``Potential Misuse of NFC Enabled Mobile Phones with Embedded ...

More documents

Recommendations

Info

Part I . Security of NFC Secure Element (SE): ◮ controls the NFC based transactions, establishes the trust between service provider and the mobile phone. ◮ designed to provide a secure platform for containing sensitive applications and key material. ◮ The SE supports Java Card 2.2.1 (Java Card Open Platform), Global Platform 2.1.1 & Mifare Standard emulation. ◮ The mobile phone vendor allows SE “unlocking”, which sets the authentication keyset to a known public value.
Part I . Security of NFC Related Contactless Security Attacks: ◮ Contactless token skimmers and emulators currently exist, but a NFC phone platform offers distinct advantages in that it is a small, mobile device and more importantly that is has an acceptable form factor, i.e. it does not physically look like a skimmer or an emulator. ◮ Heydt-Benjamin et.al. 2007 (skimming, replay and relaying on payment systems). ◮ E-passport clones (Steve Boggan article in Times, August, 2008). ◮ Designs for hardware emulators for ISO 14443 tokens (Carluccio et.al., R. Verdult, 2006); & hardware skimmers, available for purchase (OpenPCD.org; HF RFID Demo Tag, IAIK, Graz). ◮ We demonstrate how a NFC mobile phone can be configured as a contactless reader which may be used as a contactless skimming tool, and how the attacker can use the gathered information to create a “clone” by emulating a token.
Page 1 and 2: “Potential Misuse of NFC Enabled
Page 3 and 4: Part I Part I Overview of NFC Enabl
Page 5: Part I . A functional view of the N
Page 9 and 10: Part II Part II Proposed Security A
Page 11 and 12: Part II Proposed Security Attacks N
Page 13 and 14: Part III Proposed Security Counterm
Page 15: Part IV Conclusions Conclusions ◮

``Potential Misuse of NFC Enabled Mobile Phones with Embedded ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?