A new payment protocol over the Internet

To heighten the biometrics security level, the biometrics feature extraction and verification need to be performed within smart cards, not in external card readers. However, the smart card chip has very limited processing capability, and typical fingerprint feature extraction and verification algorithms may not be executed on a state-of-the-art smart card. Therefore, this paper presents a system-on-chip (SoC) implementation of the fingerprint feature extraction algorithm which can be integrated into smart cards. To implement the ridge-following algorithm onto the resource-constrained SoCs, the algorithm has been modified to increase the efficiency of the hardware. Each functional block of the algorithm has been implemented in hardware or in software by considering its computational complexity, cost and utilization of the hardware, and efficiency of the entire system. The proposed system operated in 50MHz, and 20~50 minutiae could be extracted from typical 248timestimes292 fingerprint images in real time with our small area implementation (97K gates). Our current implementation developed as an IP for SoCs targeted for ARM CPU and AMBA bus can also be extended for many other smart card configurations

We repurpose existing RSA/ECC co-processors for (ideal) lattice-based cryptography by exploiting the availability of fast long integer multiplication. Such co-processors are deployed in smart cards in passports and identity cards, secured microcontrollers and hardware security modules (HSM). In particular, we demonstrate an implementation of a variant of the Module-LWE-based Kyber Key Encapsulation Mechanism (KEM) that is tailored for high performance on a commercially available smart card chip (SLE 78). To benefit from the RSA/ECC co-processor we use Kronecker substitution in combination with schoolbook and Karatsuba polynomial multiplication. Moreover, we speed-up symmetric operations in our Kyber variant using the AES co-processor to implement a PRNG and a SHA-256 co-processor to realise hash functions. This allows us to execute CCA-secure Kyber768 key generation in 79.6 ms, encapsulation in 102.4 ms and decapsulation in 132.7 ms.

Experimental System Used for Traceability in an Automated Assembly Line

We repurpose existing RSA/ECC co-processors for (ideal) lattice-based cryptography by exploiting the availability of fast long integer multiplication. Such co-processors are deployed in smart cards in passports and identity cards, secured microcontrollers and hardware security modules (HSM). In particular, we demonstrate an implementation of a variant of the Module-LWE-based Kyber Key Encapsulation Mechanism (KEM) that is tailored for high performance on a commercially available smart card chip (SLE 78). To benefit from the RSA/ECC co-processor we use Kronecker substitution in combination with schoolbook and Karatsuba polynomial multiplication. Moreover, we speed-up symmetric operations in our Kyber variant using the AES co-processor to implement a PRNG and a SHA-256 co-processor to realise hash functions. This allows us to execute CCA-secure Kyber768 key generation in 79.6 ms, encapsulation in 102.4 ms and decapsulation in 132.7 ms.

The evolution of digital payment systems represents a critical transformation in global financial infrastructure, driven by increasing demands for faster, more secure, and scalable transaction processing. This comprehensive article examines the architecture, implementation, and future directions of next-generation payment protocols, focusing on three fundamental pillars: ISO 20022 messaging standards, Layer 2 scaling solutions, and real-time settlement networks. The article analyzes how these components work in concert to address current limitations in traditional payment systems while enabling new capabilities in cross-border transactions, micro-payments, and real-time settlement. Through examination of major implementations including RTP, FPS, and UPI, the article reveals key success factors in deploying modern payment infrastructure. The article encompasses performance optimization strategies, scalability approaches, and security considerations, providing insights into best practices for financial institutions undertaking payment system modernization. The article demonstrates how emerging technologies, including artificial intelligence, edge computing, and quantum-resistant cryptography, are shaping the future of payment protocols while addressing critical challenges in global financial operations.

The purpose of smart cards is to create personal electronic signatures. The author presents the design of a smart card chip of less than 25-mm/sup 2/ area which consists of a CPU, 4 kBytes of ROM, 128 Bytes of RAM, 8 kBytes of EPROM, electrically programmable ROM, and a 512-bytes modulo math processor cell for creating electronic signatures. Such a smart card is a complete personal cryptographic module which can be easily carried like any credit card. Attention is given to the use of electronic signatures to create counterfeit-proof paper documents such as stock certificates, bank notes, driver licenses, passports, and labels. >

These days smart cards are replacing traditional magnetic cards for payment transactions. One of the main reasons is the enhanced security capabilities built into a smart card. Most of the related works in smart card only concentrates on the single application such as network access control, prepaid phone card or debit card. With popularity in web technologies, there is a trend towards smart cards being used for different electronic commerce applications such as electronic purse for payment transaction over Internet. But the payment protocols proposed so far do not support negotiation, bargaining or privacy issues between the parties. Based on the framework of CapBasED-AMS (a web based secure workflow management system), we developed a prototype system called SmartFlow to demonstrate multi-applications on the Internet using a smart card. The main focus of this paper is to present the framework of SmartFlow and demonstrate a negotiation and bargaining protocol for electronic commerce activities in both static and dynamic environment. We have already implemented the prototype system with these functionalities.KeywordsSmart CardCollaborative FilterDebit CardStatic NegotiationPayment TransactionThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Designing and implementing secure applications which use contactless communication link is difficult even when secure hardware is used. Many current proximity devices, such as contactless smart cards or near field communication devices, are verified to be highly secure; however, inappropriate protocol implementation may result in the leak of sensitive information, even if the protocol is also secure by itself. In this paper we show a concept of automated vulnerability search in protocol implementation by using verification methods, which should help developers to verify their applications. We also show simple example of possible attack on seemingly secure payment protocol implemented using seemingly secure smart card to show the way the adversary can abuse improper implementation. The vulnerability the attacker exploits can be in one command or in a combination of commands, which are not vulnerable individually. It is not easy to find such combinations manually, this is where the automated verification methods are put to use. A model checker, provided with an appropriate model, can automatically find vulnerabilities which are not likely to be found manually. The model can be created by the actual communication analysis. We wanted to show that the adversary does not have to have the access to the source code of the application to perform a successful attack, so a platform for the application analysis from the actual contactless communication was developed. The platform provides eavesdropping, altering data for man-in-the-middle attack, and emulating of both communication parties. The source code can help the analysis, but would not be sufficient by itself, so creating model from source code was left for future research. When the model checker finds vulnerability, an attack can be executed. The attack can be either successful, revealing real vulnerability which must be fixed, or unsuccessful, which would result in the model refinement and another model checker run.

This paper describes a new generation of contactless smart card chip which integrates an on-chip coil connected to a power reception system and an emitter/receiver module compatible with the ISO 14443 standard, together with an asynchronous quasi-delay insensitive (QDI) 8-bit microcontroller. Beyond the contactless smart card application field, this new chip demonstrates that system-on-chip integrating power reception and management, radio-frequency communication, and signal processing is feasible. It associates analog/digital parts as well as synchronous/asynchronous logics and has been fabricated in a CMOS six metal layers 0.25-/spl mu/m technology from STMicroelectronics.

During the last decade, many countries launched ambitious Electronic Health Record (EHR) programs with the objective to increase the quality of care while decreasing its cost. Pervasive healthcare aims itself at making healthcare information securely available anywhere and anytime, even in disconnected environments (e.g., at patient home). Current server-based EHR solutions badly tackle disconnected situations and fail in providing ultimate security guarantees for the patients. The solution proposed in this chapter capitalizes on a new hardware device combining a secure microcontroller (similar to a smart card chip) with a large external Flash memory on a USB key form factor. Embedding the patient folder as well as a database system and a web server in such a device gives the opportunity to manage securely a healthcare folder in complete autonomy. This chapter proposes also a new way of personalizing access control policies to meet patient’s privacy concerns with minimal assistance of practitioners. While both proposals are orthogonal, their integration in the same infrastructure allows building trustworthy pervasive healthcare folders.

One-way hash functions are an important tool in achieving authentication and data integrity. The aim of this paper is to propose a novel one-way hash function based on cellular automata whose cryptographic properties have been extensively studied over the past decade or so. Furthermore, security of the proposed one-way hash function is analyzed by the use of very recently published results on applications of cellular automata in cryptography. The analysis indicates that the one-way hash function is secure against all known attacks. An important feature of the proposed one-way hash function is that it is especially suitable for compact and fast implementation in hardware, which is particularly attractive to emerging security applications that employ smart cards, such as digital identification cards and electronic cash payment protocols,

This note considers the application of electronic cash to transactions in which many small amounts must be paid to the same payee and in which it is not possible to just pay the total amount afterwards. The most notable example of such a transaction is payment for phone calls. If currently published electronic cash systems are used and a full payment protocol is executed for each of the small amounts, the overall complexity of the system will be prohibitively large (time, storage and communication). This note describes how such payments can be handled in a wide class of payment systems. The solution is very easy to adapt as it only influences the payment and deposit transactions involving such payments. Furthermore, making and verifying each small payment requires very little computation and communication, and the total complexity of both transactions is comparable to that of a payment of a fixed amount.

There is no doubt that the momentum for digital currency has grown the last few years. Numerous businesses have started accepting this alternative form of currency as payment method and digital currency platforms are emerging to seize the opportunity to explore new markets. The potential of digital currency payment protocols to act as replacements of existing monetary systems is faced with challenges related to financial, regulatory, societal, and technological factors. In this paper, we are addressing the issue of deflation that could occur in cryptocurrency systems supporting a finite cap on the total amount of currency that will ever be in circulation. Our approach leaves intact the core functionality of these systems.