Relay Attacks on Secure Element-enabled Mobile Devices: Virtual Pickpocketing Revisited

Michael Roland; Josef Langer; Josef Scharinger

doi:10.1007/978-3-642-30436-1_1

Relay Attacks on Secure Element-enabled Mobile Devices: Virtual Pickpocketing Revisited

Michael Roland, Josef Langer, Josef Scharinger

Research output: Chapter in Book/Report/Conference proceedings › Conference contribution › peer-review

19 Citations (Scopus)

Abstract

Near Field Communication's card emulation mode is a way to combine smartcards with a mobile phone. Relay attack scenarios are well-known for contactless smartcards. In the past, relay attacks have only been considered for the case, where an attacker has physical proximity to an NFC-enabled mobile phone. However, a mobile phone introduces a significantly different threat vector. A mobile phone's permanent connectivity to a global network and the possibility to install arbitrary applications permit a significantly improved relay scenario. This paper presents a relay attack scenario where the attacker no longer needs physical proximity to the phone. Instead, simple relay software needs to be distributed to victims' mobile devices. This publication describes this relay attack scenario in detail and assesses its feasibility based on measurement results.

Original language	English
Title of host publication	Information Security and Privacy Research - 27th IFIP TC 11 Information Security and Privacy Conference, SEC 2012, Proceedings
Publisher	Springer
Pages	1-12
Number of pages	12
ISBN (Print)	978-3-642-30435-4
DOIs	https://doi.org/10.1007/978-3-642-30436-1_1
Publication status	Published - 2012
Event	27th IFIP TC 11 International Information Security and Privacy Conference, SEC 2012 - Heraklion, Crete, Greece Duration: 4 Jun 2012 → 6 Jun 2012 http://www.sec2012.org/

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	376 AICT
ISSN (Print)	1868-4238

Conference

Conference	27th IFIP TC 11 International Information Security and Privacy Conference, SEC 2012
Country/Territory	Greece
City	Heraklion, Crete
Period	04.06.2012 → 06.06.2012
Internet address	http://www.sec2012.org/

Access to Document

10.1007/978-3-642-30436-1_1

Cite this

Roland, M., Langer, J., & Scharinger, J. (2012). Relay Attacks on Secure Element-enabled Mobile Devices: Virtual Pickpocketing Revisited. In Information Security and Privacy Research - 27th IFIP TC 11 Information Security and Privacy Conference, SEC 2012, Proceedings (pp. 1-12). (IFIP Advances in Information and Communication Technology; Vol. 376 AICT). Springer. https://doi.org/10.1007/978-3-642-30436-1_1

@inproceedings{99df86651411492d8a49959d428626f1,

title = "Relay Attacks on Secure Element-enabled Mobile Devices: Virtual Pickpocketing Revisited",

abstract = "Near Field Communication's card emulation mode is a way to combine smartcards with a mobile phone. Relay attack scenarios are well-known for contactless smartcards. In the past, relay attacks have only been considered for the case, where an attacker has physical proximity to an NFC-enabled mobile phone. However, a mobile phone introduces a significantly different threat vector. A mobile phone's permanent connectivity to a global network and the possibility to install arbitrary applications permit a significantly improved relay scenario. This paper presents a relay attack scenario where the attacker no longer needs physical proximity to the phone. Instead, simple relay software needs to be distributed to victims' mobile devices. This publication describes this relay attack scenario in detail and assesses its feasibility based on measurement results.",

author = "Michael Roland and Josef Langer and Josef Scharinger",

note = "Funding Information: This work is part of the project “4EMOBILITY” within the EU programme “Regionale Wettbewerbsf{\"a}higkeit O{\"O} 2007–2013 (Regio 13)” funded by the European regional development fund (ERDF) and the Province of Upper Austria (Land Ober{\"o}sterreich).; 27th IFIP TC 11 International Information Security and Privacy Conference, SEC 2012 ; Conference date: 04-06-2012 Through 06-06-2012",

year = "2012",

doi = "10.1007/978-3-642-30436-1_1",

language = "English",

isbn = "978-3-642-30435-4",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer",

pages = "1--12",

booktitle = "Information Security and Privacy Research - 27th IFIP TC 11 Information Security and Privacy Conference, SEC 2012, Proceedings",

address = "Germany",

url = "http://www.sec2012.org/",

}

Roland, M, Langer, J & Scharinger, J 2012, Relay Attacks on Secure Element-enabled Mobile Devices: Virtual Pickpocketing Revisited. in Information Security and Privacy Research - 27th IFIP TC 11 Information Security and Privacy Conference, SEC 2012, Proceedings. IFIP Advances in Information and Communication Technology, vol. 376 AICT, Springer, pp. 1-12, 27th IFIP TC 11 International Information Security and Privacy Conference, SEC 2012, Heraklion, Crete, Greece, 04.06.2012. https://doi.org/10.1007/978-3-642-30436-1_1

Relay Attacks on Secure Element-enabled Mobile Devices: Virtual Pickpocketing Revisited. / Roland, Michael; Langer, Josef; Scharinger, Josef.
Information Security and Privacy Research - 27th IFIP TC 11 Information Security and Privacy Conference, SEC 2012, Proceedings. Springer, 2012. p. 1-12 (IFIP Advances in Information and Communication Technology; Vol. 376 AICT).

Research output: Chapter in Book/Report/Conference proceedings › Conference contribution › peer-review

TY - GEN

T1 - Relay Attacks on Secure Element-enabled Mobile Devices: Virtual Pickpocketing Revisited

AU - Roland, Michael

AU - Langer, Josef

AU - Scharinger, Josef

N1 - Funding Information: This work is part of the project “4EMOBILITY” within the EU programme “Regionale Wettbewerbsfähigkeit OÖ 2007–2013 (Regio 13)” funded by the European regional development fund (ERDF) and the Province of Upper Austria (Land Oberösterreich).

PY - 2012

Y1 - 2012

N2 - Near Field Communication's card emulation mode is a way to combine smartcards with a mobile phone. Relay attack scenarios are well-known for contactless smartcards. In the past, relay attacks have only been considered for the case, where an attacker has physical proximity to an NFC-enabled mobile phone. However, a mobile phone introduces a significantly different threat vector. A mobile phone's permanent connectivity to a global network and the possibility to install arbitrary applications permit a significantly improved relay scenario. This paper presents a relay attack scenario where the attacker no longer needs physical proximity to the phone. Instead, simple relay software needs to be distributed to victims' mobile devices. This publication describes this relay attack scenario in detail and assesses its feasibility based on measurement results.

AB - Near Field Communication's card emulation mode is a way to combine smartcards with a mobile phone. Relay attack scenarios are well-known for contactless smartcards. In the past, relay attacks have only been considered for the case, where an attacker has physical proximity to an NFC-enabled mobile phone. However, a mobile phone introduces a significantly different threat vector. A mobile phone's permanent connectivity to a global network and the possibility to install arbitrary applications permit a significantly improved relay scenario. This paper presents a relay attack scenario where the attacker no longer needs physical proximity to the phone. Instead, simple relay software needs to be distributed to victims' mobile devices. This publication describes this relay attack scenario in detail and assesses its feasibility based on measurement results.

UR - http://www.scopus.com/inward/record.url?scp=84863958030&partnerID=8YFLogxK

U2 - 10.1007/978-3-642-30436-1_1

DO - 10.1007/978-3-642-30436-1_1

M3 - Conference contribution

SN - 978-3-642-30435-4

T3 - IFIP Advances in Information and Communication Technology

SP - 1

EP - 12

BT - Information Security and Privacy Research - 27th IFIP TC 11 Information Security and Privacy Conference, SEC 2012, Proceedings

PB - Springer

T2 - 27th IFIP TC 11 International Information Security and Privacy Conference, SEC 2012

Y2 - 4 June 2012 through 6 June 2012

ER -

Roland M, Langer J, Scharinger J. Relay Attacks on Secure Element-enabled Mobile Devices: Virtual Pickpocketing Revisited. In Information Security and Privacy Research - 27th IFIP TC 11 Information Security and Privacy Conference, SEC 2012, Proceedings. Springer. 2012. p. 1-12. (IFIP Advances in Information and Communication Technology). doi: 10.1007/978-3-642-30436-1_1

Relay Attacks on Secure Element-enabled Mobile Devices: Virtual Pickpocketing Revisited

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this