Integrating NFC the Right Way” NFC in a Mobile Phone Complex System Integration with Multiple Attack Surfaces and Defenses
Total Page:16
File Type:pdf, Size:1020Kb
1 Neeraj Bhatia Qualcomm Atheros, Inc., May 16, 2013 “Integrating NFC the Right Way” NFC in a Mobile Phone Complex system integration with multiple attack surfaces and defenses OTA Application processor − Wallet, R/W or peer-to-peer applications NFC Wallet NFC controller and antenna TSM Application Processor − Discrete/Integrated (MSM) TEE ISO 7816 I2C One or more secure elements SWP NFC NFC − SIM Card – MNO, e.g. ATT UICC − Embedded SE – OEM, e.g. Google − uSD Card – financial institution, e.g. Bank of America eSE Trusted Service Manager (TSM) Trusted Execution Environment (TEE) MNO OEM CONTROLS CONTROLS 3 TEE delivers security needed by diverse set of verticals Strong intersection with NFC and complementarity with hardware secure elements Mobile Banking Mobile Ticketing Entertainment Mobile Health Services Government Services $ ADMIT ONE Mobile Payment Corporate IT $ $ $ OS Applications Trustlets Trusted Rich OS Execution Environment 4 Qualcomm NFC Software Architecture Tight integration with TEE and the cellular modem stack is imperative for NFC in a phone READER WRITER PEER-TO-PEER CARD EMULATION PROXY Smart poster, Wi-Fi Tap to exchange, WALLET pairing, logical access coupons, gaming Proximity payments, access AGENT control, transit TSM/MNO/SP NFC API Secure Element API TEE BIP Client/Server eSE/uSD/UICC Access Control SIM App. Toolkit (SAT) NFC Stack Virtual Secure SE UI/Keypad QC RIL NCI I²C ISO7816 QCA1990 SWP UICC SWP SWP Embedded SE uSD 5 TEE value proposition for NFC Leveraging TEE enhances platform security and opens up new applications Secure PIN entry for EMV/Wallet PIN protection from malware Secure NFC, secure storage and secure UI can likely enable a Mobile POS solution Secure access control of applications in the SIM Card from the host is now required by all operators Virtual secure storage for host emulation can extend card emulation use cases 6 QCA1990 Product Overview Significant OEM traction; expecting commercial launches 2H of the year NFC controller for mobile, computing ISO 14444 A, B, B’, F NFC Protocol Support ISO 18092 and consumer electronics ISO 15693 40 nm ultra low power Reader/writer Operating Modes Card emulation Small solution footprint Peer-to-Peer Supported Data Rates Multiple SE support QCA1990 106, 212, 424, and 848 (kbps) NCI compliant Secure Element SWP Paired with Qualcomm’s WCN3680 1-stream, Interfaces uSD dual-band 802.11ac Wi-Fi/Bluetooth 4.0/FM chip Operational EMVCo Platform integration with Snapdragon processors Performance NFC Forum 7 Summary NFC is a platform play that requires complex integration Trusted Execution Environment − Enhances platform security − StronG intersection with NFC for new use cases − Complementary with hardware secure elements Qualcomm NFC Solutions (QCA1990) offer unparalleled system level integration 8 Thank you Follow us on: For more information on Qualcomm Atheros, visit us at: www.qca.qualcomm.com All data and information contained in or disclosed by this document is confidential and proprietary information of Qualcomm Atheros, Inc. and all riGhts therein are expressly reserved. By acceptinG this material the recipient aGrees that this material and the information contained therein is to be held in confidence and in trust and will not be used, copied, reproduced in whole or in part, nor its contents revealed in any manner to others without the express written permission of Qualcomm Atheros, Inc. © 2013 Qualcomm Atheros, Inc. Qualcomm is a reGistered trademark of QUALCOMM Incorporated. Atheros is a reGistered trademark of Qualcomm Atheros, Inc. All other reGistered and unreGistered trademarks are the property of QUALCOMM Incorporated, Qualcomm Atheros, Inc., or their respective owners and used with permission. ReGistered marks owned by QUALCOMM Incorporated and Qualcomm Atheros, Inc. are reGistered in the United States and may be reGistered in other countries. Qualcomm VIVE, Qualcomm StreamBoost, Qualcomm Hy-Fi, Qualcomm AMP, Qualcomm IZat, Qualcomm Ethos, Qualcomm Skifta are products of Qualcomm Atheros, Inc. Qualcomm Atheros, Inc., 1700 TechnoloGy Drive, San Jose, CA 95110 9 .