Eavesdropping of Magnetic Secure Transmission Signals and Its Security Implications for a Mobile Payment Protocol | Zendy

Daeseon Choi | Zendy; Younho Lee | Zendy

AI Assistant Blog Pricing

Home ZAIA Blog

Open Access

Eavesdropping of Magnetic Secure Transmission Signals and Its Security Implications for a Mobile Payment Protocol

Author(s) -

Daeseon Choi,

Younho Lee

Publication year - 2018

Publication title -

ieee access

Language(s) - English

Resource type - Journals

SCImago Journal Rank - 0.587

H-Index - 127

ISSN - 2169-3536

DOI - 10.1109/access.2018.2859447

Subject(s) - aerospace , bioengineering , communication, networking and broadcast technologies , components, circuits, devices and systems , computing and processing , engineered materials, dielectrics and plasmas , engineering profession , fields, waves and electromagnetics , general topics for engineers , geoscience , nuclear engineering , photonics and electrooptics , power, energy and industry applications , robotics and control systems , signal processing and analysis , transportation

Magnetic secure transmission (MST) is a technology that emulates the action of swiping a magstripe card in a card reader in that it artificially generates the magnetic signal produced when a card is swiped. MST provides extremely high backward compatibility, i.e., mobile payment using an MST device is possible through most conventional magstripe readers. However, MST devices transmit magnetic signals to a remote magstripe card reader. Hence, it is possible to eavesdrop on such signals. We developed a device that can remotely eavesdrop on magnetic signals emitted by MST devices. Thus, we could obtain the one-time payment token contained in such signals at a maximum distance of 2.7 m. We successfully performed a wormhole attack against Samsung Pay, a widely used MST-based mobile payment service, and we were able to execute payment a few kilometers from where the eavesdropped one-time token was actually created.

The content you want is available to Zendy users.

Already have an account? Click here to sign in.

Having issues? You can contact us here

Accelerating Research