title: ÐÐ¾Ð´Ñ Ð¾Ð´ Ðº Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾Ð¹ Ð¾Ð±ÑÐ°Ð±Ð¾ÑÐºÐµ ÑÑÐ°Ð½Ð·Ð°ÐºÑÐ¸Ð¹ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½ÑÐ¼Ð¸ ÑÑÑÑÐ¾Ð¹ÑÑÐ²Ð°Ð¼Ð¸
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Secure transaction processing by mobile devices approach
Creators: name: ÐÐ¾Ð²Ð°Ð»ÐµÐ², ÐÐ»Ð°Ð´Ð¸Ð¼Ð¸Ñ
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2020
Subjects: ÐÐ½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÐµ ÑÐ¸ÑÑÐµÐ¼Ñ
ÐÐ½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ñ
Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ðµ ÑÑÐ°Ð½Ð·Ð°ÐºÑÐ¸Ð¹
Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÑ ÑÑÐ°Ð½Ð·Ð°ÐºÑÐ¸Ð¹
ÐºÐ¾Ð½ÑÐ¸Ð´ÐµÐ½ÑÐ¸Ð°Ð»ÑÐ½Ð¾ÑÑÑ ÐºÐ°ÑÑÐ¾ÑÐ½ÑÑ Ð´Ð°Ð½Ð½ÑÑ
Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½ÑÐµ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ
Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ
transactions processing
transactions security
card data confidentiality
mobile applications
web applications

description: ÐÐ°Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¿Ð¾ÑÐ²ÑÑÐµÐ½Ð° Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð´Ð°Ð½Ð½ÑÑ Ð¿Ð»Ð°ÑÐµÐ¶Ð½ÑÑ ÐºÐ°ÑÑ. Ð ÐºÐ°ÑÐµÑÑÐ²Ðµ ÑÐµÑÐµÐ½Ð¸Ñ Ð´Ð»Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾Ð³Ð¾ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ñ ÑÑÐ°Ð½Ð·Ð°ÐºÑÐ¸Ð¹ Ð±ÑÐ»Ð¸ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ñ: Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½Ð¾Ð³Ð¾ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ Ð´Ð»Ñ Ð¾Ð±ÑÐ°Ð±Ð¾ÑÐºÐ¸ ÑÑÐ°Ð½Ð·Ð°ÐºÑÐ¸Ð¹, Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿ ÑÐµÑÐ²ÐµÑÐ½Ð¾Ð¹ ÑÐ°ÑÑÐ¸ Ð´Ð»Ñ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½Ð¾Ð³Ð¾ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ, Ð° ÑÐ°ÐºÐ¶Ðµ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ Ð´Ð»Ñ Ð°Ð´Ð¼Ð¸Ð½Ð¸ÑÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½Ð¾Ð³Ð¾ ÑÐµÑÐµÐ½Ð¸Ñ. Ð ÐºÐ°ÑÐµÑÑÐ²Ðµ Ð¿ÑÐ¾ÑÐµÐ´ÑÑÑ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ ÐºÐ»ÑÑÐ°Ð¼Ð¸, Ð·Ð°Ð³ÑÑÐ¶Ð°ÐµÐ¼ÑÐ¼Ð¸ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿Ð¾Ð¼ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½Ð¾Ð³Ð¾ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ, Ð±ÑÐ»Ð° Ð²ÑÐ±ÑÐ°Ð½Ð° Ð¿ÑÐ¾ÑÐµÐ´ÑÑÐ° Session key/Master key Ñ ÑÑÐµÑÑÑÐ¾Ð²Ð½ÐµÐ²Ð¾Ð¹ Ð¸ÐµÑÐ°ÑÑÐ¸ÐµÐ¹ ÐºÑÐ¸Ð¿ÑÐ¾Ð³ÑÐ°ÑÐ¸ÑÐµÑÐºÐ¸Ñ ÐºÐ»ÑÑÐµÐ¹. ÐÐ»Ñ ÑÑÐ°Ð½ÐµÐ½Ð¸Ñ ÐºÐ¾Ð½ÑÐ¸Ð´ÐµÐ½ÑÐ¸Ð°Ð»ÑÐ½ÑÑ Ð´Ð°Ð½Ð½ÑÑ Ð² ÑÐµÑÐ²ÐµÑÐ½Ð¾Ð¹ ÑÐ°ÑÑÐ¸ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½Ð¾Ð³Ð¾ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ Ð±ÑÐ»Ð° Ð²ÑÐ±ÑÐ°Ð½Ð° Ð´Ð²ÑÑÑÑÐ¾Ð²Ð½ÐµÐ²Ð°Ñ Ð¸ÐµÑÐ°ÑÑÐ¸Ñ ÐºÐ»ÑÑÐµÐ¹, Ð²ÐºÐ»ÑÑÐ°ÑÑÐ°Ñ Ð² ÑÐµÐ±Ñ Key encryption key Ð¸ Data encryption key. ÐÑÐ»Ð¾ ÑÑÐ¾ÑÐ¼ÑÐ»Ð¸ÑÐ¾Ð²Ð°Ð½Ð¾ ÑÑÐ»Ð¾Ð²Ð¸Ðµ Ð´Ð»Ñ ÑÑÐ°Ð½ÐµÐ½Ð¸Ñ ÐºÐ»ÑÑÐ°, Ð½Ð°ÑÐ¾Ð´ÑÑÐµÐ³Ð¾ÑÑ Ð½Ð° Ð²ÐµÑÑÐ½ÐµÐ¼ ÑÑÐ¾Ð²Ð½Ðµ Ð¸ÐµÑÐ°ÑÑÐ¸Ð¸: Key encryption key. ÐÑÐ»Ð° Ð²ÑÐ²ÐµÐ´ÐµÐ½Ð° ÑÐ¾ÑÐ¼ÑÐ»Ð°, Ð¿Ð¾ ÐºÐ¾ÑÐ¾ÑÐ¾Ð¹ Ð¼Ð¾Ð¶Ð½Ð¾ Ð¾Ð¿ÑÐµÐ´ÐµÐ»Ð¸ÑÑ, ÑÐºÐ¾Ð»ÑÐºÐ¾ Ð½ÐµÐ¾Ð±ÑÐ¾Ð´Ð¸Ð¼Ð¾ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°ÑÑ ÐºÑÐ¸Ð¿ÑÐ¾Ð³ÑÐ°ÑÐ¸ÑÐµÑÐºÐ¸Ñ ÐºÐ»ÑÑÐµÐ¹ Ð´Ð»Ñ ÑÐ¸ÑÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð´Ð°Ð½Ð½ÑÑ Ð² Ð·Ð°Ð²Ð¸ÑÐ¸Ð¼Ð¾ÑÑÐ¸ Ð¾Ñ Ð¿ÑÐµÐ´Ð¿Ð¾Ð»Ð°Ð³Ð°ÐµÐ¼Ð¾Ð³Ð¾ ÐºÐ¾Ð»Ð¸ÑÐµÑÑÐ²Ð° ÑÑÐ°Ð½Ð·Ð°ÐºÑÐ¸Ð¹ Ð² Ð³Ð¾Ð´. ÐÑÐ»Ð° ÑÐµÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð° ÑÐ¾Ð»ÐµÐ²Ð°Ñ Ð¼Ð¾Ð´ÐµÐ»Ñ Ð´Ð¾ÑÑÑÐ¿Ð° ÐºÐ°Ðº Ð´Ð»Ñ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½Ð¾Ð³Ð¾ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ, ÑÐ°Ðº Ð¸ Ð´Ð»Ñ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ. ÐÐ»Ñ Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½Ð¾Ð³Ð¾ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ, ÐºÐ¾ÑÐ¾ÑÐ¾Ðµ ÑÐ²Ð»ÑÐµÑÑÑ Ð½Ð°Ð¸Ð±Ð¾Ð»ÐµÐµ Ð½ÐµÐ´Ð¾Ð²ÐµÑÐµÐ½Ð½Ð¾Ð¹ ÑÑÑÐ½Ð¾ÑÑÑÑ Ð² ÑÐ°Ð·ÑÐ°Ð±Ð°ÑÑÐ²Ð°ÐµÐ¼Ð¾Ð¼ ÑÐµÑÐµÐ½Ð¸Ð¸ Ð±ÑÐ»Ð° ÑÐµÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð° Ð´Ð²ÑÑÑÐ°ÐºÑÐ¾ÑÐ½Ð°Ñ Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ñ. Ð ÐºÐ¾Ð½ÑÐµ Ð¿ÑÐ¾Ð´ÐµÐ»Ð°Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» Ð¿ÑÐ¾ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½ÑÐ¹ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿ ÑÐµÑÐµÐ½Ð¸Ñ Ð¸ ÑÑÐ¾ÑÐ¼ÑÐ»Ð¸ÑÐ¾Ð²Ð°Ð½Ñ Ð´ÐµÑÐ°Ð»ÑÐ½ÑÐµ ÑÑÐµÐ±Ð¾Ð²Ð°Ð½Ð¸Ñ Ð´Ð»Ñ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÑÑÐ°Ð½Ð·Ð°ÐºÑÐ¸Ð¹, Ð¿ÑÐ¾Ð²Ð¾Ð´Ð¸Ð¼ÑÑ ÑÐµÑÐµÐ· Ð¼Ð¾Ð±Ð¸Ð»ÑÐ½Ð¾Ðµ ÑÑÑÑÐ¾Ð¹ÑÑÐ²Ð¾.
description: This work is devoted to the study of the security of payment card data. The following solutions were developed as a solution for secure transactions: a prototype mobile application for processing transactions, a prototype server part for a mobile application, and a prototype web application for administering the developed solution. As a procedure for managing keys downloaded by the prototype of a mobile application, the Session key / Master key procedure with a three-level hierarchy of cryptographic keys was chosen. To store sensitive data in the server part of the mobile application, a two-level key hierarchy was chosen, including Key encryption key and Data encryption key. A condition was formulated for storing a key located at the top level of the hierarchy: Key encryption key. A formula was derived by which it is possible to determine how much cryptographic keys are needed to encrypt data, depending on the estimated number of transactions per year. An access role model was implemented for both the mobile application and the web application. For a mobile application, which is the most untrusted entity, two-factor authentication was implemented in the developed solution. At the end of the work, the developed prototype of the solution was tested and detailed requirements were formulated to ensure the security of transactions conducted through the mobile device.