{"id":"https://openalex.org/W2743754785","doi":"https://doi.org/10.1145/3098954.3103161","title":"Security and Privacy Implications of NFC-enabled Contactless Payment Systems","display_name":"Security and Privacy Implications of NFC-enabled Contactless Payment Systems","publication_year":2017,"publication_date":"2017-08-10","ids":{"openalex":"https://openalex.org/W2743754785","doi":"https://doi.org/10.1145/3098954.3103161","mag":"2743754785"},"language":"en","primary_location":{"id":"doi:10.1145/3098954.3103161","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3098954.3103161","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004664026","display_name":"Nicholas Akinyokun","orcid":null},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Nicholas Akinyokun","raw_affiliation_strings":["School of Computing and Information Systems, The University of Melbourne, Australia"],"affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, The University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109510375","display_name":"Vanessa Teague","orcid":null},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Vanessa Teague","raw_affiliation_strings":["School of Computing and Information Systems, The University of Melbourne, Australia"],"affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, The University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5004664026"],"corresponding_institution_ids":["https://openalex.org/I165779595"],"apc_list":null,"apc_paid":null,"fwci":5.5557,"has_fulltext":false,"cited_by_count":30,"citation_normalized_percentile":{"value":0.96212715,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10986","display_name":"RFID technology advancements","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/2214","display_name":"Media Technology"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/near-field-communication","display_name":"Near field communication","score":0.8402186632156372},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.829255223274231},{"id":"https://openalex.org/keywords/payment","display_name":"Payment","score":0.7209463119506836},{"id":"https://openalex.org/keywords/contactless-smart-card","display_name":"Contactless smart card","score":0.7194604277610779},{"id":"https://openalex.org/keywords/mobile-payment","display_name":"Mobile payment","score":0.6617999076843262},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5842456817626953},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5767295956611633},{"id":"https://openalex.org/keywords/smart-card","display_name":"Smart card","score":0.5752520561218262},{"id":"https://openalex.org/keywords/payment-card","display_name":"Payment card","score":0.5588257312774658},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5333739519119263},{"id":"https://openalex.org/keywords/database-transaction","display_name":"Database transaction","score":0.4748437702655792},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.4239580035209656},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.407524049282074},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.21188369393348694}],"concepts":[{"id":"https://openalex.org/C175604262","wikidata":"https://www.wikidata.org/wiki/Q273353","display_name":"Near field communication","level":3,"score":0.8402186632156372},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.829255223274231},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.7209463119506836},{"id":"https://openalex.org/C66569333","wikidata":"https://www.wikidata.org/wiki/Q13220021","display_name":"Contactless smart card","level":3,"score":0.7194604277610779},{"id":"https://openalex.org/C160949748","wikidata":"https://www.wikidata.org/wiki/Q1365703","display_name":"Mobile payment","level":3,"score":0.6617999076843262},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5842456817626953},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5767295956611633},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.5752520561218262},{"id":"https://openalex.org/C21021354","wikidata":"https://www.wikidata.org/wiki/Q1207171","display_name":"Payment card","level":3,"score":0.5588257312774658},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5333739519119263},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.4748437702655792},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.4239580035209656},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.407524049282074},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.21188369393348694},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C96122199","wikidata":"https://www.wikidata.org/wiki/Q628096","display_name":"Ultra high frequency","level":2,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3098954.3103161","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3098954.3103161","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6100000143051147,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W32836451","https://openalex.org/W356286598","https://openalex.org/W1237834003","https://openalex.org/W1436154611","https://openalex.org/W1490052377","https://openalex.org/W1518070019","https://openalex.org/W1554296340","https://openalex.org/W1581358406","https://openalex.org/W1632109869","https://openalex.org/W1845506163","https://openalex.org/W1972174506","https://openalex.org/W1973893058","https://openalex.org/W1977245960","https://openalex.org/W1987828427","https://openalex.org/W1989391244","https://openalex.org/W1989883099","https://openalex.org/W1997655704","https://openalex.org/W2019050436","https://openalex.org/W2044705232","https://openalex.org/W2045467487","https://openalex.org/W2048684972","https://openalex.org/W2063068653","https://openalex.org/W2073745857","https://openalex.org/W2096473396","https://openalex.org/W2096686131","https://openalex.org/W2099198684","https://openalex.org/W2105841025","https://openalex.org/W2119677291","https://openalex.org/W2136340790","https://openalex.org/W2139234472","https://openalex.org/W2142344425","https://openalex.org/W2147780311","https://openalex.org/W2156184091","https://openalex.org/W2162482319","https://openalex.org/W2204535006","https://openalex.org/W2232454642","https://openalex.org/W2497607267","https://openalex.org/W2547961895","https://openalex.org/W2591561983","https://openalex.org/W2597222713","https://openalex.org/W2914982603","https://openalex.org/W3028895824","https://openalex.org/W4255601674","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W3121451588","https://openalex.org/W1528295240","https://openalex.org/W2352298727","https://openalex.org/W2589331527","https://openalex.org/W2743754785","https://openalex.org/W420788411","https://openalex.org/W3210722202","https://openalex.org/W3012497282","https://openalex.org/W2792457398","https://openalex.org/W569822935"],"abstract_inverted_index":{"Nowadays,":[0],"contactless":[1,44,65,103,115,127,141,170,199],"payments":[2,128],"are":[3,21,184],"becoming":[4],"increasingly":[5],"common":[6],"as":[7,31,157,159,186],"new":[8],"smartphones,":[9],"tablets,":[10],"point-of-sale":[11],"(POS)":[12],"terminals":[13],"and":[14,49,54,73,95,106,123,129,138,154,164,173],"payment":[15,45,66,104,142,171,200],"cards":[16,105,172],"(often":[17],"termed":[18],"\"tap-and-pay\"":[19],"cards)":[20],"designed":[22],"to":[23,135,194],"support":[24],"Near":[25],"Field":[26],"Communication":[27],"(NFC)":[28],"technology.":[29],"However,":[30],"NFC":[32],"technology":[33],"becomes":[34],"pervasive,":[35],"there":[36],"have":[37],"been":[38],"concerns":[39],"about":[40],"how":[41,160],"well":[42,158],"NFC-enabled":[43,107,174],"systems":[46,67,80],"protect":[47],"individuals":[48],"organizations":[50],"from":[51],"emerging":[52],"security":[53,63,93,137],"privacy":[55,71,139],"threats.":[56],"In":[57],"this":[58],"paper,":[59],"we":[60],"examine":[61],"the":[62,70,74,89,99,121,149,152,196],"of":[64,198],"by":[68,191],"considering":[69],"threats":[72],"different":[75],"adversarial":[76],"attacks":[77],"that":[78,97],"these":[79,179],"must":[81],"defend":[82],"against.":[83],"We":[84,118],"focus":[85],"our":[86],"analysis":[87],"on":[88,101,148,178],"underlying":[90],"trust":[91],"assumptions,":[92],"measures":[94],"technologies":[96],"form":[98],"basis":[100],"which":[102],"mobile":[108,165,175],"wallets":[109,176],"exchange":[110],"sensitive":[111],"transaction":[112],"data":[113],"with":[114,133],"POS":[116],"terminals.":[117],"also":[119],"explore":[120],"EMV":[122,153],"ISO":[124,155],"standards":[125],"for":[126],"disclose":[130],"their":[131,169],"shortcomings":[132],"regards":[134],"enforcing":[136],"in":[140],"transactions.":[143,201],"Our":[144],"findings":[145],"shed":[146],"light":[147],"discrepancies":[150],"between":[151],"standards,":[156,180],"card":[161],"issuing":[162],"banks":[163],"wallet":[166],"providers":[167],"configure":[168],"based":[177],"respectively.":[181],"These":[182],"inconsistencies":[183],"disconcerting":[185],"they":[187],"can":[188],"be":[189],"exploited":[190],"an":[192],"adversary":[193],"compromise":[195],"integrity":[197]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":5}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2025-10-10T00:00:00"}