Skip to main content
Skip main navigation
No Access

A web transaction security scheme based on disposable credit card numbers

Published Online:pp 146-155https://doi.org/10.1504/IJESDF.2007.016864

Today, an e-commerce transaction is performed by sending the client's credit card details over a SSL/TLS connection. This form of transaction raises many security threats. The most important one is the client authentication. Because the client normally does not have a public key certificate, the client's authentication is achieved only by the credit card details. In addition, these details are stored unencrypted in the merchant's database. A Disposable Credit Card Number (DCCN) is a technique to overcome these security threats. This paper presents a scheme for off-line generation of the DCCNs. The scheme uses a pre-shared secret key between the issuer and the client to generate Hashed Message Authentication Code for some selected data from the transaction. The scheme is secure and adds minimum overhead on the issuer and client. Furthermore, the generated DCCN has all the features of classical credit card details.

Keywords

e-commerce, transaction security, disposable credit card numbers, DCCN generation, off-line generation, electronic commerce, web transactions, electronic security, client authentication, hashed message authentication code