by the FIDIS (Future of Identity in the Information Society) Network of Excellence.} Our experiment examined, in two phases, whether the introduction of this authorization method is advantageous for an opportunistic thief and whether the customer truly benefits from the Chip \& PIN technology with respect to this opportunistic thief. This is, to our best knowledge, the first presentation of non-trivial field experiment results on the ease of PIN in-shop observation to the general public.

Návaznosti

GA102/06/0711, projekt VaV
Název: Kryptografické generátory náhodných a pseudonáhodných čísel
Investor: Grantová agentura ČR, Kryptografické generátory náhodných a pseudonáhodných čísel