Us 14 Anderson How Smartcard Payment Systems Fail

8/11/2019 Us 14 Anderson How Smartcard Payment Systems Fail

1/35

!"# %&'()*'(+ ,'-&./)

%-0).&0 1'234"00 5/+.(0"/

6'&7(2+8.

93'*: !') ;


2/35

?@. ABC D(")"*"3 0E2).

F'&.+ G"( AE("D'-HB'0).(6'(+HC20'I '30"

:/"#/ '0 J*@2D '/+ ,KFL

M.N.3"D.+ 3'). =OO


3/35

6"/*.D) "G "D.('Y"/0

B':. G"(8.(- @'(+.( 7- (.D3'*2/8 )@. &'8

0)(2D #2)@ ' *@2DX #@2*@ 'E)@./Y*').0 *'(+

B':. 'E)@./Y*'Y"/ "G *'(+@"3+.( 0)("/8.(

7- (.D3'*2/8 )@. 028/')E(. #2)@ ' ,KF

Q..D N.(2G-2/8 ,KF0 "/32/. ') 5?B0X 7E) N.(2G-

"/ )@. *@2D ') &.(*@'/) ).(&2/'30

A/*"E('8. +.D3"-&./) 7- &':2/8 )@.&.(*@'/) 32'73. 2G ,KF /") E0.+ RJ32'7232)- 0@2[LW

93'*: !') ;


4/35

93'*: !') ;

1('E+ @20)"(-X PQ

6'(+@"3+.( 32'73. 2G

,KF E0.+

A30. &.(*@'/) D'-0

9'/:0 @"D.+ G('E+

#"E3+ 8" +"#/

K) #./) ED \

?@./ +"#/X )@./ ED

'8'2/

Losses

(m)

Year

2004 2005 2006 2007 2008 2009 2010 2011 2012Total, ex phone (m) 503 491.2 591.4 704.3 529.6 441 410.6 462.7

0

50

100

150

200

250

300

Card!not!present

CounterfeitLost and stolen

ID theft

Mail non!receipt

Online banking

Cheque fraud

Chip & PIN deployment period

Phone banking


5/35

ABC 0@2[.+ )@. 3'/+0*'D.\

]2:. 7E33+"^2/8 ' _""+D3'2/X 2) *'E0.+ )@.

G('E+ )" `/+ /.# *@'//.30

6'(+H/")HD(.0./) G('E+ 0@") ED ('D2+3-

6"E/).(G.2) )"": ' *"ED3. "G -.'(0X )@./ )"":"a "/*. )@. *("":0 (.'320.+b

K)0 .'02.( )" 0).'3 *'(+ '/+ D2/ +.)'230 "/*. D2/0'(. E0.+ .N.(-#@.(.

c"E *'/ 0Y33 E0. &'8H0)(2D G'337'*: "N.(0.'0

?'&D.(H(.020)'/*. +".0/) #"(:

93'*: !') ;


6/35

5d'*: )@. *(-D)"

ABC 7(":. '33 )@. *(-D)"8('D@2* @'(+#'(.0.*E(2)- &"+E3.0 2/ )@. #"(3+Z

5 )('/0'*Y"/ 0D.*2`.+ 7- CK%5 )" 0./+ '/./*(-D).+ :.- )" ' 0&'()*'(+ 3.':.+ :.-0

2/0).'+

%.. J4"772/8 )@. 7'/: #2)@ ' )@."(.&D("N.(LX ,'E3 c"E/X 9./ 5+2+'X B2:. 9"/+Xe"3-"/ 63E3"#X e"/')@'/ !.(^"8X 5&.(0"/ ]2/X

4"/'3+ ] 42N.0)X 4"00 5/+.(0"/X %,f ;


7/35

5d'*: )@. "DY&20'Y"/0

6@.'D *'(+0 '(.%M5 R/" DE732* :.-*'D'7232)-X 0" 0)'Y**.(Y`*').W

5 J-.0 *'(+L *'/

2&D.(0"/'). 2/ '/"i2/. ).(&2/'3

1'2(3- .'0- )" +"X7E) /") 0../ &E*@

93'*: !') ;


8/35


9/35

?@. (.3'- 'd'*: R;


10/35


11/35

?'&D.(HD(""`/8 "G )@. ,AM

K/ ABCX ,KF 0./) G("& ,KFA/)(- M.N2*. R,AMW )" *'(+

6'(+ +')' _"# )@. ")@.( #'-

,AM 0EDD"0.+ )" 7. )'&D.((.020)'/) '**"(+2/8 )" CK%5X5,56% RPQ 7'/:0WX ,6K

JAN'3E').+ E/+.( 6"&&"/

6(2).(2'L %@"E3+ *"0) m;UX


12/35

?'&D.( 0#2)*@.0 RK/8./2*" 2SS


13/35

\ '/+ )'&D.( &[email protected] )""

93'*: !') ;


14/35

?C +.&"b 1.7 ;V ;


15/35

?@. F"H,KF'd'*:

!"# *"E3+ *("":0 E0. '0)"3./ *'(+ #2)@"E):/"#2/8 )@. ,KFj

f. G"E/+b 2/0.() '+.N2*. 7.)#../ *'(+ p).(&2/'3

6'(+ )@2/:0b 028/')E(.I).(&2/'3 )@2/:0b D2/

?Cb 1.7 == ;


16/35


17/35

5 F"H,KF)('/0'*Y"/

93'*: !') ;


18/35

93"*:2/8 )@. F"H,KF'd'*:

K/ )@."(-b &28@) 73"*: ') ).(&2/'3X '*hE2(.(X 200E.(

K/ D('*Y*.b &'- @'N. )" 7. )@. 200E.( R'0 #2)@).(&2/'3 )'&D.(2/8X '*hE2(.( 2/*./YN.0 '(. D""(W

9'(*3'-0 73"*:.+ 2) eE3- ;


19/35

6'(+ 5E)@./Y*'Y"/ ,(")"*"3 ].)0 7'/:0 E0. ABC 2/

"/32/. 7'/:2/8

P0.(0 *"&DE). *"+.0 G"('**.00X 'E)@"(20'Y"/

5 8""+ +.028/ #"E3+ )':.,KF '/+ *@'33./8. s +')'X./*(-D) )" 8.) (.0D"/0.

9E) )@. PQ "/. `(0) ).330

-"E 2G )@. ,KF 20 *"((.*) ?@20 DE)0 -"E( D.(0"/'3

0'G.)- ') (20: \

93'*: !') ;


20/35

6(2&. N2*Y&0 )"()E(.+ G"( ,KF0

93'*: !') ;


21/35

,@20@2/8 'd'*:0j

93'*: !') ;


22/35

].00 0E0D2*2"E0 )@'/ )@20 \

93'*: !') ;


23/35

65, 'd'*:0 )@("E8@ #2*:.+ 0@"D0

93'*: !') ;


24/35

ABC '/+ 4'/+"& FE&7.(0

K/ ABCX )@. ).(&2/'3 0./+0 ' ('/+"&

/E&7.( F )" )@. *'(+ '3"/8 #2)@ )@. +'). +

'/+ )@. '&"E/) t

?@. *'(+ *"&DE).0 '/ 'E)@./Y*'Y"/(.hE.0) *(-D)"8('& R54o6W "/ FX +X t

f@') @'DD./0 2G K *'/ D(.+2*) F G"( +j

5/0#.(b 2G K @'N. '**.00 )" -"E( *'(+ K *'/D(.*"&DE). '/ 54o6 G"( '&"E/) tX +'). +

93'*: !') ;


25/35

5?B0 '/+ 4'/+"& FE&7.(0 R;W

]"8 "G +20DE).+ )('/0'*Y"/0 ') B'u"(*'b

F 20 ' =g 72) *"/0)'/) G"33"#.+ 7- ' =U 72)

*"E/).( *-*32/8 .N.(- S &2/E).0

f. ).0)X p `/+ @'3G "G 5?B0 E0. *"E/).(0Z

93'*: !') ;

;


26/35

5?B0 '/+ 4'/+"& FE&7.(0 RSW

93'*: !') ;


27/35


28/35

?@. D(.D3'- 'd'*:

6"33.*) 54o60 G("& ' )'(8.) *'(+

P0. )@.& 2/ ' #2*:.+ ).(&2/'3 ') ' *"33E02N.

&.(*@'/)X #@2*@ `k.0 ED /"/*.0 )" &')*@

,'D.( '**.D).+ ') r':3'/+ )@20 -.'(

%2/*. )@./X #. @'N. ' 32N. *'0.\

%'23"( 0D./) vSS "/ ' +(2/: 2/ ' %D'/20@ 7'(w

!. 8") @2) #2)@ 02k )('/0'*Y"/0 G"( vSS


29/35

9'*: ./+ G'23E(.0 )"" \

K/).(.0Y/8 *'0. 2/ 4 N ,'(0"/0X B'/*@.0).(

*("#/ *"E()X ;


30/35

K/ )@. PQ #. @'N. /" 4.8 AX '/+ /"

7(.'*@ (.D"(Y/8 3'#0\

93'*: !') ;


31/35

5d'*: 0*'3.

%&'33b ' 0D.*2'320) ).'& *'/ +.&"/0)('). 2) )"

' ?C u"E(/'320)

B.+2E&b ' 8'/8 "G *("":0 *'/ )':. ' G.#

&2332"/ 7.G"(. )@.- 8.) *'E8@) ]'(8.b 0*'3.0 )" /2/. s )./ `8E(.0 '/+ G"(*.0

2/+E0)(- '*Y"/

B"0) "G )@. +20*E00.+ 'd'*:0 '(. J&.+2E&L

J]'(8.L &28@) 7. *"/)'2/.+ E02/8 '/'3-Y*0

93'*: !') ;


32/35

93'*: !') ;

f@') +".0 ABC @"3+ G"( )@. P%5j

K) 3"":0 32:. )@. .a.*)0 "G )@. 32'7232)- 0@2[#233 7. &2Y8').+ 7- 4.8 AX 4.8 yX p )@. 1.+

B'/- 7'/:0 &'- E0. *@2DH'/+H028/')E(.X '02/ %2/8'D"(.

6"/0E&.( D(").*Y"/ &28@) 0Y33 7.E/+.(&2/.+ 7- D'-&./) 2//"N'Y"/X .w8w&"N. G("& *(.+2) *'(+0 )" ,KF +.72)X "(D@"/. D'-&./)0

ABC #2)@ 3.00 32'7232)- 0@2[ #233 7. '/2/).(.0Y/8 /')E('3 .kD.(2&./)Z


33/35

9("'+.( 3.00"/0

l"N.(/'/*. ') 83"7'3 0*'3. 20 @'(+

ABC6" 3'(8.3- 0ED.(0.+.+ 7- N./+"( 3"77- \

1.')E(2Y0 *'/ 7(.': '/-)@2/8Z

K00E.(0X '*hE2(.(0 @'N. +2a.(./) 2/).(.0)0R.N./ 2G +.D'()&./)0 "G )@. 0'&. 7'/:W

F"H"/. (.D(.0./)0 )@. D""( *"/0E&.(

Q.-b D("D.( +"*E&./)'Y"/X 2/*3E+2/8 7(.'*@

/"Y`*'Y"/ '/+ (.0D"/0273. NE3/.('7232)-+20*3"0E(. RFr? )@. AP FK% M2(.*YN.ZW

93'*: !') ;


34/35

93'*: !') ;

B"(. \

rE( ; KAAA %.*E(2)- p ,(2N'*- D'D.( "/ )@.D(.D3'- 'd'*:

rE( ;


35/35

93'*: !') ;

Us 14 Anderson How Smartcard Payment Systems Fail

Documents

Transcript of Us 14 Anderson How Smartcard Payment Systems Fail