Miss
SECURITY OF CONTACTLESS SMART CARDS
By
(Project IV: PJT401B)
Submitted in partial fulfillment of the requirements for the degree
BACCALAUREATUS TECHNOLOGIAE: INFORMATION TECHNOLOGY
in the
FACULTY OF INFORMATION AND COMMUNICATION TECHNOLOGY
(Department of Software Engineering)
at the
TSHWANE UNIVERSITY OF TECHNOLOGY
1. BACKGROUND
The Contactless smartcard has built-in chip technology, as well as a standard magnetic Stripe. This enables the card to be used in the traditional manner at all MasterCard or Visa acceptance locations. The cardholder can pay with one simple touch of the card. No swipe of the card, signature or PIN is required depending on the CVM limit.
Most banks still prefer standard contact smart cards such as credit and debit cards, however, contactless smartcards are becoming popular and they are spreading quickly. Contactless smartcards are more convenient, faster checkout, and Easy to use.
Contactless smart cards and devices feature an embedded chip and radio frequency antenna. After you tap or wave your contactless smartcard, the card transmits payment detail wirelessly, eliminating the need to hand your card to the merchant to swipe it through a reader; just one tap of your card on the Point of sales (POS) Terminal at participating locations and the transaction is complete.
The proper use of these technologies provides high level of security, however, many applications, especially for access control, are being developed by not security aware developers, so they can be easily attacked.
The reason why I’m interested in the security of contactless smart cards and near-field communication (NFC) devices is that they are both used in applications that require certain level of security, such as payment systems, electronic ticketing, electronic vouchers and access control systems.
What is CVM limit?
Contactless transaction without entering PIN code
For less than R300.00 amount transaction customer won’t be
By
(Project IV: PJT401B)
Submitted in partial fulfillment of the requirements for the degree
BACCALAUREATUS TECHNOLOGIAE: INFORMATION TECHNOLOGY
in the
FACULTY OF INFORMATION AND COMMUNICATION TECHNOLOGY
(Department of Software Engineering)
at the
TSHWANE UNIVERSITY OF TECHNOLOGY
1. BACKGROUND
The Contactless smartcard has built-in chip technology, as well as a standard magnetic Stripe. This enables the card to be used in the traditional manner at all MasterCard or Visa acceptance locations. The cardholder can pay with one simple touch of the card. No swipe of the card, signature or PIN is required depending on the CVM limit.
Most banks still prefer standard contact smart cards such as credit and debit cards, however, contactless smartcards are becoming popular and they are spreading quickly. Contactless smartcards are more convenient, faster checkout, and Easy to use.
Contactless smart cards and devices feature an embedded chip and radio frequency antenna. After you tap or wave your contactless smartcard, the card transmits payment detail wirelessly, eliminating the need to hand your card to the merchant to swipe it through a reader; just one tap of your card on the Point of sales (POS) Terminal at participating locations and the transaction is complete.
The proper use of these technologies provides high level of security, however, many applications, especially for access control, are being developed by not security aware developers, so they can be easily attacked.
The reason why I’m interested in the security of contactless smart cards and near-field communication (NFC) devices is that they are both used in applications that require certain level of security, such as payment systems, electronic ticketing, electronic vouchers and access control systems.
What is CVM limit?
Contactless transaction without entering PIN code
For less than R300.00 amount transaction customer won’t be
References: Cooper D.R., and Schindler, P.S, (2003). Business research methods 8th ed. McGraw Hill, Boston. Welman J. C Kruger S.J, (2001). Research Methodology: for the Business and Administrative sciences, 2nd Ed. Oxford University Press, South Africa, Cape Town. Martin H, (2011). Doctoral Degree Programme (2), FIT BUT, “SECURITY OF CONTACTLESS SMART CARDS” Batten J, (1998) Chambers M. B, (1996) Contactless smartcards: New automatic fare collection system for Hong Kong 's public transport. Public Transport International 1996 No. 6 pp 8 - 9. Chang F Moreau B, (2003). The case for contactless smart cards is overwhelming. International Railway Journal, January 2003, pp 20 - 21. Najman G (2003) Pearson R & Ranta S, (1995). Implementation issues of electronic payment systems for public transport services: a Finnish case study. Proc. 7th World Conf. Transport Res. 3 (18) 361 - 371. Ratchford P, (1999) Shield C, Blythe P & Lawther S, (1999).The DISTINCT project. Travel forward with smartcards: Improving the efficiency of transport systems. ERA Report 99 - 0826, 9:1-10. Wiercienski W, (1999) Pandy S, (2013). "Technology and Security Considerations for Mobile Contactless Payments at the Point-of-Sale in the U.S.", Summary Report of June 18-19, 2013.