Designing and proving an EMV-compliant payment protocol for mobile devices

Véronique Cortier (1) , Alicia Filipiak (1, 2) , Saïd Gharout (2) , Jacques Traoré (3)

1 PESTO - Proof techniques for security protocols
2 Orange Labs [Issy les Moulineaux]
3 Orange Labs [Caen]

We devise a payment protocol that can be securely used on mobile devices, even infected by malicious applications. Our protocol only requires a light use of Secure Elements, which significantly simplify certification procedures and protocol maintenance. It is also fully compatible with the EMV SDA protocol and allows off-line payments for the users. We provide a formal model and full security proofs of our protocol using the TAMARIN prover.

Domaines: Cryptographie et sécurité [cs.CR]

Véronique Cortier, Alicia Filipiak, Saïd Gharout, Jacques Traoré. Designing and proving an EMV-compliant payment protocol for mobile devices. 2nd IEEE European Symposium on Security and Privacy (EuroSP'17), Apr 2017, Paris, France. ⟨hal-01408584⟩