The Applicability of Ambient Sensors as Proximity Evidence for NFC Transactions

Carlton Shepherd, Iakovos Gurulian, Eibe Frank, Konstantinos Markantonakis, Raja Akram, Keith Mayes, Emmanouil Panaousis

Research output: Chapter in Book/Report/Conference proceedingConference contribution

106 Downloads (Pure)

Abstract

Near Field Communication (NFC) has enabled mobile phones to emulate contactless smart cards. Similar to contactless smart cards, they are also susceptible to relay attacks. To counter these, a number of methods have been proposed that rely primarily on ambient sensors as a proximity detection mechanism (also known as an anti-relay mechanism). In this paper, we empirically evaluate a comprehensive set of ambient sensors for their effectiveness as a proximity detection mechanism for NFC contactless-based applications like banking, transport and high-security access controls. We selected 17 sensors available via the Google Android platform. Each sensor, where feasible, was used to record the measurements of 1,000 contactless transactions at four different physical locations. A total of 252 users, a random sample from the university student population, were involved during the field trials. After careful analysis, we conclude that no single evaluated mobile ambient sensor is suitable for proximity detection in NFC-based contactless applications in realistic deployment scenarios. Lastly, we identify a number of potential avenues that may improve their effectiveness.
Original languageEnglish
Title of host publicationMobile Security Technologies (MoST '17), IEEE Security & Privacy Workshops
PublisherIEEE
Pages179-188
Number of pages10
ISBN (Electronic)978-1-5386-1968-1
DOIs
Publication statusPublished - 21 Dec 2017
EventIEEE Mobile Security Technologies (MOST) 2017 - The Fairmont Hotel, San Jose, United States
Duration: 25 May 201725 May 2017
http://www.ieee-security.org/TC/SPW2017/MoST/

Conference

ConferenceIEEE Mobile Security Technologies (MOST) 2017
Abbreviated titleMOST
Country/TerritoryUnited States
CitySan Jose
Period25/05/1725/05/17
Internet address

Cite this