A Privacy-Preserving NFC Mobile Pass for Transport Systems - Archive ouverte HAL Access content directly
Journal Articles EAI Endorsed Transactions on Mobile Communications and Applications Year : 2014

A Privacy-Preserving NFC Mobile Pass for Transport Systems

(1, 2) , (3) , (4) , (5) , (4, 2)
1
2
3
4
5

Abstract

The emergence of the NFC (Near Field Communication) technology brings new capacities to the next generation of smartphones, but also new security and privacy challenges. Indeed through its contactless interactions with external entities, the smartphone of an individual will become an essential authentication tool for service providers such as transport operators. However, from the point of view of the user, carrying a part of the service through his smartphone could be a threat for his privacy. Indeed, an external attacker or the service provider himself could be tempted to track the actions of the user. In this paper, we propose a privacy-preserving contactless mobile service, in which a user’s identity cannot be linked to his actions when using the transport system. The security of our proposition relies on the combination of a secure element in the smartphone and on a privacy-enhancing cryptographic protocol based on a variant of group signatures. In addition, although a user should remain anonymous and his actions unlinkable in his daily journeys, we designed a technique for lifting his anonymity in extreme circumstances. In order to guarantee the usability of our solution, we implemented a prototype demonstrating that our solution meets the major functional requirements for real transport systems: namely that the mobile pass can be validated at a gate in less than 300 ms, and this even if the battery of the smartphone is exhausted.
Fichier principal
Vignette du fichier
mca.2.5.e4.pdf (1.56 Mo) Télécharger le fichier
Origin : Publisher files allowed on an open archive

Dates and versions

hal-01091576 , version 1 (25-05-2021)

Licence

Attribution - CC BY 4.0

Identifiers

Cite

Ghada Arfaoui, Guillaume Dabosville, Sébastien Gambs, Patrick Lacharme, Jean-François Lalande. A Privacy-Preserving NFC Mobile Pass for Transport Systems. EAI Endorsed Transactions on Mobile Communications and Applications, 2014, 14 (5), pp.e4. ⟨10.4108/mca.2.5.e4⟩. ⟨hal-01091576⟩
506 View
71 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More