Zur Kurzanzeige

dc.contributor.authorArnosti, Christof
dc.contributor.authorGruntz, Dominik
dc.contributor.authorHauri, Marco
dc.date.accessioned2016-05-23T13:16:55Z
dc.date.available2016-05-23T13:16:55Z
dc.date.issued2015-12
dc.identifier.issn2296-4169
dc.identifier.issn1662-2014
dc.identifier.urihttp://hdl.handle.net/11654/17871
dc.description.abstractThis paper presents a smartphone-based physical access control system in which the access points are not directly connected to a central authorization server. The access points ask the mobile phone whether a particular user has access or not. The mobile phone then relays such a request to the access server. The authentication of the smartphone is based on public-key cryptography. This requires that the private key is stored in a secure element or in a trusted execution environment to prevent identity theft. In our solution we use the following secure element archiectures: Host Card Emulation (HCE) and a microSD-based secure element. We show that the HCE approach cannot solve the relay attack under conservative security assumptions and we present and discuss an implementation based on a microSD secure element that still allows the access points to connect to the authorization server upon every access albeit the access points are not connected with it.
dc.description.urihttp://www.fhnw.ch/technik/imvs/publikationen/artikel-2015/fokusreport-gruntz
dc.language.isoen
dc.relation.ispartofIMVS Fokus Report
dc.accessRightsAnonymous
dc.subjectNFC
dc.subjectsecurity
dc.subjectphysical access control system
dc.subjectmobile device
dc.subjectpublic-key cryptography
dc.subjectHost Card Emulation
dc.subjectmicroSD secure element
dc.subjectrelay attack
dc.subject.ddc005 - Computer Programmierung, Programme und Datende
dc.subject.ddc004 - Computer Wissenschaften, Internetde
dc.subject.ddc631 - Technologie, Ausrüstung, Materialiende
dc.titleSecure Physical Access with NFC-enabled Smartphones
dc.type01 - Zeitschriftenartikel, Journalartikel oder Magazin
dc.volume9 (2015)
dc.issue1
dc.audiencePraxis
fhnw.publicationStatePublished
fhnw.ReviewTypeLectoring (ex ante)
fhnw.InventedHereYes
fhnw.PublishedSwitzerlandYes
fhnw.pagination14-22
fhnw.IsStudentsWorkno
fhnw.publicationOnlineJa


Dateien zu dieser Ressource

Thumbnail

Der Eintrag erscheint in:

Zur Kurzanzeige