A Practical Generic Relay Attack on Contactless Transactions by Using NFC Mobile Phones

Francis, Lishoy; Hancke, Gerhard P.; Mayes, Keith

doi:10.20533/ijrfidsc.2046.3715.2013.0012

Cited by 52 publications

(52 citation statements)

References 26 publications

(36 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A number of generic NFC relay attacks have been proposed in the literature [17,16]. Furthermore, successful relay attacks on payWave have been reported in, for example, [11].…”

Section: Relay Attacks Against Emv Contactless Smart Cardsmentioning

confidence: 99%

Relay Cost Bounding for Contactless EMV Payments

Chothia

Garcia

Ruiter

et al. 2015

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. This paper looks at relay attacks against contactless payment cards, which could be used to wirelessly pickpocket money from victims. We discuss the two leading contactless EMV payment protocols (Visa's payWave and MasterCard's PayPass). Stopping a relay attack against cards using these protocols is hard: either the overhead of the communication is low compared to the (cryptographic) computation by the card or the messages can be cached before they are requested by the terminal. We propose a solution that fits within the EMV Contactless specification to make a payment protocol that is resistant to relay attacks from commercial off-the-shelf devices, such as mobile phones. This solution does not require significant changes to the cards and can easily be added to existing terminals. To prove that our protocol really does stop relay attacks, we develop a new method of automatically checking defences against relay attacks using the applied pi-calculus and the tool ProVerif.

show abstract

“…A number of generic NFC relay attacks have been proposed in the literature [17,16]. Furthermore, successful relay attacks on payWave have been reported in, for example, [11].…”

Section: Relay Attacks Against Emv Contactless Smart Cardsmentioning

confidence: 99%

Relay Cost Bounding for Contactless EMV Payments

Chothia

Garcia

Ruiter

et al. 2015

Lecture Notes in Computer Science

View full text Add to dashboard Cite

show abstract

“…In this case, the attacker intercepts a message sent to the victim and responds to the sender, pretending to be the intended receiver (Haselsteiner and Breitfuß, 2006;Roland, 2013;Sportiello, 2013;Francis et al, 2011).…”

Section: Relay Attackmentioning

confidence: 99%

Near-Field Communication Technology and Its Impact in Smart University and Digital Library: Comprehensive Study

Ali¹

2015

JLIS

View full text Add to dashboard Cite

The purpose of this paper is to highlight on the Near Field Communication (NFC) technology trying to raise awareness and knowledge about NFC within information science society and to improve understanding of its functionality and development, as well as to place it into the broader context of existing technologies that we can incorporate it into our universities, libraries, and services. The study is carried out through literature review, data gathering and contacting some information tech companies. This note reflects the advantages of adaptation NFC in the university, campus and library. NFC tries to harmonize today's different activities and make people's lives easier and more convenient. So it is considered an ongoing leap toward ubiquitous computing. Since NFC is a recent technology and the mainstream adoption is not yet obtained with little reports focus on its potential impacts, our comprehensive study is considered a contribution to explore on the impact of NFC technology and applications on the communities of university and digital library.

show abstract

“…Practical implementations of the mafia fraud attack have been proposed against contact and contactless based technologies [6,12,13,14,15]. Drimer and Murdoch [6] developed a relay attack against modern Chip-and-PIN system, while Francis et al [12] demonstrated an NFC peer-to-peer relay attack on smartphones, showing the simplicity of such attacks using off-the-shelf equipment.…”

Section: Introductionmentioning

confidence: 99%

Fortune cookies and smartphones: Weakly unrelayable channels to counter relay attacks

Čagalj

Perković

Bugarić

et al. 2015

Pervasive and Mobile Computing

View full text Add to dashboard Cite

Smartphones are being increasingly used to perform financial transactions (through m-banking, virtual wallet or as a smartcard). The latter applications involve contactless technology (e.g., NFC) that is known to be vulnerable to mafia fraud attacks. In this work we show that a secret message inside an appropriately folded piece of paper (fortune cookie) can be used to effectively mitigate the mafia fraud attack. Fortune cookies implement a weakly unrelayable channel that, in combination with smartphones, provides a provable protection against those attacks. Our solution requires minimal or no hardware changes to the existing equipment (especially on the user's side) and is suitable for different communication technologies (e.g., intra-body communication, NFC, WiFi, Bluetooth, sound, infrared).

show abstract

A Practical Generic Relay Attack on Contactless Transactions by Using NFC Mobile Phones

Cited by 52 publications

References 26 publications

Relay Cost Bounding for Contactless EMV Payments

Relay Cost Bounding for Contactless EMV Payments

Near-Field Communication Technology and Its Impact in Smart University and Digital Library: Comprehensive Study

Fortune cookies and smartphones: Weakly unrelayable channels to counter relay attacks

Contact Info

Product

Resources

About