ICカード利用システムにおいて新たに顕現化した中間者攻撃とその対策

Size: px

Start display at page:

Download "ICカード利用システムにおいて新たに顕現化した中間者攻撃とその対策"

りさこおおふさ
5 years ago
Views:

1 IC IC EMV EMV ICIC IC IC EMV IC EMV IC //

2 1 IC EMV 1 EMV EMVCo IC 36% 10 IC 65% 1, SEPA Single Euro Payments Area IC IC 3 EMV 4 EMV IC IC IC Man-in-the-Middle Attack IC IC 2007 IC IC Adida et al. [2006] Drimer and Murdoch [2007] Murdoch et al. [2010] Rosa [2010] Barisani et al. [2011] EMVCo EMV IC 5 1 EMV Book 1 4EMVCo [2008a, b, c, d] EMV Book 1, 1 2 EMVCo EMVCo American Express JCB MasterCard Visa EMVCo [2011a] 3SEPA IC IC % POS ATM 96%European Payments Council [2011] % 5,600 IC ATM % 11.4 IC ATM , % IC Murdoch et al. [2010] EMVCo EMVCo [2010] Barisani et al. [2011] EMVCo IC 108 /2012.7

3 IC EMV IC 2 1 PIN: Personal Identification Number PIN 1 PIN PIN PIN Adida et al. [2006] ATM ATM ATM 2 PIN PIN EMV EMV EMV EMV IC EMV... EMVCo [2011b] 109

4 1 IC 1 IC EMV IC IC EMV IC EMV VISA MasterCard JCB 6 IC IC EMV IC 1 IC IC IC PIN PIN ATM CAT 7 6 VISA VIS: Visa Integrated Circuit Card Specification Visa International [2001a, b] 7 CAT: Credit Authorization Terminal POS Point- Of-Sale 110 /2012.7

5 IC 2 IC EMV IC EMV EMV IC EMV 3 EMV EMV Card Authentication Cardholder Verification 8 AC: Application Cryptogram AC generation AC AC EMV IC EMV 111

6 EMV AC 3 10 SDA: Static Data Authentication DDA: Dynamic Data Authentication AC CDA: Combined DDA/ Application Cryptogram generation AC AC AC AC AC EMV TSI: Transaction Status Information TVR: Terminal Verification ResultsTSI TVR EMV 2 10 EMV Book 3, /2012.7

7 IC 2 CVM 1 PIN 3, ,000 3 PIN 3,000 3 CVM CVM: Cardholder Verification MethodCVM 2 CVM x 3 CVM CVM 1 EMV PIN PIN PIN EMV 113

8 4 TSI TVR CVMR PIN PIN PIN PIN PIN 12 PIN PIN PIN PIN PIN Try Counter PIN 13 PIN PIN PIN PIN PIN PIN PIN PIN PIN PIN TSI TVR CVMR: CVM Results 4 IAD: Issuer Application DataEMV Book 3, Annex A1 AC AC AC EMV PIN Try Counter 114 /2012.7

9 IC AC AC 3 AC AC AC 5 CID: Cryptogram Information Data CID 14 AC EMV AC AC AC 5 AC カード固有鍵カード端末ネットワークホストシステム 3 セッション鍵の生成 2 カード内のデータ 1 端末内のデータ 6 カード固有鍵セッション鍵 4AC 生成 5 カード内のデータ AC 7 セッション鍵の生成 8AC 検証セッション鍵合格不合格 AC

10 15 AC EMV AC TVR TSI CVMR Book 2, AC EMV AC AC PIN EMV AC PIN 3 EMV 2 1 EMV Adida et al. [2006] Murdoch et al. [2010] Barisani et al. [2011] /2012.7

11 IC PIN PIN PIN Murdoch et al. [2010] PIN PIN Barisani et al. [2011] Adida et al. [2006] PIN 3 2 Barisani et al. [2011] PIN 3 3 Adida et al. [2006] PIN PIN Murdoch et al. [2010] PIN PIN

12 PIN PIN AC PIN PIN PIN PIN 6 CVMR 7IAD CVMR 6 7 EMV CVMR CVMR AC EMV EMV CVMR EMV Book 4, IAD EMV AC AC IAD Book 2, IAD IAD EMV Book 4, PIN PIN 7 Step 1 Step 2 Step 3 PIN 118 /2012.7

13 IC 7 PIN Step 1 Step2 PIN Step 6 AC PIN Step 4 PINPIN Step 3 PIN PIN Step 5 PIN PIN Step 4 PIN PIN PIN Step 5 TSI PIN CVMR PIN PIN Step 6 AC Murdoch et al. [2010] Rosa [2010] Murdoch et al. [2010] Murdoch et al. [2010] BBC [2010] 119

14 8 PIN Murdoch et al. [2010] Figure 4 PIN Murdoch et al. [2010] Rosa [2010] PIN PIN PIN PIN Try Counter 3 PIN PIN Rosa [2010] CID CID 3 Barisani et al. [2011] PIN Barisani et al. [2011] PIN PIN 1 PIN 2 1 PIN /2012.7

15 IC 1 PIN PIN PIN PIN PIN 1 Barisani et al. [2011] PIN PIN PIN 10 PIN PIN 2 PIN PIN Barisani et al. [2011] PIN PIN Step 1 Step 2 CVM CVM PIN CVM PIN Step 3 CVM Step 3 CVM 121

16 9 Barisani et al. [2011] PIN 1 Step 1 Step 2 CVM CVM Step 3 Step 4 PIN PIN PIN 1PIN PIN AC PIN 2PIN PIN AC PIN PIN PIN Step 4 CVM PIN PIN PIN Step 4 PIN 1 Barisani et al. [2011] Step 4 PIN PIN PIN PIN PIN AC 18 CVM PIN 122 /2012.7

17 IC 2 PIN Step 2 PIN PIN CVM PIN CVM PIN PIN AC PIN 2 PIN PIN 19 PIN 4 Adida et al. [2006] PIN Adida et al. [2006] PIN PIN PIN PIN PIN PIN PIN 20 EMV 21 Murdoch et al. [2010] PIN PIN 5 4 PIN 123

18 Adida et al. [2006] PIN Adida et al. [2006] PIN PIN PIN Adida et al. [2006] PIN Adida et al. [2006] PIN 10 Step 1 1 Step Step Adida et al. [2006] PIN 1 2 Step 1 Step 2 Step 3 PIN Step 4 PIN PIN PIN PIN PIN PIN PIN Step 5 AC(2) /2012.7

19 IC Step 4 PIN PIN 2 PIN PIN PIN PIN 2 PIN PIN 2 PIN 2 PIN Step 5 2 AC Drimer and Murdoch [2007] 4 PIN Barisani et al. [2011] PIN Adida et al. [2006] PIN 1 3 PIN PIN PIN Adida et al. [2006] PIN a 125

20 11 41 PIN42 PIN Barisani et al. [2011] 43 Adida et al. [2006] 44 b 23 c 24 Barisani et al. [2011] PIN PIN Barisani et al. [2011] PIN PIN PIN Murdoch [2009] Murdoch et al. [2010] CDA AC EMV PIN /2012.7

21 IC PIN PIN PIN EMV CVMR 2 3. IAD PIN 25 EMV IAD IAD CVMR IAD IAD IAD CVMR IAD IAD AC AC PIN 42. AC42. CDA CID CID CDA 25 VISA VIS Visa International [2001a] Appendix A.1 CCD Common Core Definition Book 3, Annex C7.3 *** *CCD EMV EMVCo [2008a, b, c, d]emv CPA (Common Payment Application) EMVCo [2005] ** VIS CCD IAD CVR: Cardholder Verification Results CVR 127

22 CVMR CVMR IAD CVMR 26 CVMR CVMR 27 EMV a b CVMR CDA CDA AC AC AC 4 2. AC IAD CVMR AC 26 DDOL: Dynamic Data Authentication Data Object List CVMR DDOL CVMR 27 CVMR CVMR 128 /2012.7

23 IC IAD CVMR 28 CID CID IAD CVMR AC IAD CID AC 27 IAD CVMR AC IAD CVMR AC AC IAD CVMR CID 1 CDA CID EMV CDA AC EMV CID PIN AC 13 AC CDA 3 Barisani et al. [2011] PIN Barisani et al. [2011] PIN PIN PIN PIN Barisani et al. [2011] PIN PIN PIN 28 AC CDA CDOL: Card Risk Management Data Object List AC CDA CVMR CDOL CVMR 129

24 13 AC CDA CVMR AC IAD CVMR AC IAD CVMR CID CDA AC IAD CVMR 14 Barisani et al. [2011] PIN PIN PIN 43. PIN PIN 43. PIN 43. PIN PIN 14 CVM PIN a bc PIN 130 /2012.7

25 IC TVR EMV a c EMV TVR Book 3, 10.5 c TVR PIN PIN PIN 29 PIN PIN PIN PIN PIN 30 PIN Barisani et al. [2011] PIN PIN 1 PIN CVM 29 Terminal Capabilities Book 4, Annex A2 30 PIN EMV PIN Issuer Script ProcessingPIN Change/Unblock 131

26 31 32 Barisani et al. [2011] PIN PIN PIN PIN 4 Adida et al. [2006] PIN Adida et al. [2006] PIN PIN CVM PIN PIN 32 CVM 132 /2012.7

27 IC Drimer and Murdoch [2007] 1 Adida et al. [2006] PIN Man-in-the-Middle Defense Anderson and Bond [2006] Drimer and Murdoch [2007] Choudary [2010] 33 PC LED 34 PC PC PC 133

28 1 2 2 Drimer and Murdoch [2007] ATM a b c 15 2 ATM ATM ATM PIN 5, 9, 10 PIN Barisani et al. 134 /2012.7

29 IC 15 PIN PIN Barisani et al. [2011] Adida et al. [2006] CVMR IAD CVMR 7 PIN 5 PIN1 9 PIN PIN 10 2 * PIN 12 PIN PIN * PIN PIN [2011] PIN Adida et al. [2006] PIN

30 16 CDA PIN PIN Barisani et al. [2011] Adida et al. [2006] 3 16 PIN CDA Barisani et al. [2011] PIN Adida et al. [2006] PIN /2012.7

31 IC 5 EMV AC CVM 35 Barisani et al. [2011] PIN CVM EMV CVM 36 IC 6 Barisani et al. [2011] PIN PIN PIN PIN PIN 6 IC 3 3 IC 35 CDA AC 36 CVM EMV Book 3,

32 Murdoch et al. [2010] EMV /2012.7

33 IC No IC 2010 Adida, Ben, Mike Bond, Jolyon Clulow, Amerson Lin, Steven Murdoch, and Ron Rivest, Phish and Chips (Traditional and New Recipes for Attacking EMV), Cambridge Security Protocols Workshop, Anderson, Ross, and Mike Bond, The Man-in-the-Middle Defence, Cambridge Security Protocols Workshop, Barisani, Andrea, Daniele Bianco, Adam Laurie, and Zac Franken, Chip & PIN is definitely broken, CanSecWest, BBC, Flaws in chip and pin bank card security identified, 11 February news.bbc.co.uk/2/hi/science/nature/ stm Choudary, Omar S., The Smart Card Detective: a hand-held EMV interceptor, Master Thesis, University of Cambridge, Drimer, Saar, and Steven J. Murdoch, Keep your enemies close: distance bounding against smartcard relay attacks, USENIX Security Symposium, EMVCo, Common Payment Application Specification, EMV Integrated Circuit Card Specifications for Payment Systems, Version 1.0, 2005., Book 1 Application Independent ICC to Terminal Interface Requirements, EMV Integrated Circuit Card Specifications for Payment Systems, Version 4.2, EMVCo, 2008a., Book 2 Security and Key Management, EMV Integrated Circuit Card Specifications for Payment Systems, Version 4.2, EMVCo, 2008b., Book 3 Application Specification, EMV Integrated Circuit Card Specifications for Payment Systems, Version 4.2, EMVCo, 2008c., Book 4 Cardholder, Attendant, and Acquirer Interface Requirements, EMV Integrated Circuit Card Specifications for Payment Systems, Version 4.2, EMVCo, 2008d., Response from EMVCo to the Cambridge University Report on Chip and PIN vulnerabilities, 2010., A Guide to EMV, 2011a., Response from EMVCo to the Inverse Path Paper Chip and PIN is Definitely 139

34 Broken March 2011, 2011b. European Payments Council, SEPA for cards: tracking EMV roll-out, EPC Newsletter, Issue 10, Murdoch, Steven J., Defending against wedge attacks in Chip and PIN, Light Blue Touchpaper, August 25th defending-against-wedge-attacks/ , Saar Drimer, Ross Anderson, and Mike Bond, Chip and PIN is Broken, 2010 IEEE Symposium on Security and Privacy, Rosa, Tomas, On the Chip & PIN Broken Attack-Experience Gained in Raiffeisenbank, Visa International, Visa Integrated Circuit Card Specification (VIS) Card Specification version 1.4.0, Visa Public, 2001a., Visa Integrated Circuit Card Specification (VIS) Terminal Specification version 1.4.0, Visa Public, 2001b. 140 /2012.7

ICカード利用システムにおいて新たに顕現化したPre-play attackとその対策

ICカード利用システムにおいて新たに顕現化したPre-play attackとその対策 IC Pre-play attack IC IC IC EMV EMV 1 IC IC Pre-play attack ATM Pre-play attack Pre-play attack IC EMV Pre-play attack... E-mail: hidemitsu.izawa@boj.or.jp E-mail: katsuhisa.hirokawa@boj.or.jp / /2015.10