Abstract:Existing magnetic cards adopt plain text to store confidential information, thus being vulnerable to an untrusted credit card reader or a skimming device. To tackle the problem, researchers have proposed several new techniques such as integrated circuit card (IC card) and mobile wallet applications [1]; however, none of them can support existing magnetic card readers thereby facing backwards compatibility issue. In this paper, to combat such credit card information leakages and remain backwards compatible, we propose SafePay, a system that transforms disposable credit card information to electrical current and drives a magnetic card chip to simulate the behavior of a physical magnetic card. We have implemented a prototype system of SafePay by a mobile phone and a prototype magnetic card chip. In the evaluation, we show that the current cost is about $0.5 excluding the phone, and the cost can be even lowered if manufactured in large scale. We also evaluated the prototype in experimental environment such as oscilloscope and real-world scenarios such as vending machines. The results show that the physical signal in oscilloscope is the same as the theoretical value, and meanwhile, we can successfully buy products in all the tested real-world scenarios.

Financial IC Card Authentication System and Its Security Analysis

Chinese Financial IC Card Secure Electronic Transaction Protocol and Model

A Novel User Authentication Scheme Using Smart Cards.

Some Potential Defects in EMV96 and Improvement Advice

A Security Scheme Based on Smart Card

Design and Implementation of an Electromagnetic Analysis System for Smart Cards.

Security Analysis and Enhancement of a Dynamic Identity Based Authentication Scheme Using Smart Cards

Security Design for Multi-service Smart Card Systems

Design Of Multi-Service Smart Card Systems For High Security And Performance

An Embedded System Design for Practical Security Analysis of Contact Smartcards

Security of E-Bank Identity Authentication System Based on Hardware

Secure remote mobile payment architecture and application

An Elliptic Curve Dynamic Identity Authentication Scheme Based on Smart Cards

Identity Authentication Security Management in Mobile Payment Systems

High security smart card architecture and design

Identity Authentication for Debit Card Secure Electronic Transaction Payment

Information Encryption Techniques in Smart IC Card

Analysis of the Technical Characteristics of Java Card and Its Application

SafePay: Protecting Against Credit Card Forgery with Existing Magnetic Card Readers

A Security Multi-Bank E-Cash Protocol Based On Smart Card

Cryptanalysis and improvement on an IC-card-based remote login mechanism