Threat Modeling for offline NFC Payments
Jia Fan, Yong Liu, Li Zhang · Journal of Convergence Information Technology · 2013
Near Field Communication( NFC) enabled phone made it possible that the offline payment between users can be conducted with digital vouchers(eVoucher). The duplication of eVoucher and disclosure of personal information are concerned by user, however the current technology embedded is not sufficient to build a complete secured offline payment system. The main challenges to security come from lacking of specific and comprehensive analysis of the security requirements in design and implementation of the NFC payments. The paper analyzed the threats which may damage the assets from the entries depicted in DFD (Data Flow Diagram), and illustrated each of these threats with a few attack scenarios. The threats are listed and a corresponding migration plan is proposed from the perspectives of technique and usage for the common threats and some especially in NFC offline payment.