Fraudulent Internet Banking Payments Prevention using Dynamic Key

Dandash, O.; Wang, Yiling; Leand, Phu Dung; Srinivasan, Bala

doi:10.4304/jnw.3.1.25-34

Cited by 18 publications

(3 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This is because a secret key needs to be shared between engaging parties in a secure manner. A number of session key generation and distribution techniques have been proposed [5,[7][8][9][10][11][12][13]. Among the above techniques, Kungpisdan et al [8] introduced a session key generation technique that not only it is secure against key compromise attacks, but it can also operate purely offline.…”

Section: ) Session Key Generation and Distributionmentioning

confidence: 99%

Improving identity privacy and authentication in SIP transactions

Kungpisdan

Thongyon

2013

2013 13th International Symposium on Communications and Information Technologies (ISCIT)

View full text Add to dashboard Cite

Session Initiation Protocol (SIP) has gained more acceptability as the number of Voice Over Internet Protocol (VoIP) applications grows significantly. However, SIP itself lacks user privacy, necessary security properties, and has poor performance due to chosen cryptographic operations. A number of security techniques were proposed to address user privacy issues, but they still have limitations in terms of security and performance. In this paper, SIPPEN, a SIP Privacy Enhancement with Nicknames, is introduced. SIPPEN can preserve privacy of SIP users while they communicate. Moreover, a new authentication technique between a user agent and a proxy server is introduced. The results given from our analysis show that the proposed protocol not only has higher security level, but it also has better performance comparing to existing techniques.

show abstract

Section: ) Session Key Generation and Distributionmentioning

confidence: 99%

Improving identity privacy and authentication in SIP transactions

Kungpisdan

Thongyon

2013

2013 13th International Symposium on Communications and Information Technologies (ISCIT)

View full text Add to dashboard Cite

show abstract

“…Our protocol is based on symmetric key encryption, using a secure session key distribution to improve the protocol [13]. Many session key generation techniques have been suggested [14,15]. One technique was suggested by [13], which is not only secured key compromise attacks but can also operate purely offline.…”

Section: The Proposed Protocolmentioning

confidence: 99%

Efficient and Secure NFC Authentication for Mobile Payment Ensuring Fair Exchange Protocol

Thammarat

2020

Symmetry

View full text Add to dashboard Cite

The standard protocol of near field communication (NFC) has concentrated primarily on the speed of communication while ignoring security properties. Message between an NFC-enabled smartphone and a point of sale are exchanged over the air (OTA), which is a message considered an authentication request for payment, billing, ticketing, loyalty services, identification or access control. An attacker who has an antenna can intercept or manipulate the exchanged messages to take advantage of these. In order to solve this problem, many researchers have suggested authentication methods for NFC communications. However, these remain inadequate transaction security and fairness. In this paper, we will propose a technique that ensures mutual authentication, security properties, and strong fairness. Mutual authentication is a security property that prevents replay attacks and man-in-the-middle attacks. Both fair exchange and transaction security are also significant issues in electronic transactions with regards to creating trust among the parties participating in the transaction. The suggested protocol deploys a secure offline session key generation technique to increase transaction security and, importantly, make our protocol lightweight while maintaining the fairness property. Our analysis suggests that our protocol is more effective than others regarding transaction security, fairness, and lightweight protocol. The proposed protocol checks robustness and soundness using Burrows, Abadi and Needham (BAN) logic, the Scyther tool, and automated validation of internet security protocols and applications (AVISPA) that provide formal proofs for security protocols. Furthermore, our protocol can resolve disputes in case one party misbehaves.

show abstract

“…papers [29,[31][32][33][34][35]. Among all the mentioned approaches, [29] proposed a secure session key generation technique that prevents key compromise attacks.…”

Section: Intermediate Key Generationmentioning

confidence: 99%

A Secure Fair Exchange for SMS‐Based Mobile Payment Protocols Based on Symmetric Encryption Algorithms with Formal Verification

Thammarat

Kurutach

2018

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

Information security and fair exchange are essential to creating trust among all the parties participating in any sale transaction. However, implementing them in any mobile commerce is challenging due to the limitation of resources on mobile devices. Numerous m-commerce protocols that have been proposed so far still lack those two important aspects. In this paper, we propose mobile payment (m-payment) protocols, a crucial part of m-commerce, that incorporate both information security and fair exchange while retaining their own lightweight property. To allow convenience of use, the proposed protocols can be implemented on the existing Short Message Service (SMS) infrastructure. Our approach is based on the secure session key generation technique to enhance information security under lightweight conditions and involves a trusted third party to guarantee fair exchange without information disclosure. We have formally proven that our protocols are more effective and efficient than others in terms of fairness, security, and lightweight properties. In addition, the soundness and completeness of the protocols have been analyzed and proven using BAN logic and an automated security protocol proof tool named Scyther.

show abstract

Fraudulent Internet Banking Payments Prevention using Dynamic Key

Cited by 18 publications

References 23 publications

Improving identity privacy and authentication in SIP transactions

Improving identity privacy and authentication in SIP transactions

Efficient and Secure NFC Authentication for Mobile Payment Ensuring Fair Exchange Protocol

A Secure Fair Exchange for SMS‐Based Mobile Payment Protocols Based on Symmetric Encryption Algorithms with Formal Verification

Contact Info

Product

Resources

About