You foot the bill! Attacking NFC with passive relays

Sun, Y. J.; Kumar, Swarun; He, Shibo; Chen, Jiming; Shi, Zhiguo

doi:10.48550/arxiv.2001.08143

Cited by 2 publications

(1 citation statement)

References 35 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The security of contactless payment systems generally relies on the assumption of the limited range of NFC. However, the ReCoil attack [52] shows that this premise does not hold. Using a passive (unpowered) relay consisting of antenna coils and a waist band, the NFC communication range can be extended up to 49.6 cm.…”

Section: Related Workmentioning

confidence: 99%

NFCGate: Opening the Door for NFC Security Research with a Smartphone-Based Toolkit

Klee,

Roussos,

Maass

et al. 2020

Preprint

View full text Add to dashboard Cite

Near Field Communication (NFC) is being used in a variety of security-critical applications, from access control to payment systems. However, NFC protocol analysis typically requires expensive or conspicuous dedicated hardware, or is severely limited on smartphones. In 2015, the NFCGate proof of concept aimed at solving this issue by providing capabilities for NFC analysis employing off-the-shelf Android smartphones.In this paper, we present an extended and improved NFC toolkit based on the functionally limited original open-source codebase. With in-flight traffic analysis and modification, relay, and replay features this toolkit turns an off-the-shelf smartphone into a powerful NFC research tool. To support the development of countermeasures against relay attacks, we investigate the latency incurred by NFCGate in different configurations.Our newly implemented features and improvements enable the case study of an award-winning, enterprise-level NFC lock from a well-known European lock vendor, which would otherwise require dedicated hardware. The analysis of the lock reveals several security issues, which were disclosed to the vendor.

show abstract

Section: Related Workmentioning

confidence: 99%

NFCGate: Opening the Door for NFC Security Research with a Smartphone-Based Toolkit

Klee,

Roussos,

Maass

et al. 2020

Preprint

View full text Add to dashboard Cite

show abstract

Steal Your Life Using 5 Cents: Hacking Android Smartphones with NFC Tags

Bermejo

Flores

Hui

2020

2020 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops)

View full text Add to dashboard Cite

Nowadays privacy in the connected world is a big user's concern. The ubiquity of mobile devices permits billions of users browse the web at anytime, anywhere. Near Field Communication (NFC) appeared as a seamlessly and simply communication protocol between devices. Commercial services such as Android Pay, and Apple Pay offer contactless payment methods that are spreading in more and more scenarios. However, we take risks while using NFC on Android devices, we can be hacked, and our privacy can be affected. In this paper we study the current vulnerabilities in the NFC-Android ecosystem. We conduct a series of experiments and we expose that with NFC and Android devices are vulnerable to URL/URI spoofing, Bank/social network information hacking, and user's device tracking via fingerprint and geo-location. It is important for the community to understand the problem and come up solution that can tackle these issues and inform the users about privacy awareness and risks on using these contactless services.

show abstract

You foot the bill! Attacking NFC with passive relays

Cited by 2 publications

References 35 publications

NFCGate: Opening the Door for NFC Security Research with a Smartphone-Based Toolkit

NFCGate: Opening the Door for NFC Security Research with a Smartphone-Based Toolkit

Steal Your Life Using 5 Cents: Hacking Android Smartphones with NFC Tags

Contact Info

Product

Resources

About