Security issues of service installation on a multi application NFC environment

Abstract

NFC is one of the latest wireless communication technologies, making possible variety of business opportunities. At Budapest University of Technology and Economics (BME) a generalized approach for NFC application development has been elaborated, where the Mobile Network Operators (MNOs), as well as service providers can make their own application and run it in the proposed common environment. We have developed the prototype of an application framework based on the generalized approach that provides the possibility of rapid implementation of any kind of the business logic and the user interface as well as the opportunity to create a new skin for the already existing application. Further benefit of the application framework is that the technological details are hidden from the service application developers thus they can focus only on the proper implementation of the business logic and the user interface. One of the main units of the developed framework is a script application execution environment (the so called scripting host) running on mobile equipments. The scripting host allows the user to dynamically manage and access NFC based services using the underlying mobile equipment. The current paper presents the security consideration of the script installation and execution procedures.