The power of credit card numbers and long CVVs

Valentim Oliveira*, Tito Silva

*Corresponding author for this work

    Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

    Abstract

    Many protocols have been proposed to guarantee the security of payments on the internet, however their adoption has failed. Meanwhile the credit card number together with the expiry date and the CVV2 has been widely adopted.In recent years cybercriminals have been able to break into systems and intercept communications harvesting hundreds of millions of records of card data or payment transactions. This study proposes a complementary approach that withdraws value out of payment transaction data so that in the case of compromise the criminals will have limited success in executing fraudulent transactions. The proposed technique makes use of a Long CVV (LCVV) to substitute the CVV2. In each transaction only parts of the LCVV will be used thus not revealing the entirety of the secret in possession of the cardholder. Implementation of the proposed scheme is of very low impact, user friendly and has a very high degree of effectiveness against most relevant attacks.
    Original languageEnglish
    Title of host publicationProceedings - 2011 5th International Conference on Network and System Security, NSS 2011
    Pages290-294
    Number of pages5
    DOIs
    Publication statusPublished - 2011
    Event2011 5th International Conference on Network and System Security, NSS 2011 - Milan, Italy
    Duration: 6 Sep 20118 Sep 2011

    Publication series

    NameProceedings - 2011 5th International Conference on Network and System Security, NSS 2011

    Conference

    Conference2011 5th International Conference on Network and System Security, NSS 2011
    Country/TerritoryItaly
    CityMilan
    Period6/09/118/09/11

    Keywords

    • Coupon collectors problem
    • Credit card number
    • CVC2
    • CVV2
    • E-commerce
    • E-payment

    Fingerprint

    Dive into the research topics of 'The power of credit card numbers and long CVVs'. Together they form a unique fingerprint.

    Cite this