Over the past decade, smartphones have become the point of convergence for many applications and services. There is a growing trend in which traditional smart-card based services like banking, transport and access control are being provisioned through smartphones. Smartphones with Near Field Communication (NFC) capability can emulate a contactless smart card; popular examples of such services include Google Pay and Apple Pay. Similar to contactless smart cards, NFC-based smartphone transactions are susceptible to relay attacks. For contactless smart cards, distance-bounding protocols are proposed to counter such attacks; for NFC-based smartphone transactions, ambient sensors have been proposed as potential countermeasures. In this study, we have empirically evaluated the suitability of ambient sensors as a proximity detection mechanism for contactless transactions. To provide a comprehensive analysis, we also collected relay attack data to ascertain whether ambient sensors are able to thwart such attacks effectively. We initially evaluated 17 sensors before selecting 7 sensors for in-depth analysis based on their effectiveness as potential proximity detection mechanisms within the constraints of a contactless transaction scenario. Each sensor was used to record 1000 legitimate and relay (illegitimate) contactless transactions at four different physical locations. The analysis of these transactions provides an empirical foundation on which to determine whether ambient sensors provide a strong proximity detection mechanism for security-sensitive applications like banking, transport and high-security access control.
@cite_8 and @cite_18 showed how location-related data, using a GPS (Global Positioning System), can be used to determine the proximity of two NFC mobile phones. used a ten second window with location information collected every second, which was subsequently compared across various devices. The authors reported a high success rate in identifying the devices in close proximity to one another.
@cite_18 @cite_8
2900294995 2553223022 2131256648 2328788535
Positioning is an essential element in most Internet of Things (IoT) applications. Global Positioning System (GPS) chips have high cost and power consumption, making it unsuitable for long-range (LoRa) and low-power IoT devices. Alternatively, low-power wide-area (LPWA) signals can be used for simultaneous positioning and communication. We summarize previous studies related to LoRa signal-based positioning systems, including those addressing proximity, a path loss model, time difference of arrival (TDoA), and fingerprint positioning methods. We propose a LoRa signal-based positioning method that uses a fingerprint algorithm instead of a received signal strength indicator (RSSI) proximity or TDoA method. The main objective of this study was to evaluate the accuracy and usability of the fingerprint algorithm for large areas in the real world. We estimated the locations using probabilistic means based on three different algorithms that use interpolated fingerprint RSSI maps. The average accuracy of the three proposed algorithms in our experiments was 28.8 m. Our method also reduced the battery consumption significantly compared with that of existing GPS-based positioning methods. As sensor-rich mobile devices became a commodity, more opportunities appeared for the creation of location-aware services. While GPS is a well established solution for outdoor localization, there is still no standard solution for localization indoors. This paper presents a novel accurate indoor positioning mechanism that is meant to run in common smartphones to be a readily and widely available solution. The system is based on multiple gait-model based filtering techniques for accurate movement quantification in combination with an advanced fused positioning mechanism that leverages sequences of opportunistic observations towards an accurate localization process. Magnetic field fluctuations, Wi-Fi readings and movement data are incrementally matched with a feature spot map containing multi-dimensional spatially-related features that characterize the building. A novel and convenient way of mapping the architectural and environmental properties of buildings is also introduced, which avoids the burden normally associated with the process. The system has been evaluated by multiple users in open and crowded spaces where overall median localization errors between 1.11 m and 1.68 m were obtained. While the reported errors are already satisfactory in the context of indoor localization, improvements may be readily achieved through the inclusion of additional reference features. High accuracy performance coupled with an opportunistic and infrastructure-free approach creates a very desirable solution for the indoor localization market doge. In this paper we describe a new method and user interface for interactive positioning of a mobile device. The key element of this method is a question-answer style dialogue between system and user about the visibility of nearby objects and landmarks; answers given by the user provide clues about the relative position of the user and allow the verification or falsification of hypotheses about the user’s absolute location. This new approach combines the respective strengths of a human user (i. e. fast and reliable object recognition) and a mobile system (i. e. fast computation of numerical data). It enables accurate positioning without requiring any other positioning technologies. A particular advantage of this approach is that it lends itself to the implementation on camera-equipped mobile phones, where it can be used to increase the accuracy of cell-based localisation methods. A location proximity test service allows mobile users to determine whether they are in close proximity to each other, and has found numerous applications in mobile social networks. Unfortunately, existing solutions usually reveal much of users’ private location information during a proximity test. They are also vulnerable to location cheating where an attacker reports false locations to gain an advantage. Moreover, the initial trust establishment among unfamiliar users in large scale mobile social networks has been a challenging task. In this paper, we propose a novel scheme that enables a user to perform (1) a location based handshake that establishes secure communications among strangers, who do not have a pre-shared secret, and (2) a privacy-preserving proximity test without revealing the user’s actual location to the server or other users not within the proximity. The proposed scheme is based on a novel concept, i.e., spatial-temporal location tags, and we put forward a location tag construction method using environmental signals that provides an unforgeable location proof. We use Bloom filters to efficiently represent users’ location tags and vicinity regions. We exploit fuzzy extractor, a lightweight cryptographic primitive, to extract shared secrets between matching location tags. We conduct extensive analysis, simulation, and real experiments to demonstrate the feasibility, security, and efficiency of our scheme.