{"id":"https://openalex.org/W2831820991","doi":"https://doi.org/10.1109/tmc.2018.2853114","title":"Pricing Data Tampering in Automated Fare Collection with NFC-Equipped Smartphones","display_name":"Pricing Data Tampering in Automated Fare Collection with NFC-Equipped Smartphones","publication_year":2018,"publication_date":"2018-07-05","ids":{"openalex":"https://openalex.org/W2831820991","doi":"https://doi.org/10.1109/tmc.2018.2853114","mag":"2831820991"},"language":"en","primary_location":{"id":"doi:10.1109/tmc.2018.2853114","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmc.2018.2853114","pdf_url":null,"source":{"id":"https://openalex.org/S69141925","display_name":"IEEE Transactions on Mobile Computing","issn_l":"1536-1233","issn":["1536-1233","1558-0660","2161-9875"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Mobile Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011008509","display_name":"Fan Dang","orcid":"https://orcid.org/0000-0002-9949-6987"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Fan Dang","raw_affiliation_strings":["School of Software, Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Software, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103040133","display_name":"Ennan Zhai","orcid":"https://orcid.org/0000-0003-4352-7497"},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ennan Zhai","raw_affiliation_strings":["Department of Computer Science, Yale University, New Haven, CT, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Yale University, New Haven, CT, USA","institution_ids":["https://openalex.org/I32971472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100357922","display_name":"Zhenhua Li","orcid":"https://orcid.org/0000-0001-7286-122X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenhua Li","raw_affiliation_strings":["School of Software, Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Software, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025111079","display_name":"Pengfei Zhou","orcid":"https://orcid.org/0000-0003-1836-1122"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengfei Zhou","raw_affiliation_strings":["School of Software, Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Software, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077402873","display_name":"Aziz Mohaisen","orcid":"https://orcid.org/0000-0003-3227-2505"},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aziz Mohaisen","raw_affiliation_strings":["Department of Computer Science, University of Central Florida, Orlando, FL"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Central Florida, Orlando, FL","institution_ids":["https://openalex.org/I106165777"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064314482","display_name":"Kaigui Bian","orcid":null},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kaigui Bian","raw_affiliation_strings":["Department of Computer Science and Technology, Peking University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041626393","display_name":"Qingfu Wen","orcid":"https://orcid.org/0000-0002-4278-2771"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingfu Wen","raw_affiliation_strings":["School of Software, Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Software, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100361458","display_name":"Mo Li","orcid":"https://orcid.org/0000-0002-6047-9709"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Mo Li","raw_affiliation_strings":["School of Computer Science and Engineering, Nanyang Technological University, Singapore"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5011008509"],"corresponding_institution_ids":["https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":2.4649,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.91729317,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"18","issue":"5","first_page":"1159","last_page":"1173"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10986","display_name":"RFID technology advancements","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/2214","display_name":"Media Technology"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7357656955718994},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6037625670433044},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5655604600906372},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.5567210912704468},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5345221161842346},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.46568575501441956},{"id":"https://openalex.org/keywords/public-transport","display_name":"Public transport","score":0.43851137161254883},{"id":"https://openalex.org/keywords/near-field-communication","display_name":"Near field communication","score":0.4314901530742645},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.418700635433197},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.30642634630203247},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.19571265578269958}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7357656955718994},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6037625670433044},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5655604600906372},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.5567210912704468},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5345221161842346},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.46568575501441956},{"id":"https://openalex.org/C539828613","wikidata":"https://www.wikidata.org/wiki/Q178512","display_name":"Public transport","level":2,"score":0.43851137161254883},{"id":"https://openalex.org/C175604262","wikidata":"https://www.wikidata.org/wiki/Q273353","display_name":"Near field communication","level":3,"score":0.4314901530742645},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.418700635433197},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.30642634630203247},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.19571265578269958},{"id":"https://openalex.org/C96122199","wikidata":"https://www.wikidata.org/wiki/Q628096","display_name":"Ultra high frequency","level":2,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tmc.2018.2853114","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmc.2018.2853114","pdf_url":null,"source":{"id":"https://openalex.org/S69141925","display_name":"IEEE Transactions on Mobile Computing","issn_l":"1536-1233","issn":["1536-1233","1558-0660","2161-9875"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Mobile Computing","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/151320","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/151320","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-153628","is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-153628","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1631364393","display_name":null,"funder_award_id":"61432002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3084395662","display_name":null,"funder_award_id":"61632020","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5266843596","display_name":null,"funder_award_id":"CNS-1643207","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7254420518","display_name":null,"funder_award_id":"NRF-2016K1A1A2912757","funder_id":"https://openalex.org/F4320309788","funder_display_name":"Neurosciences Research Foundation"},{"id":"https://openalex.org/G8676548968","display_name":null,"funder_award_id":"61471217","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320309788","display_name":"Neurosciences Research Foundation","ror":"https://ror.org/05exfab56"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W1237834003","https://openalex.org/W1479774102","https://openalex.org/W1632109869","https://openalex.org/W1768994003","https://openalex.org/W1832469506","https://openalex.org/W1882591357","https://openalex.org/W1977245960","https://openalex.org/W1989781795","https://openalex.org/W2001713664","https://openalex.org/W2004513455","https://openalex.org/W2037107113","https://openalex.org/W2103402515","https://openalex.org/W2105114022","https://openalex.org/W2111336263","https://openalex.org/W2156184091","https://openalex.org/W2162482319","https://openalex.org/W2275760912","https://openalex.org/W2384755216","https://openalex.org/W2477685789","https://openalex.org/W2621530037","https://openalex.org/W2762503738","https://openalex.org/W2770488968","https://openalex.org/W3021007144","https://openalex.org/W3028895824","https://openalex.org/W3030561455","https://openalex.org/W4241650197","https://openalex.org/W6627973491","https://openalex.org/W6636535181","https://openalex.org/W6638045046","https://openalex.org/W6675669195","https://openalex.org/W6676893480","https://openalex.org/W6742681302","https://openalex.org/W6777912630"],"related_works":["https://openalex.org/W2154523322","https://openalex.org/W2083200807","https://openalex.org/W1603137082","https://openalex.org/W2364195017","https://openalex.org/W2355430452","https://openalex.org/W2049983405","https://openalex.org/W2392315374","https://openalex.org/W1951195060","https://openalex.org/W2351776620","https://openalex.org/W2352195574"],"abstract_inverted_index":{"Automated":[0],"Fare":[1],"Collection":[2],"(AFC)":[3],"systems":[4,40],"have":[5],"been":[6],"globally":[7],"deployed":[8],"for":[9],"decades,":[10],"particularly":[11],"in":[12,44,86,175,249],"the":[13,18,25,28,57,64,68,79,82,89,105,109,169,176,180,211,214,223,227,233,236,277],"public":[14,65],"transportation":[15],"network":[16,59,66,107],"where":[17],"transit":[19],"fee":[20],"is":[21,60,70,162],"calculated":[22],"based":[23],"on":[24,274],"length":[26],"of":[27,38,73,81,91,129,179,193,213,235,251,263,271],"trip":[29],"(a.k.a.,":[30],"distance-based":[31,135],"pricing":[32,136],"AFC":[33,39,58,83,106,137,165,202],"systems).":[34],"Although":[35],"most":[36],"messages":[37],"are":[41,148],"insecurely":[42],"transferred":[43],"plaintext,":[45],"system":[46,166],"operators":[47,167],"did":[48],"not":[49,231],"pay":[50,142],"much":[51,143],"attention":[52],"to":[53,102,141,150,164,188,221],"this":[54,122],"vulnerability,":[55],"since":[56],"basically":[61],"isolated":[62],"from":[63,78,108],"(e.g.,":[67,195,205],"Internet)-there":[69],"no":[71],"way":[72],"exploiting":[74],"such":[75],"a":[76,100,126,190,200],"vulnerability":[77],"outside":[80],"network.":[84],"Nevertheless,":[85],"recent":[87],"years,":[88],"advent":[90],"Near":[92],"Field":[93],"Communication":[94],"(NFC)-equipped":[95],"smartphones":[96],"has":[97,156],"opened":[98],"up":[99],"channel":[101],"invade":[103],"into":[104],"mobile":[110],"Internet,":[111],"i.e.,":[112],"by":[113,197],"Host-based":[114],"Card":[115],"Emulation":[116],"(HCE)":[117],"over":[118],"NFC-equipped":[119],"smartphones.":[120],"In":[121],"paper,":[123],"we":[124,216,256],"identify":[125],"novel":[127],"paradigm":[128],"attacks,":[130],"called":[131],"LessPay,":[132],"against":[133,276],"modern":[134],"systems,":[138],"enabling":[139],"users":[140,194],"less":[144],"than":[145],"what":[146],"they":[147],"supposed":[149],"be":[151,186],"charged.":[152],"The":[153],"identified":[154],"attack":[155,170,238],"two":[157],"important":[158],"properties:":[159],"1)":[160],"it":[161,184],"invisible":[163],"because":[168],"never":[171],"causes":[172],"any":[173],"inconsistency":[174],"back-end":[177],"database":[178],"operators;":[181],"and":[182,226,253,259,265,269],"2)":[183],"can":[185],"scalable":[187],"affect":[189],"large":[191],"number":[192],"10,000)":[196],"only":[198,232],"requiring":[199],"moderate-sized":[201],"card":[203],"pool":[204],"containing":[206],"150":[207],"cards).":[208],"To":[209],"evaluate":[210,260],"efficacy":[212],"attack,":[215],"developed":[217],"an":[218],"HCE":[219],"app":[220],"launch":[222],"LessPay":[224,237,278],"attack;":[225],"real-world":[228],"experiments":[229],"demonstrate":[230],"feasibility":[234],"(with":[239],"97.6":[240],"percent":[241],"success":[242],"rate)":[243],"but":[244],"also":[245],"its":[246],"low":[247],"cost":[248],"terms":[250],"bandwidth":[252],"computation.":[254],"Finally,":[255],"propose,":[257],"implement":[258],"four":[261],"types":[262],"countermeasures,":[264],"present":[266],"security":[267],"analysis":[268],"comparison":[270],"these":[272],"countermeasures":[273],"defending":[275],"attack.":[279]},"counts_by_year":[{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":3}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}