Mobile Computing, Applications, and Services. 5th International Conference, MobiCASE 2013, Paris, France, November 7-8, 2013, Revised Selected Papers

Research Article

A Privacy-Preserving Contactless Transport Service for NFC Smartphones

Download45 downloads
  • @INPROCEEDINGS{10.1007/978-3-319-05452-0_24,
        author={Ghada Arfaoui and S\^{e}bastien Gambs and Patrick Lacharme and Jean-Francois Lalande and Roch Lescuyer and Jean-Claude Paill\'{e}s},
        title={A Privacy-Preserving Contactless Transport Service for NFC Smartphones},
        proceedings={Mobile Computing, Applications, and Services. 5th International Conference, MobiCASE 2013, Paris, France, November 7-8, 2013, Revised Selected Papers},
        proceedings_a={MOBICASE},
        year={2014},
        month={6},
        keywords={},
        doi={10.1007/978-3-319-05452-0_24}
    }
    
  • Ghada Arfaoui
    Sébastien Gambs
    Patrick Lacharme
    Jean-Francois Lalande
    Roch Lescuyer
    Jean-Claude Paillès
    Year: 2014
    A Privacy-Preserving Contactless Transport Service for NFC Smartphones
    MOBICASE
    Springer
    DOI: 10.1007/978-3-319-05452-0_24
Ghada Arfaoui, Sébastien Gambs1,*, Patrick Lacharme2,*, Jean-Francois Lalande,*, Roch Lescuyer3,*, Jean-Claude Paillès2,*
  • 1: SUPELEC/Inria/CNRS/Université de Rennes 1, IRISA (UMR 6074)
  • 2: Laboratoire GREYC (Unicaen, Ensicaen, CNRS), UMR 6072
  • 3: Morpho
*Contact email: sebastien.gambs@irisa.fr, patrick.lacharme@ensicaen.fr, jean-francois.lalande@ensi-bourges.fr, roch.lescuyer@morpho.com, jean-claude.pailles@unicaen.fr

Abstract

The development of NFC-enabled smartphones has paved the way to new applications such as mobile payment (m-payment) and mobile ticketing (m-ticketing). However, often the privacy of users of such services is either not taken into account or based on simple pseudonyms, which does not offer strong privacy properties such as the unlinkability of transactions and minimal information leakage. In this paper, we introduce a lightweight privacy-preserving contactless transport service that uses the SIM card as a secure element. Our implementation of this service uses a group signature protocol in which costly cryptographic operations are delegated to the mobile phone.