Jinseok Song, Myung-Woo Jung, Jung-In Choi, Seung-Hyun Seo

KIPS Transactions on Computer and Communication Systems, Vol. 7, No. 3, pp. 73-80, Mar. 2018
10.3745/KTCCS.2018.7.3.73,   PDF Download:
Keywords: Security Keypad, Simple Payment, Dual Touch, Mobile Banking
Abstract

Due to the popularity of smartphones and the simplification of financial services, the number of mobile financial services is increasing. However, the security keypads developed for existing financial services are susceptible to probability analysis attacks and have security vulnerabilities. In this paper, we propose and implement a security keypad based on dual touch. Prior to the proposal, we examined the existing types of security keypads used in the mobile banking and mobile payment systems of Korean mobile financial businesses and analyzed the vulnerabilities. In addition, we compared the security of the proposed dual touch keypad as well as existing keypads using the authentication framework and the existing keypad attack types (Brute Force Attack, Smudge Attack, Key Logging Attack, and Shoulder Surfing Attack, Joseph Bonneau). Based on the results, we can confirm that the proposed security keypad with dual touch presented in this paper shows a high level of security. The security keypad with dual touch can provide more secure financial services, and it can be applied to other mobile services to enhance their security.

Statistics
Cite this article