The applicability of ambient sensors as proximity evidence for NFC transactions

Carlton Shepherd; Iakovos Gurulian; Eibe Frank; Konstantinos Markantonakis; Raja Naeem Akram; Emmanouil Panaousis; Keith Mayes

The applicability of ambient sensors as proximity evidence for NFC transactions

Carlton Shepherd, Iakovos Gurulian, Eibe Frank, Konstantinos Markantonakis, Raja Naeem Akram, Emmanouil Panaousis, Keith Mayes

University of Brighton

Research output: Chapter in Book/Conference proceeding with ISSN or ISBN › Conference contribution with ISSN or ISBN

Abstract

Near Field Communication (NFC) has enabled mo- bile phones to emulate contactless smart cards. Similar to contactless smart cards, they are also susceptible to relay attacks. To counter these, a number of methods have been proposed that rely primarily on ambient sensors as a proximity detection mechanism (also known as an anti-relay mechanism). In this paper, we empirically evaluate a comprehensive set of ambient sensors for their effectiveness as a proximity detection mechanism for NFC contactless-based applications like bank- ing, transport and high-security access controls. We selected 17 sensors available via the Google Android platform. Each sensor, where feasible, was used to record the measurements of 1,000 contactless transactions at four different physical locations. A total of 252 users, a random sample from the university student population, were involved during the field trials. After careful analysis, we conclude that no single evalu- ated mobile ambient sensor is suitable for proximity detection in NFC-based contactless applications in realistic deployment scenarios. Lastly, we identify a number of potential avenues that may improve their effectiveness.

Original language	English
Title of host publication	Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST)
Place of Publication	San Jose
Publisher	IEEE
Pages	0-0
Number of pages	1
Publication status	Published - 10 May 2017
Event	Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST) - Fairmont Hotel, San Jose, CA, 22-24 May 2017 Duration: 10 May 2017 → …

Conference

Conference	Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST)
Period	10/05/17 → …

Bibliographical note

© 2017 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.

Access to Document

Shepherd_MoST17.pdfAccepted author manuscript, 362 KBLicence: Unspecified

http://www.ieee-security.org/TC/SPW2017/MoST/Licence: Unspecified

Fingerprint Dive into the research topics of 'The applicability of ambient sensors as proximity evidence for NFC transactions'. Together they form a unique fingerprint.

Cite this

Shepherd, C., Gurulian, I., Frank, E., Markantonakis, K., Akram, R. N., Panaousis, E., & Mayes, K. (2017). The applicability of ambient sensors as proximity evidence for NFC transactions. In Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST) (pp. 0-0). IEEE. http://www.ieee-security.org/TC/SPW2017/MoST/

@inproceedings{3156b36549424c37891804631f9e8040,

title = "The applicability of ambient sensors as proximity evidence for NFC transactions",

abstract = "Near Field Communication (NFC) has enabled mo- bile phones to emulate contactless smart cards. Similar to contactless smart cards, they are also susceptible to relay attacks. To counter these, a number of methods have been proposed that rely primarily on ambient sensors as a proximity detection mechanism (also known as an anti-relay mechanism). In this paper, we empirically evaluate a comprehensive set of ambient sensors for their effectiveness as a proximity detection mechanism for NFC contactless-based applications like bank- ing, transport and high-security access controls. We selected 17 sensors available via the Google Android platform. Each sensor, where feasible, was used to record the measurements of 1,000 contactless transactions at four different physical locations. A total of 252 users, a random sample from the university student population, were involved during the field trials. After careful analysis, we conclude that no single evalu- ated mobile ambient sensor is suitable for proximity detection in NFC-based contactless applications in realistic deployment scenarios. Lastly, we identify a number of potential avenues that may improve their effectiveness.",

author = "Carlton Shepherd and Iakovos Gurulian and Eibe Frank and Konstantinos Markantonakis and Akram, {Raja Naeem} and Emmanouil Panaousis and Keith Mayes",

note = "{\textcopyright} 2017 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.; Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST) ; Conference date: 10-05-2017",

year = "2017",

month = may,

day = "10",

language = "English",

pages = "0--0",

booktitle = "Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST)",

publisher = "IEEE",

}

Shepherd, C, Gurulian, I, Frank, E, Markantonakis, K, Akram, RN, Panaousis, E & Mayes, K 2017, The applicability of ambient sensors as proximity evidence for NFC transactions. in Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST). IEEE, San Jose, pp. 0-0, Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST), 10/05/17. <http://www.ieee-security.org/TC/SPW2017/MoST/>

The applicability of ambient sensors as proximity evidence for NFC transactions. / Shepherd, Carlton; Gurulian, Iakovos; Frank, Eibe; Markantonakis, Konstantinos; Akram, Raja Naeem; Panaousis, Emmanouil; Mayes, Keith.

Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST). San Jose : IEEE, 2017. p. 0-0.

Research output: Chapter in Book/Conference proceeding with ISSN or ISBN › Conference contribution with ISSN or ISBN

TY - GEN

T1 - The applicability of ambient sensors as proximity evidence for NFC transactions

AU - Shepherd, Carlton

AU - Gurulian, Iakovos

AU - Frank, Eibe

AU - Markantonakis, Konstantinos

AU - Akram, Raja Naeem

AU - Panaousis, Emmanouil

AU - Mayes, Keith

N1 - © 2017 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.

PY - 2017/5/10

Y1 - 2017/5/10

N2 - Near Field Communication (NFC) has enabled mo- bile phones to emulate contactless smart cards. Similar to contactless smart cards, they are also susceptible to relay attacks. To counter these, a number of methods have been proposed that rely primarily on ambient sensors as a proximity detection mechanism (also known as an anti-relay mechanism). In this paper, we empirically evaluate a comprehensive set of ambient sensors for their effectiveness as a proximity detection mechanism for NFC contactless-based applications like bank- ing, transport and high-security access controls. We selected 17 sensors available via the Google Android platform. Each sensor, where feasible, was used to record the measurements of 1,000 contactless transactions at four different physical locations. A total of 252 users, a random sample from the university student population, were involved during the field trials. After careful analysis, we conclude that no single evalu- ated mobile ambient sensor is suitable for proximity detection in NFC-based contactless applications in realistic deployment scenarios. Lastly, we identify a number of potential avenues that may improve their effectiveness.

AB - Near Field Communication (NFC) has enabled mo- bile phones to emulate contactless smart cards. Similar to contactless smart cards, they are also susceptible to relay attacks. To counter these, a number of methods have been proposed that rely primarily on ambient sensors as a proximity detection mechanism (also known as an anti-relay mechanism). In this paper, we empirically evaluate a comprehensive set of ambient sensors for their effectiveness as a proximity detection mechanism for NFC contactless-based applications like bank- ing, transport and high-security access controls. We selected 17 sensors available via the Google Android platform. Each sensor, where feasible, was used to record the measurements of 1,000 contactless transactions at four different physical locations. A total of 252 users, a random sample from the university student population, were involved during the field trials. After careful analysis, we conclude that no single evalu- ated mobile ambient sensor is suitable for proximity detection in NFC-based contactless applications in realistic deployment scenarios. Lastly, we identify a number of potential avenues that may improve their effectiveness.

M3 - Conference contribution with ISSN or ISBN

SP - 0

EP - 0

BT - Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST)

PB - IEEE

CY - San Jose

T2 - Proceedings of the IEEE Security and Privacy Workshops: Mobile Security Technologies (MoST)

Y2 - 10 May 2017

ER -