Cryptanalysis of Near Field Communication Based Authentication Protocol for Mobile Payment System

Vishwakarma, Pinki Prakash; Tripathy, Amiya Kumar; Vemuru, Srikanth

doi:10.1007/s11277-021-08667-x

Cited by 2 publications

(1 citation statement)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The usage of information and communication technology (ICT) is widespread worldwide [22]. However, NFC systems focus solely on communication speed, disregarding security aspects such as source and destination authentication [1][2] due to the minimal range of communications (about 10 cm). Due to this vulnerability in the NFC protocol, the authors in [3][4] demonstrated that an adversary exploiting an NFC reader with a particular antenna might acquire confidential financial data from NFC bank cards or NFC-enabled devices within its (NFC reader) operational range.…”

Section: Introductionmentioning

confidence: 99%

Privacy-Preserving NFC-Based Authentication Protocol for Mobile Payment System

2023

KSII TIIS

View full text Add to dashboard Cite

One of the fastest-growing mobile services accessible today is mobile payments. For the safety of this service, the Near Field Communication (NFC) technology is used. However, NFC standard protocol has prioritized transmission rate over authentication feature due to the proximity of communicated devices. Unfortunately, an adversary can exploit this vulnerability with an antenna that can eavesdrop or alter the exchanged messages between NFC-enabled devices. Many researchers have proposed authentication methods for NFC connections to mitigate this challenge. However, the security and privacy of payment transactions remain insufficient. We offer a privacy-preserving, anonymity-based, safe, and efficient authentication protocol to protect users from tracking and replay attacks to guarantee secure transactions. To improve transaction security and, more importantly, to make our protocol lightweight while ensuring privacy, the proposed protocol employs a secure offline session key generation mechanism. Formal security verification is performed to assess the proposed protocol's security strength. When comparing the performance of current protocols, the suggested protocol outperforms the others.

show abstract

Section: Introductionmentioning

confidence: 99%

Privacy-Preserving NFC-Based Authentication Protocol for Mobile Payment System

2023

KSII TIIS

View full text Add to dashboard Cite

show abstract

Security and Privacy Based NFC Wallet Design

Özkan¹,

Aydın²

2021

European Journal of Science and Technology

View full text Add to dashboard Cite

With the Covid-19 pandemic, contactless and remote payment options have started to be used more widely. NFC technology is also used for contactless payment. In this study, it is aimed to create a payment system using NFC. The design of the payment system used a portable NFC, an Android phone with version 4.4 or higher, an NFC card, Firebase database from Google, and tokenization. We can define tokenization as generating a random string of text with your credit card number. First of all, the developed application must be downloaded and installed on the phone. With this application, the phone will act as a POS machine. Users can use the phone as a POS and make transactions using it. In this system, only a random text string will be visible in an unauthorized access to the database. In this way, security and confidentiality are provided in the system.

show abstract

Cryptanalysis of Near Field Communication Based Authentication Protocol for Mobile Payment System

Cited by 2 publications

References 26 publications

Privacy-Preserving NFC-Based Authentication Protocol for Mobile Payment System

Privacy-Preserving NFC-Based Authentication Protocol for Mobile Payment System

Security and Privacy Based NFC Wallet Design

Contact Info

Product

Resources

About