Paper 2014/918

Web Tap Payment Authentication and Encryption With Zero Customer Effort

Henry Ng

Abstract

We propose a public-key authentication and encryption application that secures the messages between Tap-Card-Pay application, Tap-Card-Pay Systems Corporation, customers, and merchants allowing the customer to complete transactions without requiring the customer to input sensitive information. With authentication and encryption, the application transfers the credit card information from the smartphone's near field communication device onto the merchant webpage. Security weaknesses are also presented to show how to attack this design.

Metadata
Available format(s)
PDF
Publication info
Preprint. MINOR revision.
Keywords
Public-Key CryptographyDigital SignaturesApplications
Contact author(s)
henryng @ tapcardpay com
History
2014-11-10: received
Short URL
https://ia.cr/2014/918
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2014/918,
      author = {Henry Ng},
      title = {Web Tap Payment Authentication and Encryption With Zero Customer Effort},
      howpublished = {Cryptology {ePrint} Archive, Paper 2014/918},
      year = {2014},
      url = {https://eprint.iacr.org/2014/918}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.