UCL  IRIS
Institutional Research Information Service
UCL Logo
Please report any queries concerning the funding data grouped in the sections named "Externally Awarded" or "Internally Disbursed" (shown on the profile page) to your Research Finance Administrator. Your can find your Research Finance Administrator at http://www.ucl.ac.uk/finance/research/post_award/post_award_contacts.php by entering your department
Please report any queries concerning the student data shown on the profile page to:

Email: portico-services@ucl.ac.uk

Help Desk: http://www.ucl.ac.uk/ras/portico/helpdesk
Publication Detail
Chip and spin
  • Publication Type:
    Journal article
  • Publication Sub Type:
    Article
  • Authors:
    Anderson R, Bond M, Murdoch SJ
  • Publication date:
    03/2006
  • Pagination:
    1, 6
  • Journal:
    Computer Security Journal
  • Volume:
    22
  • Issue:
    2
  • Print ISSN:
    0277-0865
Abstract
The views of the authors regarding the liability issues, technical shortcomings and management failures of 'Chip and PIN' card payments are discussed. The UK banks do have a voluntary code of practice that is supposed to indicate liability during computer crimes but it relies on ill defined notions of 'reasonable care'. The use PINs in shops as well as at ATMs greatly increases the likelihood that PINs can be compromised by shoulder-surfing. This is not just a function of the frequency of PIN entry, but also of the environment and the associated social norms. The system has a glaring weakness, if a card is presented at an ATM or POS terminal whose chip is damaged then the device falls back to the magnetic strip operation. According to the author the technical specification behind Chip and PIN EMV is a public standard and will come under attack. The interaction with the credit card is simply done using electronic signals which can be easily routed from anywhere in the world.
Publication data is maintained in RPS. Visit https://rps.ucl.ac.uk
 More search options
UCL Researchers
Author
Dept of Computer Science
University College London - Gower Street - London - WC1E 6BT Tel:+44 (0)20 7679 2000

© UCL 1999–2011

Search by