Providing Security for NFC-Based Payment Systems Using a Management Authentication Server

Recent models of mobile phones have been designed to offer many services such as mobile e-commerce, e-ticketing, e-payment, among many other services. Of a particular importance nowadays is the NFC-enabled mobiles in which the NFC technology allowed the integration of services from various applications into one single mobile. However, the EMV protocol, which is currently used to provide the required security for NFC-based payment systems, has two serious vulnerabilities between user payment devices and the merchants' point of sales which could lead to obvious risks for users. These two security vulnerabilities must be treated to secure NFC-based mobile payment transactions. In this paper a protocol is proposed to improve the security of EMV by adding a new security layer. The security provided by the protocol to EMV has been verified against major security attacks.