Security and Privacy in Communication Networks
Security and Privacy in Communication Networks
复制标题
通信网络的安全和隐私
DOI：
10.1007/978-3-319-59608-2_10
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Umar A
中科院分区：
文献类型：
--
作者：
Umar A
支付卡使用主帐号 (PAN)，商家通常使用主帐号来唯一地识别用户，并在必要时通过将用户列入黑名单来拒绝向用户提供服务。然而，令牌化是一种将 PAN 替换为临时等效物的技术，用于模拟支付卡的移动设备，但攻击抵抗力降低。本文概述了代币化支付如何与开放交通系统中的黑名单过程相矛盾。我们建议使用可链接的组签名来链接用户的不同交易，而不管变量令牌如何。这使得运输运营商能够检查用户的签名是否与黑名单中之前的不诚实交易相关联，同时仍然保持用户的匿名性。
Payment cards make use of a Primary Account Number (PAN) that is normally used by merchants to uniquely identify users, and if necessary to deny users service by blacklisting. However, tokenisation is a technique whereby the PAN is replaced by a temporary equivalent, for use in mobile devices that emulate payment cards, but with reduced attack resistance. This paper outlines how tokenised payments contradict the process of blacklisting in open transport systems. We propose the use of a linkable group signature to link different transactions by a user regardless of the variable token. This allows the transport operator to check if a user’s signature is linked to a previous dishonest transaction in the blacklist, while still maintaining the anonymity of the user.