Skip to content
Research Article Open access CC BY 4.0

Formal Analysis of MCAP Protocol Against Replay Attack

Shadi Nashwan, Bandar M. Alshammari

Journal of Advances in Mathematics and Computer Science · pp. 1–14 · Published 10 May 2017

10.9734/BJMCS/2017/32744

Abstract

Replay attack is considered a common attacking technique that is used by adversaries to gain access to confidential information. Several approaches have been proposed to prevent replay attack in security-critical systems such as Automated Teller Machines (ATM) systems. Among those approaches is a recent one called the Mutual Chain Authentication Protocol for the Saudi Payments Network transactions (MCAP). This protocol aims to allow Saudi banking systems to overcome existing weaknesses in the currently used Two-Factor Authentication (2FA) protocols. In this paper, we analyze and verify the recent MCAP authentication protocol against replay attacks. Therefore, we examine the mutual authentication between the ATM Terminal, Sponsoring Banks (SBAT), Saudi Payments Network (SPAN) and the Issuing of Financial Bank (CIFI). The paper also provides a formal analysis of the MCAP to conduct formal proofs of the MCAP protocols against replay attacks.

ATM Systems SPAN Networks Mutual Chain Authentication Protocol (MCAP); replay attack.

References (28)

  1. 1 Authenticated Key Exchange Secure against Dictionary Attacks [DOI]
  2. 2 Cryptography and Network Security [DOI]
  3. 3 JOURNAL OF COMPUTER SCIENCE AND TECHNOLOGY [DOI]
  4. 4 A new authenticated key agreement for session initiation protocol [DOI]
  5. 5 Securing passwords against dictionary attacks [DOI]
  6. 6 Performance and security enhanced authentication and key agreement protocol for SAE/LTE network [DOI]
  7. 7 Coping with packet replay attacks in wireless networks [DOI]
  8. 8 A new security model to prevent denial‐of‐service attacks and violation of availability in wireless networks [DOI]
  9. 9 Effective allied network security system based on designed scheme with conditional legitimate probability against distributed network attacks and intrusions [DOI]
  10. 10 A quantitative study of authentication and QoS in wireless IP networks [DOI]
  11. 11 Security Analysis of the Kerberos Protocol Using BAN Logic [DOI]
  12. 12 Cryptanalysis of an efficient three‐party password‐based key exchange scheme [DOI]
  13. 13 Hash-based RFID mutual authentication protocol
  14. 14 A New Hybrid Approach of Symmetric/Asymmetric Authentication Protocol for Future Mobile Networks [DOI]
  15. 15 A Reliable ATM Protocol and Comparative Analysis on Various Parameters with Other ATM Protocols [DOI]
  16. 16 Deniable Authentication Protocol Resisting Man-In-The-Middle Attack [DOI]
  17. 17 Mutual Chain Authentication Protocol for SPAN Transactions in Saudi Arabian Banking [DOI]
  18. 18 " EFFICIENCY AND EFFECTIVENESS ANALYSIS OVER ECC-BASED DIRECT AND INDIRECT AUTHENTICATION PROTOCOLS: AN EXTENSIVE COMPARATIVE STUDY" [DOI]
  19. 19 Toward efficient protocol design through protocol profiling and performance assessment: using formal verification in a different context [DOI]
  20. 20 Formal Analysis of A Novel Mutual Authentication and Key Agreement Protocol
  21. 21 Hash-Based Password Authentication Protocol Against Phishing and Pharming Attacks [DOI]
  22. 22 Formal Analysis of Information Card Federated Identity-Management Protocol∗
  23. 23 International Journal of Innovative Research in Science, Engineering and Technology [DOI]
  24. 24 International Journal of Security and Its Applications [DOI]
  25. 25 International Journal of Computer and Communication Engineering [DOI]
  26. 26 2009 6th Annual IEEE Communications Society Conference on Sensor, Mesh and Ad Hoc Communications and Networks [DOI]
  27. 27 International Journal of Communication and Computer Technologies [DOI]
  28. 28 ICTACT Journal on Communication Technology [DOI]

Cited by 16

Fully Authentication Services Scheme for NFC Mobile Payment Systems

Munefah Alshammari, Shadi Nashwan · Intelligent Automation & Soft Computing · 2022

Analysis of the Desynchronization Attack Impact on the E2EA Scheme

Shadi Nashwan · Computer Systems Science and Engineering · 2022

Secure and Anonymous Three-Factor Authentication Scheme for Remote Healthcare Systems

Munayfah Alanazi, Shadi Nashwan · Computer Systems Science and Engineering · 2022

Secure Authentication Scheme Using Diffie–Hellman Key Agreement for Smart IoT Irrigation Systems

Shadi Nashwan · Electronics · 2022

An Analytic Model for Reducing Authentication Signaling Traffic in an End-to-End Authentication Scheme

Shadi Nashwan, Imad I. H. Nashwan · Sensors · 2021

An End-to-End Authentication Scheme for Healthcare IoT Systems Using WMSN

Shadi Nashwan · Computers, Materials & Continua · 2021

Showing 6 of 16 known citations — external sources report more than can currently be individually listed.

Article metrics

Real usage data collected on this platform.

17

Page views

0

PDF downloads

2

Outbound clicks

16

Citations

Views over time

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

Traffic sources

Referring site, by host.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.