Masayendisiti akawana chikanganiso mukuchengetedzwa kwemamwe makadhi echikwereti

Iwo asingabatike makadhi ekubhengi isarudzo inokurumidza uye inoshanda yekubhadhara nguva dzose kutenga. Izvo zvakakosha fauce kadhi rako pamushini wePOS kuti uite muripo wekusabatika.

Zvidiki zvinogona kubhadhariswa nekukurumidza uye zviri nyore kusvika, uye makadhi ekutamba anofungidzirwa akachengeteka semhedzisiro yekodhi yekuchengetedza inodiwa kubhejera hofori mari.

Mazhinji eaya matransferensi anonyanya kubva pane EMV yakajairika, izvo zvinoshanda kune pamusoro 9 mabhiriyoni ekutamba makadhi pasi rose. Kunyangwe iyo yakadzokororwa kakawanda kubva ipapo, iyo algorithm yepamberi ine huwandu hwehutera hunogona kushandiswa.

Nezviremera zvakasiyana zvekuchengetedza zvave kutoona zvikanganiso mune zvakajairika, masayendisiti pa ETH Zurich vataura zvimwe, chakakomba chekuchengetedza buri.

Sedanho rekutanga, Purofesa weData Chengetedzo David Basin akabatana naRalf Sasse, muongorori mukuru mukati meDhipatimendi reLaptop Sayenzi, naJorge Toro Pozo, postdoc mukuungana kwaBasin, kugadzira mannequin yakavakirwa-chinangwa kuitira kuti vaongorore zvikamu zvepakati zveEMV zvakajairika. Vakawana gomba rakakosha muprotocol inoshandiswa nekambani yekadhi rebhangi Visa.

Kusagadzikana uku kunobvumira vanobiridzira kuti vawane mari kubva mukutamba makadhi akarasika kana kubiwa., kunyangwe huwandu hwacho hunonzi hunosimbiswa nekupinda muPIN kodhi.

Kusagadzikana uku kunopa simba vanobiridzira kuti vaunganidze zvinhu kubva mukutamba makadhi anenge akarasika kana kubiwa., zvisinei kuti huwandu hunoda kubvumidzwa nekupinda muPIN kodhi. Toro anoisa iyo kunyanya: "Kune zvese zvinotarisirwa uye mabasa, iyo PIN kodhi haishande pano."

Makambani akasiyana, zvakafanana neMastercard, American Specific, uye jcb, usashandise iyo yakafanana Visa protocol, saka aya ekutamba makadhi haazokanganiswe neakachengeteka loophole. Zvakadaro, kukanganisa kunogona kushanda kumakadhi ekutamba akabudiswa neUncover uye UnionPay, iyo inoshandisa protocol yakafanana neVisa.

Vaongorori vaive nesarudzo yekuratidza kuti zvinokwanisika kutora mukana wekusagadzikana mukutevera., zvisinei kuti inguva chaiyo isingatarisirwi. Ivo pakutanga vakagadzira Android software ndokuisa mairi maviri NFC-inogonesa nharembozha. Izvi zvakabvumira 2 mayunitsi ekuongorora data kubva ku kadhi rechikwereti chip uye ruzivo rwekutengesa nematerminals ekubhadhara. Tisingatarisiri, vaongorori vaisafanira kufuratira chero mamwe maficha ekuchengetedza mukati meiyo Android inoshanda sisitimu yekuisa muapp.

Yekutanga mbozhanhare inoshandiswa kuongorora iyo yakakosha data kubva pakadhi remutengo uye kuiendesa kune yechipiri mbozhanhare kuti uwane mari isina kubvumidzwa kubva kune wechitatu-bato kadhi rebhangi.. Iyi mbozhanhare inotevera inozoshandiswa kubhedha huwandu pakubhadhara, zvakafanana zvakasiyana-siyana zvevaridzi vemakadhi vanoita semazuva ano. Sezvo kunyorera kunozivisa kuti shopper ndiye akatenderwa kadhi rebhangi, mutengesi haaone kuti kutengeserana uku kune hunyengeri. Chinhu chakakosha ndechekuti app inodarika kadhibhodhi yekuchengetedza system. Kunyangwe iyo mari iri pamusoro pekurambidzwa uye inoda PIN kusimbiswa, hapana code inokumbirwa.

Kushandisa makadhi avo ekubhangi pazvinhu zvakasiyana zvekutengesa, vaongorori vanga vakwanisa kuratidza kuti chirongwa chekubiridzira chinoshanda.

Toro anodaro, "Kubvarura kunoshanda nemakadhi ekubhengi nemakadhi ekubhengi anopihwa munyika dzinoverengeka nemari dzakasiyana."

Masayendisiti akatozivisa Visa nezvekusagadzikana, panguva yakafanana kupa mhinduro yakasarudzwa.

Tour anotsanangura, “Zvigadziriso zvitatu zvinofanirwa kuitwa kuprotocol, iyo inogona kuzoiswa mukati memubhadharo terminals neinotevera software chirongwa kutsiva. Inogona kunyatso itwa nekuedza kushoma. Hapana chinhu chakadai sekuda kuchinjanisa makadhi ekutamba, uye zvigadziriso zvese zvinogadzirisa kune EMV yakajairika."

Journal Reference:

1. Basin et al. Iyo EMV Tsika: Break, Kugadzirisa, Confirm. arXiv:2006.08249 [cs.CR] arxiv.org/abs/2006.08249