Can You Get into the Middle of Near Field Communication?

Akter, Sajeda; Chakraborty, Tusher; Khan, Taslim Arefin; Chellappan, Sriram; Islam, A. B. M. Alim Al

doi:10.1109/lcn.2017.39

Cited by 7 publications

(2 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Unfortunately, it has been proven possible in [39] where an eavesdropping attack on a commodity NFC-enabled mobile device has been successful from a distance up to 240 cm. Furthermore, a man-in-the-middle attack has been demonstrated in [40] between two NFC-enabled devices separated by a 10 cm distance. The fact that the security is provided based on a proximity assumption, an attacker can always violate such…”

Section: Near-field Communication (Nfc)mentioning

confidence: 99%

Security Analysis of Out‐of‐Band Device Pairing Protocols: A Survey

Khalfaoui

Leneutre

Villard

et al. 2021

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

Numerous secure device pairing (SDP) protocols have been proposed to establish a secure communication between unidentified IoT devices that have no preshared security parameters due to the scalability requirements imposed by the ubiquitous nature of the IoT devices. In order to provide the most user-friendly IoT services, the usability assessment has become the main requirement. Thus, the complete security analysis has been replaced by a sketch of a proof to partially validate the robustness of the proposal. The few existing formal or computational security verifications on the SDP schemes have been conducted based on the assessment of a wide variety of uniquely defined security properties. Therefore, the security comparison between these protocols is not feasible and there is a lack of a unified security analysis framework to assess these pairing techniques. In this paper, we survey a selection of secure device pairing proposals that have been formally or computationally verified. We present a systematic description of the protocol assumptions, the adopted verification model, and an assessment of the verification results. In addition, we normalize the used taxonomy in order to enhance the understanding of these security validations. Furthermore, we refine the adversary capabilities on the out-of-band channel by redefining the replay capability and by introducing a new notion of delay that is dependent on the protocol structure that is more adequate for the ad hoc pairing context. Also, we propose a classification of a number of out-of-band channels based on their security properties and under our refined adversary model. Our work motivates the future SDP protocol designer to conduct a formal or a computational security assessment to allow the comparability between these pairing techniques. Furthermore, it provides a realistic abstraction of the adversary capabilities on the out-of-band channel which improves the modeling of their security characteristics in the protocol verification tools.

show abstract

Section: Near-field Communication (Nfc)mentioning

confidence: 99%

Security Analysis of Out‐of‐Band Device Pairing Protocols: A Survey

Khalfaoui

Leneutre

Villard

et al. 2021

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

show abstract

“…Also the NFC channel is vulnerable against MITM attacks. Such an attack is demonstrated in the work of Akter, Chakraborty, Khan, et al [10]. Consequently, the NFC channel must be protected against manipulation of transferred information.…”

Section: A Potential Security Threats To Poc Devicesmentioning

confidence: 99%

System Architecture and Security Issues of Smartphone-based Point-Of-Care Devices

Zajc

Holweg

Steger

2020

2020 23rd Euromicro Conference on Digital System Design (DSD)

View full text Add to dashboard Cite

In recent years, personalized healthcare has become increasingly popular in our society. Wearable devices started a trend for monitoring physical health parameters. The next evolution after wearable devices are Point-Of-Care (POC) devices, which provide more vital parameter analyses for everyone. The electrification of POC devices is required to simplify the process and to increase the accuracy of measurement results. In this work, we focus on POC devices in combination with smartphones. Often, these devices are measuring and processing very sensitive data, which underlie a high privacy restriction. Therefore, it is required to provide an architecture and security issue analysis of POC devices. The outcome of this research contribution provides a sensitization for the requirement of enhanced security features. Especially, to fulfill the need for a power-aware security concept for a POC system architecture, which underlies limited resources like power consumption.

show abstract