Researchers at the University of Cambridge this week revealed that they had identified a troubling defect in the propagation of one-off chip and PIN verification codes for EMV transactions. The flaw makes it possible for thieves to predict the next code that will be created by an ATM or POS terminal and essentially skim the smart card.

When an EMV-enabled card is used, a supposed "unpredictable number" is created to authenticate the transaction. However, an Information Age report said, when researchers tested chip cards at ATM terminals, they discovered that numbers issued by some terminals followed a pattern that could be identified and used to falsify transactions.

Visiting professor Mike Bond discovered the problem while reviewing a list of UNs that had been generated by an ATM in an apparent case of fraud. He and fellow researchers then tested a number of ATMs and found that some had faulty number generators.

"If you can predict [a UN], you can record everything you need from momentary access to a chip card to play it back and impersonate the card at a future date and location," Bond told Information Age. "You can as good as clone the chip."

Thieves can exploit this weakness either by locating a predictable number-generating device, or by installing malware on the device using a specially programmed chip card. The research have called for regulators to step up their efforts and not take processing companies' security claims for granted the article said.

For more on this topic, visit the EMV research center.

Related Content

User Comments – Give us your opinion!
Products & Services

Advertising & OTO Marketing System – WWS One to One Marketing …

http://global.networldalliance.com/new/images/products/6215.png

6215/Advertising-OTO-Marketing-System-WWS-One-to-One-Marketing-Campaign-Manager

Total-Custom Setup

http://global.networldalliance.com/new/images/products/6201.png

6201/Total-Custom-Setup

IVR Billing

http://global.networldalliance.com/new/images/products/4531.png

4531/IVR-Billing

Agency Banking

http://global.networldalliance.com/new/images/products/7043.png

7043/Agency-Banking

mBanking

http://global.networldalliance.com/new/images/products/7041.png

7041/mBanking

Infobip Mobile Payments - Centili

http://global.networldalliance.com/new/images/products/6115.png

6115/Infobip-Mobile-Payments-Centili

JunglePay - Mobile Payment and Online Billing Solution

http://global.networldalliance.com/new/images/products/4534.png

4534/JunglePay-Mobile-Payment-and-Online-Billing-Solution

Direct Operator Billing

http://global.networldalliance.com/new/images/products/6031.png

6031/Direct-Operator-Billing

Unified Payment API

http://global.networldalliance.com/new/images/products/6119.png

6119/Unified-Payment-API

Premium SMS Billing (P-SMS) and Short-Codes

http://global.networldalliance.com/new/images/products/4525.png

4525/Premium-SMS-Billing-P-SMS-and-Short-Codes

Wallet Wars
CONNECT 2014 Mobile Innovation Summit
Request Information From Suppliers
Save time looking for suppliers. Complete this form to submit a Request for Information to our entire network of partners.