of the Middle East (AUM) Cyber Security, Contactless Payments • Gheorghita (George) Ghinea Reader in Computing, Brunel University Multimedia, HCI, Networks, e-Applications, Mulsemedia
of NFC Payments • Secure Element(SE) within NFC Architecture • The Role of Cloud Computing within NFC Ecosystem • Fujitsu Cloud-based Data Transfer Service Project • NFC and Cloud-Based Payments Solution • Cloud-Based NFC Payments in Austria • Proposed Approach VS AI’s Approach • Conclusion
complementary to Bluetooth and 802.11 with their long distance capabilities •Easy and simple connection method •Enables the exchange of data between devices over the distance of up to 20 centimetres •Provides communication method to non-self powered devices Introduction to NFC
cards, Pay bus or train fair, Parking tickets, Pay at Kiosks, Pay and purchase at Point of Sale Terminals •Access controls in office, hotels, airports, print receipts to printer Examples of using NFC enabled mobile phones
Processor - Built within mobile devices - Change required if device is lost - Protocol is not standardised yet • Embedded Hardware - Needs to be added by mobile device manufacturer - Change required if device is changed - Protocol is not standardised yet - e.g., Nokia 6131 First NFC phone
Card(SMC) - Comes separately has a MMC or SD - Same SE can be used on multiple NFC enabled devices - Protocol is not standardised yet • Universal Integrated Circuit Card(UICC) - Comes separately and is supported by GSM and UMTS networks - Works on top of SWP with HCI
as it only requires downloadable applications for both retailers and customers. • Security of customer's credentials (e.g. bank account details) • In terms of flexibility and manageability, it makes the whole process much clearer and easier to handle. THE ROLE OF CLOUD COMPUTING WITHIN NFC ECOSYSTEM
the combination of cloud-based communication platform and application runtime environment • Application and data transmission are automatically performed from the cloud • Applications are launched and ran on a device (PC, laptop or smartphone) and are deleted when they are not required anymore
Financial Institutes themselves or a third party payment company like Paypal • Credentials are downloaded from cloud, used and than can be deleted once transaction is finished • Personalized NFC tag per user. • Deploying a Personalized tag takes less than a minute.
is a mobile network operator in Austria • McDonald's and Merkur supermarket have signed a contract with Alto test the development of PayBox NFC mobile payment service • Al is a subsidiary of Telekom Austria group which holds the full Austrian banking license • The PayBox service does not require a PIN and it allows a payment with the amount of up to €25 • It uses a small PayBox NFC unit rather than contactless point of sale terminals for handling mobile payments • Payment takes half a second to process
and pin POS No capability of working with chip and pin devices Suggests working with popular financial institutions such as MasterCard, and Visa Transaction processes are directed towards PayBox bank which has less global popularity Customers credentials stored in SE which is installed inside the phone Contactless sticker is easy to access for malicious purposes Payment application is deleted after the cloud is updated - more secure and saves memory It is not specified in their model description that what happens to the payment ap