security - EMV DDA 克隆

Question

有人可以澄清一下 DDA 如何保护 EMV 卡免受克隆吗

根据我到目前为止所学到的知识，终端会生成一个随机唯一编号并发送到卡

卡片会生成一个私钥/公钥，然后用私钥对卡片数据进行签名并发送给终端进行验证

这如何防止克隆？

标签： securityemv

Answer 1

Card will not generate private and public keys. Private and Public keys are encoded into the chip during personalization. First you need to understand what the terminal and card have in hand to understand this. Go through this answer.

Now that you know where each keys come from, during DDA, using the ICC private key, card will generate a certificate, and terminal will validate the certificate using ICC Public Key.

Detailed process is explained in EMV 4.3 Book 2 Security and Key Management, section 5 and 6. Download from here . Start reading from SDA and have the basis clear.