The Cards Aren't Alright: Detecting Counterfeit Gift Cards Using Encoding Jitter
The Cards Aren't Alright: Detecting Counterfeit Gift Cards Using Encoding Jitter
复制标题
卡片不太好：使用编码抖动检测假冒礼品卡
DOI：
10.1109/sp.2018.00042
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
D. Arnold
中科院分区：
文献类型：
--
作者：
Nolen Scaife;Christian Peeters;C. Vélez;Hanqing Zhao;Patrick Traynor;D. Arnold
礼品卡是越来越受欢迎的支付平台。就像信用卡一样，礼品卡依靠磁条对账户信息进行编码。然而，与信用卡不同的是，由于兼容性和成本的原因，EMV标准完全不适用于礼品卡。因此，困扰信用卡的大部分欺诈行为已开始转向礼品卡，每年造成数十亿美元的损失。在本文中，我们提出了一种检测假冒磁条礼品卡的系统，该系统不需要在制造时测量原始卡片。我们的系统依赖于一种称为抖动的现象，这种现象在所有ISO/IEC标准磁条卡上都存在。位长度的变化是由卡编码硬件引起的，并且难以减小且成本高昂。我们用高分辨率磁光显微镜验证这一假设，然后用廉价的商品读卡器建造探测器。然后，我们与沃尔玛合作，评估他们的礼品卡，并从我们的克隆产品中区分出合法的礼品卡，准确率高达99.3%。我们的结果表明，抖动的测量和检测增加了攻击者制造无法检测到的假币的难度，从而为减少礼品卡欺诈创造了重要的机会。
Gift cards are an increasingly popular payment platform. Much like credit cards, gift cards rely on a magnetic stripe to encode account information. Unlike credit cards, however, the EMV standard is entirely infeasible for gift cards due to compatibility and cost. As such, much of the fraud that has plagued credit cards has started to move towards gift cards, resulting in billions of dollars of loss annually. In this paper, we present a system for detecting counterfeit magnetic stripe gift cards that does not require the original card to be measured at the time of manufacture. Our system relies on a phenomenon known as jitter, which is present on all ISO/IEC-standard magnetic stripe cards. Variances in bit length are induced by the card encoding hardware and are difficult and expensive to reduce. We verify this hypothesis with a high-resolution magneto-optical microscope, then build our detector using inexpensive, commodity card readers. We then partnered with Walmart to evaluate their gift cards and distinguished legitimate gift cards from our clones with up to 99.3% accuracy. Our results show that measurement and detection of jitter increases the difficulty for adversaries to produce undetectable counterfeits, thereby creating significant opportunity to reduce gift card fraud.