NFC World

NXP adds PUFs to NFC

Chip maker NXP has licensed Intrinsic ID‘s Physically Unclonable Function (PUF) technology for use with its SmartMX2 smart card and secure element chips... More







NFC World

Inside Secure launches multi-owner secure element

Inside Secure's Pierre Garnier

“With the availability of the VaultSecure IC, smartphone manufacturers, mobile network operators and other trusted third parties can co-own the SE and install, personalize and administer their own open- or closed-loop payment, access control, transit, loyalty or other secure applets,” says Inside’s Pierre Garnier. More


NFC World

NXP responds to NFC transit security hack

Researchers at Intrepidus Group have demonstrated how an Android NFC phone can be used to add value to a transit card without paying but, says NXP, the vulnerability is limited to transportation card issuers that haven’t upgraded from Mifare Ultralight to the newer Mifare Ultralight C technology. More



NFC World

Forum responds to Black Hat presentation on NFC vulnerabilities

NFC Forum director Debbie Arnold

“The NFC Forum works to ensure that tools are available to allow applications to operate with the appropriate level of security,” says the industry standards body. “Mr Miller’s demonstration underscores the importance of providing appropriate security measures at the application layer and enabling users to adjust security settings to suit their own needs and preferences.” More


NFC World

PCI guides on mobile acceptance

The body that manages the Payment Card Industry Data Security Standard (PCI DSS) has published a fact sheet outlining how merchants can securely accept payments using smartphones and tablets... More



NFC World

Security researchers raise Google Wallet concerns

Via Forensics and Google Wallet

The amount of unencrypted data stored by the Google Wallet app “surpasses what we believe most consumers find acceptable,” says digital forensics specialist viaForensics in a report on the security of the search giant’s NFC wallet — but no access to the secure element was gained. More