Security Evaluation of Apple Pay at Point-of-Sale Terminals

被引：6

作者：

Margraf, Marian ^{[1
]}

Lange, Steffen ^{[2
]}

Otterbein, Florian ^{[1
]}

机构：

[1] Free Univ Berlin, Takustr 9, D-14195 Berlin, Germany

[2] Univ Appl Sci Darmstadt, Haardtring 100, D-64295 Darmstadt, Germany

来源：

2016 10TH INTERNATIONAL CONFERENCE ON NEXT GENERATION MOBILE APPLICATIONS, SECURITY AND TECHNOLOGIES (NGMAST) | 2016年

关键词：

Apple Pay; Mobile Payment; Security Evaluation; Secure Element; Credit Card;

D O I：

10.1109/NGMAST.2016.28

中图分类号：

TM [电工技术]; TN [电子技术、通信技术];

学科分类号：

0808 ; 0809 ;

摘要：

Apple introduced its mobile payment service "Apple Pay" in 2014. It allows customers to pay contactless at point-of-sale (POS) terminals and online. In this paper we will describe the components needed for Apple Pay and evaluate the security of Apple Pay for transactions at POS terminals. We will show that relay attacks cannot be avoided, in general. However, particular security features of Apple Pay prevent that relay attacks can be practically exploited. Our security analysis demonstrates that the security level of Apple Pay is comparable with the security level of payments with traditional credit cards. In contrast to the mobile payment service Google Wallet, no serious security vulnerabilities exist.

引用

页码：115 / 120

页数：6