A Security-Enhanced One-Time Payment Scheme for Credit-Card

• Main Authors: LI, Yingjiu, ZHANG, Xinwen
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2001
• Subjects: credit card payment security; hash function; offline payment; one-time transaction numbers; online payment; security-enhanced one-time payment scheme; semisecret credit card numbers; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/1089; http://dx.doi.org/10.1109/RIDE.2004.1281701
• Institution: Singapore Management University

Traditional credit card payment is not secure as semi-secret credit card numbers are repetitively used. One-time transaction numbers have been recently proposed to enhance the security in credit card payment. Following this idea, we use a hash function in generation of one-time credit card numbers: the next one-time number is computed by hashing the current one-time number with a secret that is known only by card holder and issuer. Compared with related work, our scheme places less burden on credit card issuers, and can be easily deployed in both on-line and offline payment scenarios.