• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.10 no.4
• /
• pp.1864-1876
• /
• 2016

Card-Not-Present (CNP) transactions taking place remotely over the Internet are becoming more prevalent. Cardholder authentication should be provided to prevent the CNP fraud resulting from the theft of stored credit card numbers. To address the security problems associated with CNP transactions, the use of a virtual card number derived from the transaction details for the payment has been proposed, instead of the real card number. Since all of the virtual card number schemes proposed so far are based on a password shared between the cardholder and card issuer, transaction disputes due to the malicious behavior of one of the parties involved in the transaction cannot be resolved. In this paper, a new virtual card number scheme is proposed, which is associated with the cardholder's public key for signature verification. It provides strong cardholder authentication and non-repudiation of the transaction without deploying a public-key infrastructure, so that the transaction dispute can be easily resolved. The proposed scheme is analyzed in terms of its security and usability, and compared with the previously proposed schemes.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.25 no.5
• /
• pp.1175-1186
• /
• 2015

Financial fraud has been increasing along with credit card usage. Magnetic stripe cards have vulnerabilities in that credit card information is exposed in plaintext and cardholder verification is untrustworthy. So they have been replaced by a smart card scheme to provide enhanced security. Furthermore, the FinTech that combines the IT with Financial product is being prevalent. For that reason, many mobile device based payment schemes have been proposed for card present transaction. In this paper, we propose a virtual credit card number payment scheme based on public key system for efficient authentication in card present transaction. Our proposed scheme is able to authenticate efficiently in card present transaction by pre-registering virtual credit card number based on cardholder's public key without PKI. And we compare and analyze our proposed scheme with EMV.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.20 no.3
• /
• pp.9-21
• /
• 2010

Recently, famous online shopping websites were hit by hacking attack, and many users' personal information such as ID, password, account number, personal number, credit card number etc. were compromised. Hackers are continuing to attack online shopping websites, and the number of victims of these hacking is increasing. Especially, the exposure of credit card numbers is dangerous, because hackers maliciously use disclosed card numbers to gain money. In 2007 Financial Cryptography Conference, Ian Molly et al. firstly proposed dynamic card number generator, but it doesn't meet reuse resistant. In this paper, we analyzed security weaknesses of Ian Molly's scheme, and we proposed a new one-time virtual card number generator using a mobile device which meets security requirements of one-time virtual card numbers. Then, we propose one-time credit card number generation and transaction protocol using Integrated Authentication Center for user convenience and security enhancement.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.25 no.1
• /
• pp.5-15
• /
• 2015

Electronic transactions have been increasing with the development of the high-speed Internet and wireless communication. However, in recent years financial corporations and mobile carriers were attacked by hackers. And large numbers of privacy information have been leaked. In particular, in the case of credit card information can be misused in the online transaction, and the damage of this given to cardholder. To prevent these problems, it has been proposed to use a virtual card number instead of the actual card number. But it has security vulnerability and requires additional security infrastructure. In this paper, we analyzed the proposed virtual card number schemes. and we propose a new virtual credit card number scheme. In the newly proposed scheme, cardholder generates a key pair (public key/private key) and pre-register public key to the issuer. then, cardholder can pay no additional security infrastructure while still efficiently satisfy the security requirements.

• Journal of Advanced Navigation Technology
• /
• v.14 no.1
• /
• pp.27-32
• /
• 2010

In this paper, we research a virtual card generation system to secure e-commerce. Network security has increased the need to meet rapidly growing trend. And the amount and quality of e-commerce expansion due to the need for secure commerce transactions has increased even more. Instead of exposing the actual credit card number, we expose a virtual card number on the network. It can prevent the risk of hacking. We proved that through various experiments.

• Proceedings of the Korea Contents Association Conference
• /
• 2004.05a
• /
• pp.575-578
• /
• 2004

This paper will intend to find the artistic value of playing card and 3D animation that is having much skill and entertaining points through digital virtual3D card animation . And this paper will consider the popularity and explore the creative cooperation relation of skill and art.

• The Magazine of the IEIE
• /
• v.22 no.12
• /
• pp.27-44
• /
• 1995

초고속 통신망에 근간이 되는 ATM 통신망에 SUN W/S, PC 컴퓨터들을 접속시키는 ATM Adapter Card은 하드웨어, 시스템 소프트웨어 및 응용 소프트웨어로 구성된다. 하드웨어의 구조 및 시스템 소프트웨어의 구조, 성능에 따라서 ATM Adapter Card 위에서 수행되는 응용 소프트웨어의 성능을 결정할 것이다. ATM Adapter Card는 효율적으로 Native ATM 응용 소프트웨어를 지원할 뿐 아니라, 기존의 TCP/IP 응용 소프트웨어를 수용하는 IPoverATM, LAN Emulation 기능도 지원하여야 한다. 또한 PVC(Permanent Virtual Channel), SVC(Siganlling Virtual Channel)을 위하여 ATM Forum UNI 3.1에 준한 Signalling도 필요하다. 이러한 조건들을 만족시키기위하여, 현재 개발 완료된 SUN W/S SBus용 디바이스 드라이버는 DLPI(Data Link Provider Interface), STREAM 방식으로 구현하였으며, 현재 개발 중인 PC PCI용 ATM Adapter Card의 디바이스 드라이버는 NDIS 3.0 방식으로 구현 다양한 Transport Layer를 ATM망에 수용하도록 하였다. Signalling은 Daemon Process를 이용하여 구현하였다.

• Information Systems Review
• /
• v.8 no.3
• /
• pp.65-80
• /
• 2006

This paper proposes a new infrastructure that supports divisible card payment where a combination of multiple credit cards can be used for a single purchase. The divisible card payment infrastructure modifies the existing payment system in two ways. First, the V-Card Manager(VCM) is added to the merchant side to handle the divisible card approval process from respective credit-card issuers. Second, the V-Card Agent(VA) is added to the customer side and generates a customized divisible card, called V-Card, based on the customer's preferences. This paper provides a customizing card payment method that supports divisible payments based on profits and preferences of customers.

• Proceedings of the IEEK Conference
• /
• 2001.06c
• /
• pp.55-58
• /
• 2001

In this paper, we present the development of a JavaCard for public key crypto algorithms and its performance evaluation. To make a high performance for the public key crypto algorithm such as RSA and ECC on a JavaCard, we have implemented a crypto coprocessor in hardware and ported it to the card operating system and virtual machine environments. The performance of the public key crypto algorithms on the JavaCard shows that our JavaCard is suitable for If card applications which needs high performance and high level of security.

• Proceedings of the Korea Multimedia Society Conference
• /
• 2001.11a
• /
• pp.374-377
• /
• 2001

Java Card 플랫폼을 내장한 스마트 카드는 현재의 스마트 카드에 적용되는 모든 표준을 따르는 전형적인 스마트 카드인데, 자바카드 플랫폼의 장정을 최대한 이용하기 위해 적용할 기술은 메모리 측면에서 보면 사용할 수 있는 자원이 적어 다양한 용도로 사용에 있어 제한적이다. 따라서 본 논문에서는 적은 메모리 자원을 가지고 보다 효율적이고 최적화된 성능을 가지는 자바플랫폼을 지원하기 위해 자바 플랫폼의 성능에 핵심이 되는 자바 카드 가상기계(JCVM)의 성능최적화 방안에 대한 방법을 제시하고자 한다.