Skip to content
Research Article Open access CC BY 4.0

Formal Analysis of MCAP Protocol Against Replay Attack

Shadi Nashwan, Bandar M. Alshammari

Journal of Advances in Mathematics and Computer Science · pp. 1–14 · Published 10 May 2017

10.9734/BJMCS/2017/32744

Abstract

Replay attack is considered a common attacking technique that is used by adversaries to gain access to confidential information. Several approaches have been proposed to prevent replay attack in security-critical systems such as Automated Teller Machines (ATM) systems. Among those approaches is a recent one called the Mutual Chain Authentication Protocol for the Saudi Payments Network transactions (MCAP). This protocol aims to allow Saudi banking systems to overcome existing weaknesses in the currently used Two-Factor Authentication (2FA) protocols. In this paper, we analyze and verify the recent MCAP authentication protocol against replay attacks. Therefore, we examine the mutual authentication between the ATM Terminal, Sponsoring Banks (SBAT), Saudi Payments Network (SPAN) and the Issuing of Financial Bank (CIFI). The paper also provides a formal analysis of the MCAP to conduct formal proofs of the MCAP protocols against replay attacks.

ATM Systems SPAN Networks Mutual Chain Authentication Protocol (MCAP); replay attack.

Cited by 6

Fully Authentication Services Scheme for NFC Mobile Payment Systems

Munefah Alshammari, Shadi Nashwan · Intelligent Automation & Soft Computing · 2022

Analysis of the Desynchronization Attack Impact on the E2EA Scheme

Shadi Nashwan · Computer Systems Science and Engineering · 2022

Secure and Anonymous Three-Factor Authentication Scheme for Remote Healthcare Systems

Munayfah Alanazi, Shadi Nashwan · Computer Systems Science and Engineering · 2022

An End-to-End Authentication Scheme for Healthcare IoT Systems Using WMSN

Shadi Nashwan · Computers, Materials & Continua · 2021

Article metrics

Real usage data collected on this platform.

0

Page views

0

PDF downloads

0

Outbound clicks

6

Citations

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

No views recorded yet.

Traffic sources

Referring site, by host.

No traffic recorded yet.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.