A Comparative Study of Card Not Present E-commerce Architectures with Card Schemes: What About Privacy?

A Plateaux (1) , P Lacharme (1) , S Vernois (1) , V Coquet (2) , Christophe Rosenberger (1)

1 Equipe SAFE - Laboratoire GREYC - UMR6072
2 Atos

Internet is increasingly used for card not present e-commerce ar-chitectures. Several protocols, such as 3D-Secure, have been proposed in the literature by Card schemes or academics. Even if some of them are deployed in real life, these solutions are not perfect considering data security and user's privacy. In this paper, we present a comparative study of existing solutions for card not present e-commerce solutions. We consider the main security and privacy trends of e-payment in order to make an objective comparison of existing solutions. This comparative study illustrates the need to consider privacy in deployed e-commerce architectures. This has never been more urgent with the recent release of the new specifications of 3D-secure.

Domaines: Cryptographie et sécurité [cs.CR]

A Plateaux, P Lacharme, S Vernois, V Coquet, Christophe Rosenberger. A Comparative Study of Card Not Present E-commerce Architectures with Card Schemes: What About Privacy?. Journal of information security and applications, 2018, 40, pp.103 - 110. ⟨10.1016/j.jisa.2018.01.007⟩. ⟨hal-01701657v2⟩