Eavesdropping near field contactless payments: A quantitative analysis

Add to your list(s) Download to your calendar using vCal

• Thomas P. Diakos, University of Surrey
• Tuesday 21 January 2014, 15:00-16:00
• Lecture Theatre 2, Computer Laboratory, William Gates Building.

If you have a question about this talk, please contact Laurent Simon.

Abstract: We present a quantitative assessment in terms of frame error rates for the success of an eavesdropping attack on a contactless transaction using easily concealable antennas and low cost electronics. An inductive loop, similar in size to those found in mobile devices equipped with NFC capabilities, was used to emulate an ISO 14443 transmission. For eavesdropping we used an identical loop antenna as well as a modified shopping trolley. Synchronisation and frame recovery were implemented in software. As a principal result of our experiments we present the FER achieved over a range of eavesdropping distances, up to 1m, at different magnetic field strengths within the range specified by the ISO 14443 standard.

Bio: Thomas is a PhD candidate at the University of Surrey, looking into the security and privacy of near field contactless payments. He is currently investigating how a combination of remote interrogation and eavesdropping could be used to extract information from contactless devices that could potentially cause financial or anonymity loss for the victim. Following his military service, he studied for a BEng in electrical engineering from the University of Sheffield and an MSc in communications and signal processing from the University of Bristol.

This talk is part of the Computer Laboratory Security Seminar series.

This talk is included in these lists:

• All Talks (aka the CURE list)
• Cambridge talks
• Computer Laboratory Security Seminar
• Department of Computer Science and Technology talks and seminars
• Interested Talks
• Lecture Theatre 2, Computer Laboratory, William Gates Building
• School of Technology
• Security-related talks
• Trust & Technology Initiative - interesting events
• bld31

Note that ex-directory lists are not shown.