Avoiding Man-in-the-Middle Attacks When Verifying Public Terminals - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2012

Avoiding Man-in-the-Middle Attacks When Verifying Public Terminals

Résumé

An individual who intends to engage in sensitive transactions using a public terminal such as an ATM needs to trust that (a) all communications are indeed carried out with the intended terminal, (b) such communications are confidential, and (c) the terminal’s integrity is guaranteed. Satisfying such requirements prevents man-in-the-middle attacks and eavesdropping.We have analysed several existing transaction schemes and concluded that they tend not to meet all requirements during the entire transaction. We propose a new, generic protocol that provides (a) optional terminal identification, (b) key establishment, and (c) customisable integrity assurance.
Fichier principal
Vignette du fichier
978-3-642-31668-5_20_Chapter.pdf (291.72 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01517599 , version 1 (03-05-2017)

Licence

Paternité

Identifiants

Citer

Gergely Alpár, Jaap-Henk Hoepman. Avoiding Man-in-the-Middle Attacks When Verifying Public Terminals. 7th PrimeLife International Summer School (PRIMELIFE), Sep 2011, Trento, Italy. pp.261-273, ⟨10.1007/978-3-642-31668-5_20⟩. ⟨hal-01517599⟩
29 Consultations
64 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More