The power of credit card numbers and long CVVs

Many protocols have been proposed to guarantee the security of payments on the internet, however their adoption has failed. Meanwhile the credit card number together with the expiry date and the CVV2 has been widely adopted.In recent years cybercriminals have been able to break into systems and intercept communications harvesting hundreds of millions of records of card data or payment transactions. This study proposes a complementary approach that withdraws value out of payment transaction data so that in the case of compromise the criminals will have limited success in executing fraudulent transactions. The proposed technique makes use of a Long CVV (LCVV) to substitute the CVV2. In each transaction only parts of the LCVV will be used thus not revealing the entirety of the secret in possession of the cardholder. Implementation of the proposed scheme is of very low impact, user friendly and has a very high degree of effectiveness against most relevant attacks.