Card Emulation Research Articles

Implementation of Smart NFC Door Access System for Hotel Room

Security remains a top priority for those users in the hotel, even with the advent of innovative technological advances. This is because many tragic incidents, such as theft and crime, have occurred with unrestricted access. This paper proposes an intelligent door access system that would allow hotel guests to authenticate into their rooms without resorting to traditional closeness access methods. Therefore, research was conducted to solidify the understanding and refine the capabilities of the proposed system. This project aims to promote high-security aspects access system technology, which is Near-Field Communication with the use of application that have the function of simulated smart keys for explicit validation access. A Host-Card Emulator opens the opportunities for efficient financial benefit and the launch of a protective mechanism in the post-pandemic period. The suggested method was statistically and analytically accessed on hotel guests and staff from various hotels in Malaysia. The proposed system is a contactless NFC access control system that employs smartphone Host Card Emulation application technology to reduce the need for appropriate physical access, enhance security, and publicize the use of mobile access systems in the hospitality industry.

Mobile Payment Transaction Model with Robust Security in the NFC-HCE Ecosystem with Secure Elements on Smartphones

The Near Field Communication embedded (NFC-embedded) smartphone consists of two ecosystems, namely Near Field Communication Subscriber Identity Module Secure Element (NFC-SIM-SE) and Near Field Communication Host Card Emulation (NFC-HCE). NFC-SIM-SE places secure elements in smartphones, while NFC-HCE places secure elements in the cloud. In terms of security, the location of secure elements in the cloud is one of the weaknesses of NFC-HCE. The APL-SE transaction model is developed as a solution to improve transaction security with NFC-enabled mobile. This model moves the secure elements of the NFC-HCE ecosystem from the cloud to the smartphone so that when the transaction is made, the smartphone does not communicate with the outside network to access the secure element. The APL-SE transaction model is tested using dummy data to calculate the processing time measurements for each step. The model is also tested for the encryption process. The encrypted data is compared with the original data, then the randomness is calculated. This transaction model is also tested by looking at the data randomness, which shows that the encrypted data is declared random. Random data increases data security. The transaction model test shows that the transaction runs well because the encrypted data is proven random, and the execution time is 1,074 ms. The time of 1,074 ms is far below an attacker's time to decipher the encrypted data. Random and fast encryption results indicate that transactions are secure. This achievement makes the opportunity for attackers to manipulate data small, so security is increased.

Increasing security measures in ATM Transactions using NFC

Automated Teller Machine (ATM) is a helpful method to gather the financial necessities of the clients. Notwithstanding, the utilization of charge bank card or different kinds of bank cards during bank ATM exchanges has a few issues like inclined to bank ATM skimming, attractive segments of card getting harmed, assembling and carrying cost of ATM cards, longer an ideal opportunity to validate clients and so forth The target of this examination is to think about smart mobile phone in Near-Field Communication (NFC) Card Emulation approach as an option in contrast to ATM bank cards. In NFC the space between the particular gadgets should be little (regularly under 4 cm) which makes NFC perfect for building expenses and different exchanges including delicate/private information. In the proposed framework, to validate at the ATM booth, the client needs to swipe his/her advanced mobile phone before the NFC per user. An ATM card isn't needed for verification and the framework will in any case have a more grounded protection contrasted with the framework where the ATM card was utilized. Security examination and danger demonstrating appeared in this paper features the security strength of the framework during verification.

NFC – Blockchain as a Secure Solution

Near Field Communication (NFC) has remained as attractive from many years for customers as trendy for portable devices. Its utilization is growing day by way of day by fast pace as expand in the accessibility of the NFC enabled devices in the marketplace. It is developed for the integration with handy mo-biles, which could communicate with each other mobiles or read information on tags and cards. NFC device can also be used in card emulation mode, to provide flexibility with contactless smart card devices. This is very affective in allowing NFC enabled smart-phones to exchange typical contactless plastic playing cards used in public transport, get entry to control, ATMs and different comparable applications. The most pertinent concern would be that how a good deal inclined the new technological know-how is and it is evaluated to many susceptible types of out-breaks. This research provides solution to this hassle using blockchain technology.

Pricing Data Tampering in Automated Fare Collection with NFC-Equipped Smartphones

Automated Fare Collection (AFC) systems have been globally deployed for decades, particularly in the public transportation network where the transit fee is calculated based on the length of the trip ( a.k.a. , distance-based pricing AFC systems). Although most messages of AFC systems are insecurely transferred in plaintext, system operators did not pay much attention to this vulnerability, since the AFC network is basically isolated from the public network (e.g., the Internet)—there is no way of exploiting such a vulnerability from the outside of the AFC network. Nevertheless, in recent years, the advent of Near Field Communication (NFC)-equipped smartphones has opened up a channel to invade into the AFC network from the mobile Internet, i.e., by Host-based Card Emulation (HCE) over NFC-equipped smartphones. In this paper, we identify a novel paradigm of attacks, called LessPay , against modern distance-based pricing AFC systems, enabling users to pay much less than what they are supposed to be charged. The identified attack has two important properties: 1) it is invisible to AFC system operators because the attack never causes any inconsistency in the back-end database of the operators; and 2) it can be scalable to affect a large number of users (e.g., 10,000) by only requiring a moderate-sized AFC card pool (e.g., containing 150 cards). To evaluate the efficacy of the attack, we developed an HCE app to launch the LessPay attack; and the real-world experiments demonstrate not only the feasibility of the LessPay attack (with 97.6 percent success rate) but also its low cost in terms of bandwidth and computation. Finally, we propose, implement and evaluate four types of countermeasures, and present security analysis and comparison of these countermeasures on defending against the LessPay attack.

Smart health record management with secure NFC-enabled mobile devices

Abstract Patients with dispersed health records face the challenge of accessing readily available health history and mobility across different hospitals. It can hinder timely diagnosis and treatment, especially in the case of an emergency or for travellers. Cloud-based solutions have open challenges of interoperability and integration, higher challenges for security and privacy and may lack 24/7 support for the high availability of health history. Existing portable systems store limited health information for only a specific hospital and do not support mobility of patients across different hospitals. In this paper, we propose a next-generation portable Smart Health Record Management system with secure Near Field Communication (NFC)-enabled mobile devices to retain the dispersed health records on an S-MAPLE (Secure Mobility-Assisted PortabLE) health folder. It provides secure yet easy access to up to date health history and assists patient mobility across hospitals. An NFC-based Host Card Emulation (HCE) mode maintains a software-based contactless mobile-based health wallet on the patient׳s mobile device. An authorized medical professional can access it directly and selectively with their mobile devices, over low energy wireless interfaces of NFC and Bluetooth. NFC provides secure proof-of-locality and ease of access. A tamper-resistant storage Secure Element (SE), end-to-end mutual authentication with attestation scheme, variant of the Ciphertext-policy Attribute-based encryption (CP-ABE) scheme and backup on a secure digital vault further secure the S-MAPLE health folder. We present the system requirements, system architecture and security requirements with a brief overview of the security solutions for the proposed health system. The implementation and performance of the system prototype using mid-range Android-based mobile devices has acceptable results.

NFC Secure Element-Based Mutual Authentication and Attestation for IoT Access

Certain resourceful and powered Internet of Things (IoT) can become victims to launch cyber attacks. Near field communication (NFC) can be used for their secure on-demand access. In this paper, we present a novel framework for the NFC secure element (SE)-based mutual authentication and attestation for IoT access with a user device such as a mobile device using NFC-based Host Card Emulation (HCE) mode for the first time. HCE is robust as compared to the other NFC modes. A cloud-based Trusted Certified Authority (TCA) manages all cryptographic credentials and stores them in the tamper-resistant SE and Trusted Platform Module (TPM)-based attestation modules on the devices. It uses a newly proposed NFC SE-based mutual authentication and attestation (NSE-AA) protocol for proof-of-locality, end-to-end anonymous mutual authentication between the SEs and an associated remote attestation for trust. The protocol is robust and lightweight as compared to the existing schemes. We provide its informal and formal security analysis using the Real-Or-Random (ROR) model. A simulation on the Automated Validation of Internet Security Protocols and Applications (AVISPA) tool proves its safety. We also briefly present the details of a prototype with a commercial mid-range priced mobile device and Single Board Computer (SBC)-based IoT device.

Shifting the ticketing paradigm: The role of open standards

This paper discusses the transit ticketing industry and the challenges it faces to evolve current systems. Providing an overview of the key pressures facing public transport operators, the piece will investigate how single-vendor fare collection systems are increasingly problematic and how the adoption of an open standard can bring new opportunities. The paper investigates how developments in internet of things (IoT), urban mobility and increasingly ‘smart cities’ are forcing transit ticketing to look beyond public transport. The need to develop multi-application solutions and collaborate with adjacent ecosystems, including access control and payments, is crucial. Moreover, it will consider how host card emulation (HCE) technology will be central to effecting this change. This consumer-centric approach will facilitate consumer demand for greater functionality and ease of use, and allow public transport operators to tap into new revenue streams at low initial cost. Readers will learn how open standards are vital for the future of fare collection and the only way to truly realise the full benefits of adopting HCE in transport. The paper will discuss the OSPT Alliance’s market-leading standard, CIPURSE, and its ability to both meet the challenges facing transport operators in the short term and provide scope for future developments and scalable long-term deployments.

A robust NFC-based personalized IPTV service system

Internet Protocol Television (IPTV) is becoming a platform that changes the way we obtain information and entertainment, and offers interactive features and personalized services. Although IPTV service providers can perform TV viewer identification and authentication through a unique hardware identifier in the form of a set-top box (STB), it is based on STB-level identification which leads to the situation where all members of a subscriber family get the same level of access to services. This indicates that existing identification schemes are inconsistent with IPTV’s main intent, namely, providing personalized services. Smartphones with NFC (Near Field Communication) capabilities have grown to become very popular over the years. In this study, we present a novel personalized IPTV service system in which NFC-based identification with HCE (Host Card Emulation) is adopted. The experiments and analyses show that the proposed system can meet the system requirements and provide great usability, deployability and service scalability for personalized IPTV services.

NFC Loop Antenna in Conjunction With the Lower Section of a Metal Cover

This letter proposes a near-field communication (NFC) antenna for smartphones with a metal cover that includes an embedded narrow slot, therein splitting the metal cover into upper and lower sections. The proposed NFC antenna is a simple loop structure that is formed by incorporating a three-dimensional coupling strip with the upper edge of the metal cover in the lower section. Because this antenna structure can substantially reduce the eddy current, excellent inductive coupling can be achieved through the clearance zone of the narrow slot. The proposed NFC antenna is relatively thin and achieves excellent performance in the read/write mode. Furthermore, in the card emulation mode verified by Europay, MasterCard, and Visa test, it even surpasses the performance of certain other NFC antennas in smartphones with non-metal covers.

NFC Technology for Contactless Payment Echosystems

Since the earliest ages, the human being has not ceased to develop its system of exchange of goods. The first system introduced is barter, it has evolved over time into currency by taking various forms (shells, teeth, feathers, etc.). The evolution of micro-electronics has favoured the appearance of a new form of payment that is the credit card. Currently it is the most used means of payment throughout the world. Today financial institutions want to replace the credit card by mobile phone for the implementation of contactless payment systems via NFC. This mode of operation is called Host Card Emulation or HCE. We will present in this article the basic element at the heart of this technology, which is the Secure Element. We will present the different forms that this element can take and possible cases of use of this technology for the establishment of an ecosystem of payment by mobile or purchase tickets transport.

Инновационная среда и перспективы развития технологии NFC и In-App платежей в новом технологическом укладе

The article considers an open innovative environment in which there is NFC and
 In-App Payments, their development prospects, the pros and cons of these
 systems, their place in the sixth technological way, gives concepts of NFC, In-App
 Payments, considers the technology of contactless payments, the principle
 of operation of the device with a Secure Element NFC and Host Card Emulation
 technology, sanctifies the issue of the security of NFC devices, methods
 of protection against attacks on the device, the use of NFC in other electronic
 media. Comparative characteristics depending on the situation, NFC and In-App
 Payments are given. The article shows the global Informatization of our society
 in the sixth technological way.

A Pervasive Social Networking Application: I-NFC enabled Florist Smart Advisor

Location based service is an information and entertainment service, accessible with mobile devices through the mobile network and utilizing the ability to make use of the geographical position of the mobile device. NFC location based service is using one of the modes of NFC such as peer-to-peer, reader/writer, and card emulation to obtain the information of the object and then get the location of the object. In this paper, the proposed solution is I- NFC-enabled Pervasive Social Networking apps for florists. It combines the NFC location based service with Online Social Network (OSN). In addition, a smart advisor in the system to provide output in making their own decision while purchasing products.The development of the system demonstrates that a designed commerce site is provided which enable a communication between NFC-enabled smartphone, NFC-enabled application and OSN. GPS functionalities also implemented to provide map and location of business services. Smart advisor also designed to provide information for users who do not have ideas what to purchase.

Anti-Collision Protocol for Coexistence of RFID and NFC P2P Communications

The near field communication (NFC) is a short-range wireless communication technology operating at 13.56 MHz. A pair of NFC devices may operate in the peer-to-peer (P2P) mode to exchange data securely. Since the frequency of both the existing radio frequency identification (RFID) systems and NFC devices is 13.56 MHz, a collision may occur in an environment where pairs of NFC devices coexist within the identification range of an RFID system. In this letter, we propose an anti-collision protocol in the coexistence environment where the NFC device in the P2P communication mode is interfered by an RFID system. In the proposed protocol, if the channel is already occupied or a collision is detected, an NFC initiator device switches its operating mode to the card emulation mode. Since the card emulation mode is compatible with the existing RFID standard, an RFID reader can recognize the presence of the NFC initiator device and allocates a slot for the P2P communications of the pairs of NFC devices. Performance analysis and simulation results show that the proposed protocol experiences less NFC delay than the legacy protocol.

MOONACS: a mobile on-/offline NFC-based physical access control system

Purpose The purpose of this paper is to present a smartphone-based physical access control system in which the access points are not directly connected to a central authorization server, but rather use the connectivity of the mobile phone to authorize a user access request online by a central access server. The access points ask the mobile phone whether a particular user has access or not. The mobile phone then relays such a request to the access server or presents an offline ticket. One of the basic requirements of our solution is the independence from third parties like mobile network operators, trusted service managers and handset manufacturers. Design/methodology/approach The authentication of the smartphone is based on public key cryptography. This requires that the private key is stored in a secure element or in a trusted execution environment to prevent identity theft. However, due to the intended independence from third parties, subscriber identity module (SIM)-based secure elements and embedded secure elements (i.e. separate hardware chips on the handset) were not an option and only one of the remaining secure element architectures could be used: host card emulation (HCE) or a microSD-based secure element. Findings This paper describes the implementation of such a physical access control system and discusses its security properties. In particular, it is shown that the HCE approach cannot solve the relay attack under conservative security assumptions and an implementation based on a microSD secure element is presented and discussed. Moreover, the paper also describes an offline solution which can be used if the smartphone is not connected to the access server. In this case, an access token is sent to the access point in response to an access request. These tokens are renewed regularly and automatically whenever the smartphone is connected. Originality/value In this paper, a physical access control system is presented which operates as fast as existing card-based solutions. By using a microSD-based secure element (SE), the authors were able to prevent the software relay attack. This solution is not restricted to microSD-based SEs, it could also be implemented with SIM-based or embedded secure elements (with the consequence that the solution depends on third parties).

A Tokenization-Based Communication Architecture for HCE-Enabled NFC Services

Following the announcement of Host Card Emulation (HCE) technology, card emulation mode based Near Field Communication (NFC) services have gained further appreciation as an enabler of the Cloud-based Secure Element (SE) concept. A comprehensive and complete architecture with a centralized and feasible business model for diverse HCE-based NFC services will be highly appreciated, particularly by Service Providers and users. To satisfy the need in this new emerging research area, a Tokenization-based communication architecture for HCE-based NFC services is presented in this paper. Our architecture proposes Two-Phased Tokenization to enable the identity management of both user and Service Provider. NFC Smartphone users can store, manage, and make use of their sensitive data on the Cloud for NFC services; Service Providers can also provide diverse card emulation NFC services easily through the proposed architecture. In this paper, we initially present the Two-Phased Tokenization model and then validate the proposed architecture by providing a case study on access control. We further evaluate the usability aspect in terms of an authentication scheme. We then discuss the ecosystem and business model comprised of the proposed architecture and emphasize the contributions to ecosystem actors. Finally, suggestions are provided for data protection in transit and at rest.

NFC-enabled Android Smartphone Application Development to Hide 4 Digits Passcode for Access Control System

Android is a name of the Google's mobile operating system (OS) which is largely used around the world. A few years ago, Google released first mobile application for mobile payment system over NFC-enabled Android smartphone. Many researchers then have started their work so far on NFC mobile phone to take its advantage in real implementation, especially, to replace both of existing physical keys and access cards. After Host-based Card Emulation (HCE) was released in Android 4.4, Android phone can be used as an emulated card that, in most previous works, was done on Peer-2-Peer mode and Read/Write mode. The purpose of this work is to develop an Android application that can emulate as NFC card through HCE and manage the passcodes to replace pressing on keypad in (4 digits passcode) access control system.

Emulation of Multi-application Contactless Smartcard in Near Field Communication Enabled Smart Phones

Near Field Communication (NFC) is a short-range wireless technology used to transmit data between two devices. In order to transmit data, NFC has three working modes. The card emulation mode has the greatest potential because it allows a smart phone to emulate passive NFC tags and contactless smart cards. Hence, it enables a smart phone to instantly share data with an NFCenabled by a single tap on the NFC reader. Major applications of the card emulation mode include financial transactions such as purchasing a ticket at bus stop or a cinema hall, etc., so a secure storage space is required to locally store the data. The card emulation mode utilizes a Secure Element (SE) for the secure storage of data, and has no provisions for third party developers to write on this storage. This paper discusses the challenges of implementing card emulation in the Android Operating System for smart phones. Furthermore, emulation of a smart card defined by ISO 7816-4 for multiple application scenarios is discussed. The paper will go into detail regarding the implementation of card emulation mode and how it can help third party applications to read and write to and from SE while maintaining reasonable security. KeywordsNear Field Communication; Secure Element; Smart Card; Software Card Emulation; Two-way Communication; Short Range Wireless Communication

Near Field Communications (NFC) as Halal Detection Application

The objective of this study is to discover the advantages and disadvantages uses of Near Field Communications (NFC) as halal certificate detection. NFC is a type of wireless connectivity protocols, in which it allows reliable communications within devices in short range. Consumers can easily detect the halal status of the nearby restaurants as their phones will vibrates if the restaurants have the legal halal certificates in 500 meter distance. In addition, consumers can easily report to authorities about the fake halal logos of the restaurants using this system, with that an immediate action will be taken. However, it also discovers that NFC could bring several disadvantage such data loss and tag damage, technical limitations in the implementations of software card emulation and loss in security. DOI: 10.5901/mjss.2015.v6n5s2p547

ECONOMY AND FORECAST FOR 2020: 3 KEY TRENDS IN THE FUTURE

The article deals with 3 key trends in the future and their general implications including 3D, RFID, Business Intelligence and new managerial positions. 3D by 2020 could replace conventional mass-production. The basic trends in the RFID aplications will be: RFID Wearables,RFID On Merchandise, Host Card Emulation (HCE) Payment Solutions,Printed RFID Technology, RFID chip tracking everyone everywhere in the near future. Business intelligence will be transformed to the general intelligence.The contribution covers the the following topics: selected Aspects of economy and social Aspects of Information Systems, complex technological and human Issues in today’s globalized and interconnected World and presents new results in the diffused way.