Security analysis of contactless smart card technology on Android platform

点击翻译按钮获取中文摘要

Contactless technology, also known as Near Field Communication (NFC) has been adopted by the majority of the world for debit and credit card payments in the last decade. Allowing people to make payments by simply placing the card near Point-of-Sale (PoS) device, the technology became a fast and more convenient alternative to the traditional Chip and Pin method. Recently, the technology was adopted for other areas, specifically, identity verification. In this project, we focus on vulnerability assessment of NFC implementation on Android platform for identity verification. We explore the viability of existing NFC attacks and design & develop attacks focused specifically on Android platform. Within this project, we also aim to design countermeasures to help mitigate and patch discovered vulnerabilities.