Faculty of Information Technology, BUT

Publication Details

Authorizing card payments with PINs

CVRČEK Daniel, KRHOVJÁK Jan, KUMPOŠT Marek and MATYÁŠ Václav. Authorizing card payments with PINs. Computer, vol. 41, no. 2, pp. 64-68. ISSN 0018-9162.
Czech title
Authorizing card payments with PINs or Signatures? (Experimental Study)
journal article
Cvrček Daniel, doc. Ing., Ph.D. (DITS FIT BUT)
Krhovják Jan, Mgr. (FI MUNI)
Kumpošt Marek, RNDr., Ph.D. (DITS FIT BUT)
Matyáš Václav, prof. RNDr., M.Sc., Ph.D. (FI MUNI)
smart-card, PIN, chip, experiment, security, banking, payment
Chip & PIN is the name of the new technology supposed to considerably decrease fraud related to payment cards. While this is definitely true from the banks' point of view, what is not so clear are implications for customers - the ultimate card users. Introduction of smartcards within the Chip & PIN deployment exercise is quite likely the most extensive deployment of computers in the human history, with security as a ma jor aspect. We first review some of the most critical issues related to the introduction of Chip & PIN card payment authorization, and then discuss our two-phase experiment.1 Our experiment examined, in two phases, whether the introduction of this authorization method is advantageous for an opportunistic thief and whether the customer truly benefits from the Chip & PIN technology with respect to this opportunistic thief. This is, to our best knowledge, the first presentation of non-trivial field experiment results on the ease of PIN in-shop observation to the general public.
Computer, vol. 41, no. 2, ISSN 0018-9162
IEEE Computer Society Press
   author = "Daniel Cvr\v{c}ek and Jan Krhovj\'{a}k and Marek Kumpo\v{s}t and V\'{a}clav Maty\'{a}\v{s}",
   title = "Authorizing card payments with PINs",
   pages = "64--68",
   journal = "Computer",
   volume = 41,
   number = 2,
   year = 2008,
   ISSN = "0018-9162",
   language = "english",
   url = "https://www.fit.vut.cz/research/publication/8552"
Back to top