Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Managing NFC Payment Applications through Cloud...

aag1091
October 21, 2015

Managing NFC Payment Applications through Cloud Computing

aag1091

October 21, 2015
Tweet

More Decks by aag1091

Other Decks in Technology

Transcript

  1. Authors • Pardis Pourghomi Department of Computer Science, American University

    of the Middle East (AUM) Cyber Security, Contactless Payments • Gheorghita (George) Ghinea Reader in Computing, Brunel University Multimedia, HCI, Networks, e-Applications, Mulsemedia
  2. Content • Evolution and Introduction to NFC Payments • Examples

    of NFC Payments • Secure Element(SE) within NFC Architecture • The Role of Cloud Computing within NFC Ecosystem • Fujitsu Cloud-based Data Transfer Service Project • NFC and Cloud-Based Payments Solution • Cloud-Based NFC Payments in Austria • Proposed Approach VS AI’s Approach • Conclusion
  3. •NFC is designed for short distance wireless communication •NFC is

    complementary to Bluetooth and 802.11 with their long distance capabilities •Easy and simple connection method •Enables the exchange of data between devices over the distance of up to 20 centimetres •Provides communication method to non-self powered devices Introduction to NFC
  4. •Download music or video from a smart poster •Exchange business

    cards, Pay bus or train fair, Parking tickets, Pay at Kiosks, Pay and purchase at Point of Sale Terminals •Access controls in office, hotels, airports, print receipts to printer Examples of using NFC enabled mobile phones
  5. Secure Element(SE) within NFC Architecture ▪ Non removable • Baseband

    Processor - Built within mobile devices - Change required if device is lost - Protocol is not standardised yet • Embedded Hardware - Needs to be added by mobile device manufacturer - Change required if device is changed - Protocol is not standardised yet - e.g., Nokia 6131 First NFC phone
  6. Secure Element(SE) within NFC Architecture ▪ Removable • Secure Memory

    Card(SMC) - Comes separately has a MMC or SD - Same SE can be used on multiple NFC enabled devices - Protocol is not standardised yet • Universal Integrated Circuit Card(UICC) - Comes separately and is supported by GSM and UMTS networks - Works on top of SWP with HCI
  7. • Cloud-based payment solution can help the adoption of NFC

    as it only requires downloadable applications for both retailers and customers. • Security of customer's credentials (e.g. bank account details) • In terms of flexibility and manageability, it makes the whole process much clearer and easier to handle. THE ROLE OF CLOUD COMPUTING WITHIN NFC ECOSYSTEM
  8. Fujitsu Cloud-based Data Transfer Service Project • The system is

    the combination of cloud-based communication platform and application runtime environment • Application and data transmission are automatically performed from the cloud • Applications are launched and ran on a device (PC, laptop or smartphone) and are deleted when they are not required anymore
  9. NFC AND CLOUD-BASED PAYMENTS SOLUTION • Could’s owners can be

    Financial Institutes themselves or a third party payment company like Paypal • Credentials are downloaded from cloud, used and than can be deleted once transaction is finished • Personalized NFC tag per user. • Deploying a Personalized tag takes less than a minute.
  10. CLOUD-BASED NFC PAYMENTS IN AUSTRIA • The Al Company that

    is a mobile network operator in Austria • McDonald's and Merkur supermarket have signed a contract with Alto test the development of PayBox NFC mobile payment service • Al is a subsidiary of Telekom Austria group which holds the full Austrian banking license • The PayBox service does not require a PIN and it allows a payment with the amount of up to €25 • It uses a small PayBox NFC unit rather than contactless point of sale terminals for handling mobile payments • Payment takes half a second to process
  11. Proposed Approach VS AI’s Approach Works with NFC enabled chip

    and pin POS No capability of working with chip and pin devices Suggests working with popular financial institutions such as MasterCard, and Visa Transaction processes are directed towards PayBox bank which has less global popularity Customers credentials stored in SE which is installed inside the phone Contactless sticker is easy to access for malicious purposes Payment application is deleted after the cloud is updated - more secure and saves memory It is not specified in their model description that what happens to the payment ap
  12. Conclusion Contactless technology for the Internet of Things requires all

    parties to agree one common definition and implementation.