The aim of this paper is to show security measures for NFC (Near Field Communication) use cases and devices. We give a brief overview over NFC technology and evaluate the implementation of NFC in devices. Out of this technology review we derive different use cases and applications based on NFC technology. Based on the use cases we show assets and interfaces of an NFC device that could be a possible target of an attacker. In the following we apply different attacks against the operation modes to show how applications and devices could be protected against such attacks. The information collected is consolidated in a set of threats giving guidelines on how to improve security and overcome privacy issues. This allows integrating NFC technology in a secure way for the end consumer.

Near Field Communication (NFC) currently is one of the most promising technologies in handsets for contactless applications like ticketing or payment. These applications require a secure store for keeping sensitive data. Combining NFC with integrated smartcard chips in a mobile device allows the emulation of different cards. Representing each secure element with different UIDs poses several problems. Thus we propose an approach with a fixed UID dedicated to a Secure Element Controller (SEC). This approach allows an optimized backwards compatibility to already established reader infrastructures but also the communication in peer-to-peer mode with other NFC devices. Additionally the communication over peer-to-peer as well as the internal mode of secure elements at the same time is possible. This is approach poses a flexible alternative to the implementations proposed so far. In addition when there are to multiple, removable secure elements in a device it is ensured that the secure elements are only used by authorized user/devices. The SEC in this case handles the communication between the secure elements as well as their authentication. These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Near Field Communication (NFC) is a wireless communication technology to transfer data over distances of up to 10 cm. With this technology, a mobile device is capable of emulating smartcards for access, payment or loyalty. The benefits of a mobile device with NFC over an ordinary smartcard are the interaction and network capabilities of such a device. Thus there is the possibility to distributed smartcard applications through a data link to a mobile device, instead of issuing physical cards. The goal of this paper is to present a platform to securely manage smartcard applications in such NFC devices. Issuing of application in NFC devices is different in several stages compared to ordinary smartcards. With regard to security, there are different processes to be protected and new attack scenarios. In this paper functional aspects of such an architecture and the rolls of the instances participating are discussed. Although NFC allows a smooth interaction for the consumer, the infrastructure behind the scene is complex and requires the cooperation on different levels to ensure interoperability and of a thriving contactless scheme to be deployed. According to the concept, three different prototypes have been implemented to remotely manage the smartcard applications.

SmartCard Webserver (SCWS) is an application platform technology for services that runs within a tamper proof hardware, like in a smartcard chip. Due to upcoming application scenarios like using a mobile device as a contactless smartcard based on Near Field Communication (NFC), the use of tamper proof hardware in mobile devices is getting more popular. SCWS is an application server within a SIMCard. A web browser on the handset can be used to interact with servlets on the server. Beside user interface capabilities, SCWS also provides remote management features and a sound security concept for application access. In this paper we present the results of a survey of a user experience study regarding SCWS. The study focuses on the user experience and interaction with mobile web applications in comparison to natively implemented applications. We conducted 32 personal interviews with consisted out of a questionnaire and user experiments with a handset. Out of the results of the survey we give recommendations on the design and use of SCWS for mobile applications.

Scientific research in many fields is increasingly a collaborative effort across multiple institutions and disciplines. Scientific researchers need not only an effective system to manage their data, results, and the experiments that generate the results, but also a platform to integrate, share and search these across multiple institutions. Therefore, researchers are able to reuse experiments, pool expertise and validate approaches. In this paper, we present Sci- Port, a system of experiment management and integration for collaborative scientific research. SciPort’s architecture uses i) a general transformation-based data model to represent and link experiment processes; ii) hierarchical data classification across multiple institutions according to research programs’ goals and organization; iii) metadatacentric representation that concisely captures the context of experiments; and iv) virtual data integration through centralized metadata integration. The system is built for open source, and the metadata-based representation and integration provides a unified framework and tool set to manage and share experiments for scientific research communities.