A Privacy-Preserving NFC Mobile Pass for Transport Systems - Université de Rennes Accéder directement au contenu
Article Dans Une Revue EAI Endorsed Transactions on Mobile Communications and Applications Année : 2014

A Privacy-Preserving NFC Mobile Pass for Transport Systems

Résumé

The emergence of the NFC (Near Field Communication) technology brings new capacities to the next generation of smartphones, but also new security and privacy challenges. Indeed through its contactless interactions with external entities, the smartphone of an individual will become an essential authentication tool for service providers such as transport operators. However, from the point of view of the user, carrying a part of the service through his smartphone could be a threat for his privacy. Indeed, an external attacker or the service provider himself could be tempted to track the actions of the user. In this paper, we propose a privacy-preserving contactless mobile service, in which a user’s identity cannot be linked to his actions when using the transport system. The security of our proposition relies on the combination of a secure element in the smartphone and on a privacy-enhancing cryptographic protocol based on a variant of group signatures. In addition, although a user should remain anonymous and his actions unlinkable in his daily journeys, we designed a technique for lifting his anonymity in extreme circumstances. In order to guarantee the usability of our solution, we implemented a prototype demonstrating that our solution meets the major functional requirements for real transport systems: namely that the mobile pass can be validated at a gate in less than 300 ms, and this even if the battery of the smartphone is exhausted.
Fichier principal
Vignette du fichier
mca.2.5.e4.pdf (1.56 Mo) Télécharger le fichier
Origine : Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-01091576 , version 1 (25-05-2021)

Licence

Paternité

Identifiants

Citer

Ghada Arfaoui, Guillaume Dabosville, Sébastien Gambs, Patrick Lacharme, Jean-François Lalande. A Privacy-Preserving NFC Mobile Pass for Transport Systems. EAI Endorsed Transactions on Mobile Communications and Applications, 2014, 14 (5), pp.e4. ⟨10.4108/mca.2.5.e4⟩. ⟨hal-01091576⟩
556 Consultations
122 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More