RFID and NFC authentication protocol for securing a payment transaction

Abstract

RFID (Radio Frequency Identification) is a technology that permits to identify objects with a radio frequency field for few meters distance. It is applied in several fields such as traceability, logistics, military, security, healthcare, library, etc. Its successor NFC (Near Field Communication)), on the contrary, is used to transmit messages at a short distance (less than 10 Cent.). Recently, NFC is frequently used for payment transaction using ATM and smartphone both equipped of this technology. Unfortunately, the information transferred with this technology during a payment transaction can be an objectif for threads to steale personal and privacy data that concern a user. This paper introduces a new method for payment transaction that combines RFID and NFC. This process which uses an authentication protocol is proposed in order to (1) secure the payment transaction using an Automated Teller Machine (ATM) and a smartphone both equipped with these two technologies, (2) minimize the waiting chain in front of the ATM for agents using NFC by minimizing the transaction time. To evaluate the performance of our proposal, we tested its security against few attacks. A security and performance comparison of our technique with few recent and important methods is performed and shows the effectiveness of the solution.