Secure firmware updates for point of sale terminals

Proceedings of the 10th International Conference on Cyber Warfare and Security, ICCWS 2015

Volumn , Issue , 2015, Pages 337-346

  Tsague, Hippolyte Djonon ^a   Van Der Merwe, Johannes ^a   Moabalobelo, Terrence ^a  

^a DSI CSIR Nanotechnology Innovation Centre   (South Africa)

Author keywords

Authenticity; Confidentiality; Firmware; Point of sale; Security; Upgrade

Indexed keywords

COMPUTER CRIME; FIRMWARE; SMART CARDS;

AUTHENTICITY; CONFIDENTIALITY; POINT OF SALE; SECURITY; UPGRADE;

POINT OF SALE TERMINALS;

EID: 84969142629     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. Amato F., 2008, Isr-evilgrade, viewed September 04, 2012,
2. Bellissimo A. et al., 2006. Secure Software Updates: Disappointments and New Challenges. In 1st USENIX Workshop on Hot Topics in Security. Vancouver, Canada, pp. 37
3. Brandman G., 2010. Patching the enterprise. ACM Queue.
4. Cappos J. et al., 2008. A Look in the Mirror: Attacks on Package Managers. In Proc. 15th ACM Conference on Computer and Communications Security. New York, NY, USA, pp. 565-574.
5. Dutta P. K. et al., 2006. Securing the Deluge Network Programming System. In IPSN Proceedings of the fifth international conference on Information processing in sensor networks. New York, NY, USA. pp. 326-333.
6. Dolev D. and Yao A.C., 1981, On the Security of Public Key Protocols. In IEEE 22nd Annual Symposium on Foundations of Computer Science, Stanford, CA, USA.
7. HART, 2007. Communication Foundation. Wireless HART Technical Data Sheet. Last viewed, September 25, 2012. Available:
8. Halevi S. and Krawczyk H., 2006. Strengthening Digital Signatures via Randomized Hashing. In Proceedings of the 26th Annual International Cryptology Conference (CRYPTO).
9. Hiroaki H. et al., 2008. POS Terminal Apparatus. Patent Application number: 11/170,084
10. Luk M. et al., 2007. Minisec: a Secure Sensor Network Communication Architecture. In IPSN'07: Proceedings of the 6th International Conference on Information Processing in Sensor Networks. New York, NY, USA. pp. 479-488.
11. Mendonca M. and Ferreira N., 2001. Secure Application Updates on Point of Sale Devices. Citeseer digital library
12. Nilsson D.K. et al., 2008. Key Management and Secure Software Updates in Wireless Process Control Environments. In Proceedings of the first ACM Conference on Wireless Network Security (WiSec).
13. National Institute of Standards and Technology, 2007. Randomized Hashing Digital Signatures Special Publication 800-106 Draft, 2007.
14. Raya M. et al., 2006. Securing Vehicular Communications," in IEEE Wireless Communications.
15. Samuel J. and Cappos J., 2009. Package Managers Still Vulnerable: How to Protect Your Systems. Login: Magazine.
16. Sandeep S. Kumar, 2006, Elliptic Curve Cryptography for Constrained Devices, Doktor-Ingenieur thesis, Ruhr-University Bochum, Germany
17. Shavit M. et al., 2007. Firmware Update over the Air (FOTA) for Automotive Industry. In Asia Pacific Automotive Engineering Conference, Hollywood, CA, USA.
18. William E. et al., 2009. Point of Sale System with Ability to Remotely Update Firmware. Patent application number: 20090037284.