TL;DR: The field of security of smart contract programming is reviewed and a comprehensive taxonomy of all known security issues is provided by a thorough review of known vulnerabilities by assessing their effectiveness and accuracy on known issues on a representative sample of vulnerable contracts.
Abstract: Ethereum provides an open, global computing platform, that allows the exchange of value, automated and enforced workflows, and the development of general purpose applications and libraries. Smart contracts present a foundation for the computational capabilities of the Ethereum network. Motivated by the known security breaches and recurring financial losses due to smart contracts vulnerabilities, we review the field of security of smart contract programming and provide a comprehensive taxonomy of all known security issues. We achieve that by a thorough review of known vulnerabilities. In this work we also review the security code analysis tools used to identify known vulnerabilities. We conduct the investigation of security code analysis tools on Ethereum by assessing their effectiveness and accuracy on known issues on a representative sample of vulnerable contracts. We have used 21 clean, and 24 vulnerable contracts and four security tools: Oyente, Securify, Remix, and SmartCheck, to assess the quality of contemporary security analysis tools specific to Ethereum. The results indicate that there are overall inconsistencies between the tools in respect to different security properties. SmartCheck outperformed the other tools in terms of effectiveness, whereas Oyente performed the best in terms of accuracy. Furthermore, based on the limitations we identified, we propose improvements within the user interfaces, interpretation of results, and, most importantly, an enhanced list for vulnerability checks.
TL;DR: In this paper, a wireless device is enabled for services enrollment for a financial account card and stores the card data in a memory associated with the wireless device, which is used to determine a service associated with a transaction based on the line-item data and initiate enrollment in the determined service using the consumer identification data.
Abstract: A wireless device is enabled for services enrollment. The wireless device receives card data for a financial account card and stores the card data in a memory associated with the wireless device. The wireless device also receives consumer identification data associated with the financial account card and stores the consumer identification data in the memory associated with the wireless device. Responsive to using the card data in a transaction at a merchant, the wireless device receives transaction line-item data from a computing system associated with the merchant. The wireless device determines a service associated with the transaction based on the line-item data and initiates enrollment in the determined service using the consumer identification data.
TL;DR: In this article, a bank card transaction processing method is described, where a random seed is used for initializing a binding relationship between the bank card number and user information and the bank server conducts encrypting calculation on the random seed, the bank number and the security code to generate a two-dimensional code.
Abstract: The embodiment of the invention discloses a bank card transaction processing method, a bank card and a bank server, and relates to the field of electronic finance. The security of using the back cardis improved. The method comprises the steps that a random seed, a bank card number, and a security code of the bank card number are obtained by the bank card, wherein the random seed is used for initializing a binding relationship between the bank card number and user information; the bank card conducts encrypting calculation on the random seed, the bank card number and the security code to generate a two-dimensional code; the bank card displays the two-dimensional code; a client side scans the two-dimensional code to obtain an information abstract of the two-dimensional code and sends the information abstract of the two-dimensional code to the bank server; if the bank server matches the information abstract of the two-dimensional code to a pre-stored information abstract, a user corresponding to the bank card number matched with the information abstract of the two-dimensional code is determined as a legal user.
TL;DR: In this article, a dynamic security code generator may generate one or more dynamic security codes and transmit the plurality of codes to a portable consumer device, where the portable device may display the dynamic code and the account authorization system may transmit an authorization message to the merchant.
Abstract: Systems and methods for processing payments using a dynamic security code are provided. A dynamic security code generator may generate one or more dynamic security codes and transmit the plurality of dynamic security codes to a portable consumer device. The portable consumer device may display the dynamic security code. A merchant may transmit a transaction request to the account authorization system including the dynamic security code in a card security code field. The account authorization system may compare the transaction account number and dynamic security code in the transaction request to a transaction account number and dynamic security code stored in a database. The account authorization system may transmit an authorization message to the merchant.
TL;DR: The legal framework used by the United Mexican States government to shift the National Maritime Authority from a civil institution toward a military one (Ministry of Marine, MMAR) provides the starting point of the analysis at hand, and extensive reforms to several laws are still necessary to ensure an improved maritime security apparatus.
Abstract: The International Maritime Organization’s (IMO) member-States have a strong and invested interest in securing their energy supply routes and interrelated ports; preventing incidents in relation to this type of infrastructure is essential for commerce and requires careful planning and action. Apart from ensuring the optimal use of energy resources through energy efficiency initiatives and policies, eliminating (or, at least reducing) losses that are related to theft and/or subversive actions associated with terrorism is essential for national security reasons. The legal framework used by the United Mexican States government to shift the National Maritime Authority from a civil institution (Ministry of Communications and Transport, MCT) toward a military one (Ministry of Marine, MMAR) provides the starting point of the analysis at hand. Previous failures of the country’s Maritime Designated Authority are associated with an extended number of security incidents and various accidents. In an attempt to improve the country’s maritime safety and security regimes, a relevant Presidential Decree—approved in December 2016—transferred the oversight of all Masters of Harbours from MCT to MMAR. Research activities on the field testify that this initiative achieved high acceptance rates between the four pillars of representatives of authorities/institutions directly related to duties and operations within these two important domains, a prerequisite for success. Apart from the recent Decree, extensive reforms to several laws are still necessary to ensure an improved maritime security apparatus. The National Congress has focused heavily on port security and has rather neglected to consider that part of the International Ship and Port Facility Security Code (ISPS Code) regarding Ship Security Plans and all its contents related to vessels since the previous reform in 2014. It is also noteworthy that the Decree is unnecessarily complicating the tasks of the Maritime Authority; while it designates the MMAR as the National Maritime Authority, it provides the tasks of Port Authority (including port-state’s privileges and obligations) to MCT. This could potentially impact negatively on the conduct of operations in the future and indicates a need for improvement in the implementation process of IMO’s instruments into national legislation. Amendments to regulations concerning security of Mobile Offshore Drilling Units (MODUs) and other offshore installations should also be considered for inclusion in the types of vessels obliged to comply with the ISPS Code, since a poor security situation in that category would also strongly affect the Mexican oil energy market.
TL;DR: In this paper, a bank card privacy information hiding method was proposed, where the verification information of the bank card was passed by a user based on verification, so that the privacy information of any user involved in the card can be protected, such as the card number, the validity period, the security code and the like on the card surface.
Abstract: The application provides a bank card privacy information hiding method, a bank card and a computer readable storage medium, acquiring verification information of the bank card; if the verification information passes a verification, displaying privacy information of the bank card on a display screen of the bank card. According to the scheme, the privacy information of the bank card is displayed to a user based on verification, so that the privacy information of any user involved in the bank card can be protected, such as the card number, the validity period, the security code and the like on the card surface are displayed on the card surface after verification is passed, thereby ensuring the use safety of the bank card and avoiding user loss.
TL;DR: In this paper, a security code generation method based on big data and a verification method is presented. But the method is uncoupled from the actual marketing activity, and the content of the security code is empty before a formal input, and no losses are caused even during the transportation or printing process.
Abstract: The embodiment of the invention discloses a security code generation method based on big data and a verification method thereof The security code generation method comprises the following steps: randomly extracting a predetermined number of characters as a symbol combination from a predetermined character set; dividing the symbol combination into a plurality of copies, which are respectively transmitted to a target address; and printing a security code received at the target address, wherein the security code can set the corresponding active content Based on the analysis result of the big data, the pre-made security code is uncoupled from the actual marketing activity; the content of the security code is empty before a formal input, so that the use process of the security code is more secure, and no losses are caused even leaking during the transportation or printing process
TL;DR: In this article, a terminal security method of layered information management, which is mainly applied to a user terminal to ensure access security of the user terminal and internal data security, is presented.
Abstract: The invention relates to a terminal security method of layered information management, which is mainly applied to a user terminal to ensure access security of the user terminal and internal data security. The method is divided into three parts: content data layered design, main security code and layered security code generation, user terminal operation and access, and internal data security protection. The invention also relates to a terminal security device for hierarchical information management, which comprises a hierarchical unit, a main security code unit, a hierarchical security code unit, an authentication unit, an access unit, a recording unit and an internal database.
TL;DR: This work will propose a scheme that is based on a security code that is dynamic, that is, the code will change every time the mobile device is used for a purchase.
Abstract: Credit cards use a security system where the personal identification number (PIN) is a constant. This presents a security vulnerability as this gives the attacker more time to find the PIN and defraud the bank. We will propose a scheme that is based on a security code that is dynamic, that is, the code will change every time the mobile device is used for a purchase. This system will not require more hardware, but rather, a few more lines of software. We believe that both consumers and banks will welcome the new system because it will eliminate the expense of a bank card by becoming a smart phone application. We also think that the increase in security from the software will greatly outweigh the extra cost of the software required for the system.