The Applicability of Ambient Sensors as Proximity Evidence for NFC Transactions

Carlton Shepherd; Iakovos Gurulian; Eibe Frank; Konstantinos Markantonakis; Raja Akram; Keith Mayes; Emmanouil Panaousis

doi:10.1109/SPW.2017.29

The Applicability of Ambient Sensors as Proximity Evidence for NFC Transactions

Carlton Shepherd, Iakovos Gurulian, Eibe Frank, Konstantinos Markantonakis, Raja Akram, Keith Mayes, Emmanouil Panaousis

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

139 Downloads (Pure)

Abstract

Near Field Communication (NFC) has enabled mobile phones to emulate contactless smart cards. Similar to contactless smart cards, they are also susceptible to relay attacks. To counter these, a number of methods have been proposed that rely primarily on ambient sensors as a proximity detection mechanism (also known as an anti-relay mechanism). In this paper, we empirically evaluate a comprehensive set of ambient sensors for their effectiveness as a proximity detection mechanism for NFC contactless-based applications like banking, transport and high-security access controls. We selected 17 sensors available via the Google Android platform. Each sensor, where feasible, was used to record the measurements of 1,000 contactless transactions at four different physical locations. A total of 252 users, a random sample from the university student population, were involved during the field trials. After careful analysis, we conclude that no single evaluated mobile ambient sensor is suitable for proximity detection in NFC-based contactless applications in realistic deployment scenarios. Lastly, we identify a number of potential avenues that may improve their effectiveness.

Original language	English
Title of host publication	Mobile Security Technologies (MoST '17), IEEE Security & Privacy Workshops
Publisher	IEEE
Pages	179-188
Number of pages	10
ISBN (Electronic)	978-1-5386-1968-1
DOIs	https://doi.org/10.1109/SPW.2017.29
Publication status	Published - 21 Dec 2017
Event	IEEE Mobile Security Technologies (MOST) 2017 - The Fairmont Hotel, San Jose, United States Duration: 25 May 2017 → 25 May 2017 http://www.ieee-security.org/TC/SPW2017/MoST/

Conference

Conference	IEEE Mobile Security Technologies (MOST) 2017
Abbreviated title	MOST
Country/Territory	United States
City	San Jose
Period	25/05/17 → 25/05/17
Internet address	http://www.ieee-security.org/TC/SPW2017/MoST/

Access to Document

10.1109/SPW.2017.29

Accepted ManuscriptAccepted author manuscript, 362 KB

1 Conference contribution

Proximity Assurances Based on Natural and Artificial Ambient Environments
Gurulian, I., Markantonakis, K., Shepherd, C., Frank, E. & Akram, R., 2017, 10th International Conference, SecITC 2017, Bucharest, Romania, June 8–9, 2017, Revised Selected Papers. Springer, p. 83-103 21 p. (Security and Cryptology; vol. 10543).
Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Open Access
File

121 Downloads (Pure)

Cite this

@inproceedings{474a2c60f030420e97aa35bded1c436b,

title = "The Applicability of Ambient Sensors as Proximity Evidence for NFC Transactions",

abstract = "Near Field Communication (NFC) has enabled mobile phones to emulate contactless smart cards. Similar to contactless smart cards, they are also susceptible to relay attacks. To counter these, a number of methods have been proposed that rely primarily on ambient sensors as a proximity detection mechanism (also known as an anti-relay mechanism). In this paper, we empirically evaluate a comprehensive set of ambient sensors for their effectiveness as a proximity detection mechanism for NFC contactless-based applications like banking, transport and high-security access controls. We selected 17 sensors available via the Google Android platform. Each sensor, where feasible, was used to record the measurements of 1,000 contactless transactions at four different physical locations. A total of 252 users, a random sample from the university student population, were involved during the field trials. After careful analysis, we conclude that no single evaluated mobile ambient sensor is suitable for proximity detection in NFC-based contactless applications in realistic deployment scenarios. Lastly, we identify a number of potential avenues that may improve their effectiveness.",

author = "Carlton Shepherd and Iakovos Gurulian and Eibe Frank and Konstantinos Markantonakis and Raja Akram and Keith Mayes and Emmanouil Panaousis",

year = "2017",

month = dec,

day = "21",

doi = "10.1109/SPW.2017.29",

language = "English",

pages = "179--188",

booktitle = "Mobile Security Technologies (MoST '17), IEEE Security & Privacy Workshops",

publisher = "IEEE",

note = "IEEE Mobile Security Technologies (MOST) 2017, MOST ; Conference date: 25-05-2017 Through 25-05-2017",

url = "http://www.ieee-security.org/TC/SPW2017/MoST/",

}

Shepherd, C, Gurulian, I, Frank, E, Markantonakis, K, Akram, R, Mayes, K & Panaousis, E 2017, The Applicability of Ambient Sensors as Proximity Evidence for NFC Transactions. in Mobile Security Technologies (MoST '17), IEEE Security & Privacy Workshops. IEEE, pp. 179-188, IEEE Mobile Security Technologies (MOST) 2017, San Jose, United States, 25/05/17. https://doi.org/10.1109/SPW.2017.29

TY - GEN

T1 - The Applicability of Ambient Sensors as Proximity Evidence for NFC Transactions

AU - Shepherd, Carlton

AU - Gurulian, Iakovos

AU - Frank, Eibe

AU - Markantonakis, Konstantinos

AU - Akram, Raja

AU - Mayes, Keith

AU - Panaousis, Emmanouil

PY - 2017/12/21

Y1 - 2017/12/21

N2 - Near Field Communication (NFC) has enabled mobile phones to emulate contactless smart cards. Similar to contactless smart cards, they are also susceptible to relay attacks. To counter these, a number of methods have been proposed that rely primarily on ambient sensors as a proximity detection mechanism (also known as an anti-relay mechanism). In this paper, we empirically evaluate a comprehensive set of ambient sensors for their effectiveness as a proximity detection mechanism for NFC contactless-based applications like banking, transport and high-security access controls. We selected 17 sensors available via the Google Android platform. Each sensor, where feasible, was used to record the measurements of 1,000 contactless transactions at four different physical locations. A total of 252 users, a random sample from the university student population, were involved during the field trials. After careful analysis, we conclude that no single evaluated mobile ambient sensor is suitable for proximity detection in NFC-based contactless applications in realistic deployment scenarios. Lastly, we identify a number of potential avenues that may improve their effectiveness.

AB - Near Field Communication (NFC) has enabled mobile phones to emulate contactless smart cards. Similar to contactless smart cards, they are also susceptible to relay attacks. To counter these, a number of methods have been proposed that rely primarily on ambient sensors as a proximity detection mechanism (also known as an anti-relay mechanism). In this paper, we empirically evaluate a comprehensive set of ambient sensors for their effectiveness as a proximity detection mechanism for NFC contactless-based applications like banking, transport and high-security access controls. We selected 17 sensors available via the Google Android platform. Each sensor, where feasible, was used to record the measurements of 1,000 contactless transactions at four different physical locations. A total of 252 users, a random sample from the university student population, were involved during the field trials. After careful analysis, we conclude that no single evaluated mobile ambient sensor is suitable for proximity detection in NFC-based contactless applications in realistic deployment scenarios. Lastly, we identify a number of potential avenues that may improve their effectiveness.

U2 - 10.1109/SPW.2017.29

DO - 10.1109/SPW.2017.29

M3 - Conference contribution

SP - 179

EP - 188

BT - Mobile Security Technologies (MoST '17), IEEE Security & Privacy Workshops

PB - IEEE

T2 - IEEE Mobile Security Technologies (MOST) 2017

Y2 - 25 May 2017 through 25 May 2017

ER -

The Applicability of Ambient Sensors as Proximity Evidence for NFC Transactions

Abstract

Conference

Access to Document

Research output

Proximity Assurances Based on Natural and Artificial Ambient Environments

Cite this