Investigation And Implementation Of Security Scheme In Near Field Communication

Near Field Communication(NFC)is widely used in various security-critical fields,such as access control,authentication and payment systems.These systems are currently facing with different security risks,especially vulnerable to relay attack.An attacker can manipulate communication data of the victim who is even not aware of having been attacked.That operation threatens personal and property safety of users.This thesis has two goals:(1)to implement relay attacks against Mifare card and NFC devices with P2P mode of communication based on open source technology and development board equipped with PN532 NFC chip,to confirm security risks that NFC devices are now facing,(2)to investigate how to detect and prevent NFC relay attacks by measuring time of communication tests,and to design suitable security scheme to improve the safety performance of NFC devices and applications.We conduct a series of relay attack experiments on communication process between smart card reader and Mifare card and communication process of two NFC devices working in P2P mode.These attack attempts are achieved successfully and stably.We try to track the communication process and tamper exchanged data between two NFC devices,which shows the information leakage and property damage security risks that devices are facing with.Meanwhile,we propose a complete set of delay detection scheme to discover and stop relay attack actions,relying on analyzing the delay data that we have collected during NFC devices communicating with each other.This scheme is made up with three parts,including delay acquisition,delay analysis and delay decision.Specifically,we set a delay detection part in communication process of NFC devices to acquire time data.We design the simple delay threshold decision scheme,statistical delay treatment and decision scheme and delay interval judgment scheme based on Bayesian classification algorithm.The proposed schemes can make effective and reliable decisions of relay attack actions.Finally,we conduct actual experiments to detect and prevent relay attacks using PN532 experiment boards and NFC devices,verifying the safety performance of the delay security counter-measures of detecting and preventing NFC relay attacks.