A mobile trusted computing architecture for a near field communication ecosystem

ABSTRACT

Near Field Communication (NFC) is a wireless communication technology to transfer data over distances of up to 10 cm. With this technology, a mobile device is capable of emulating smartcards for access, payment or loyalty. The benefits of a mobile device with NFC over an ordinary smartcard are the interaction and network capabilities of such a device. Thus there is the possibility to distributed smartcard applications through a data link to a mobile device, instead of issuing physical cards. The goal of this paper is to present a platform to securely manage smartcard applications in such NFC devices. Issuing of application in NFC devices is different in several stages compared to ordinary smartcards. With regard to security, there are different processes to be protected and new attack scenarios. In this paper functional aspects of such an architecture and the rolls of the instances participating are discussed. Although NFC allows a smooth interaction for the consumer, the infrastructure behind the scene is complex and requires the cooperation on different levels to ensure interoperability and of a thriving contactless scheme to be deployed. According to the concept, three different prototypes have been implemented to remotely manage the smartcard applications.

REFERENCES

• 1: P. Crane, A new service infrastructure architecture, BT Technology Journal, v.23 n.1, p.15-27, January 2005 [doi>10.1007/s10550-005-0104-4]
• 2: Kurt Dietrich, An integrated architecture for trusted computing for java enabled embedded devices, Proceedings of the 2007 ACM workshop on Scalable trusted computing, November 02-02, 2007, Alexandria, Virginia, USA [doi>10.1145/1314354.1314358]
• 3: D. Hatebur and M. Heisel. Problem frames and architectures for security problems. In Proceedings of the 24th International Conference on Computer Safety, Reliability and Security (SAFECOMP), pages 390--404. Springer-Verlag, 2005.
• 4: Roger Kehr , Michael Rohs , Harald Vogt, Issues in Smartcard Middleware, Revised Papers from the First International Workshop on Java on Smart Cards: Programming and Security, p.90-97, September 14, 2000
• 5: Roger Kehr , Andreas Zeidler, Look, Ma, My Homepage is Mobile!, Personal and Ubiquitous Computing, v.4 n.4, p.217-220, August 2000 [doi>10.1007/s007790070006]
• 6: G. Madlmayr, B. Groiss, J. Langer, and J. Scharinger. The potential of sim cards as an application platform for smart server systems. In Proceedings of the e-Smart Conference 2008. Strategies Telecoms & Multimedia, Communication and Media for ICT Innovation, 09 2008.
• 7: K. Mayes, K. Markantonakis, and W. G. Sirett. A behavioural approach to smart card application monitoring. Smart Card Technology International, 2005:130--131, Dec 2005. The global journal of advanced card technology, www.globalsmart.com.
• 8: Jim Rees , Peter Honeyman, WebCard: a java card web server, Proceedings of the fourth working conference on smart card research and advanced applications on Smart card research and advanced applications, p.197-207, February 2001, Bristol, United Kingdom
• 9: Antonio Ruiz , Gregorio Martínez , Oscar Cánovas Reverte , Antonio F. Gómez Skarmeta, SPEED Protocol: Smartcard-Based Payment with Encrypted Electronic Delivery, Proceedings of the 4th International Conference on Information Security, p.446-461, October 01-03, 2001
• 10: Trusted Computing Group. Teg mobile reference architecture, June 2007. Version 1.0.
• 11: P. Urien. Internet card, a smart card as a true internet node. Computer Communications, 23(17):1655--1666, 2000.
• 12: P. Urien. Smarttp -- smart transfer protocol, Juni 2001. Draft.
• 13: Z. Yan and P. Cofta. A mechanism for trust sustainability among trusted computing platforms. In TrustBus, pages 11--19, 2004.