Research - Beware of Pickpockets: A Practical Attack against Blocking Cards

Today, we rely on contactless smart cards to perform several critical operations (e.g., payments and accessing buildings). Attacking smart cards can have severe consequences, such as losing money or leaking sensitive information. Although the security protections embedded in smart cards have evolved over the years, those with weak security properties are still commonly used. Among the different solutions, blocking cards are affordable devices to protect smart cards. These devices are placed close to the smart cards, generating a noisy jamming signal or shielding them. Whereas vendors claim the reliability of their blocking cards, no previous study has ever focused on evaluating their effectiveness.

For more information, please read the article: Paper.

App Portfolio - RCH PayBox

RCH PayBox is the free application that allows merchants to accept digital payments quickly and easily. By downloading the app on an Android smartphone or tablet it is possible to join the services of our Partners to receive electronic transactions with debit, credit cards and digital wallets.

The app was developed for RCH S.p.A. and to date it is a commercial success, counting around 2k downloads and hundreds of active users. Visit the product page to find out more.

Research - MiniV2G: An Electric Vehicle Charging Emulator

The impact of global warming and the imperative to limit climate change have stimulated the need to develop new solutions based on renewable energy sources. One of the emerging trends in this endeavor are the Electric Vehicles (EVs), which use electricity instead of traditional fossil fuels as a power source, relying on the Vehicle-to-Grid (V2G) paradigm. The novelty of such a paradigm requires careful analysis to avoid malicious attempts. An attacker can exploit several surfaces, such as the remote connection between the Distribution Grid and Charging Supply or the authentication system between the charging Supply Equipment and the Electric Vehicles. However, V2G architecture’s high cost and complexity in implementation can restrain this field’s research capability.

For more information, please read: Website, Github, Paper.

Master's Thesis - Experimental Evaluation Of Smart Cards Security

This thesis is an experimental evaluation of NFC and RFID security of contactless cards protocols, including ISO 14443 and EMV.

Contactless smart cards are commonly used in every day life for a wide variety of ap- plications ranging from tap-and-go payment cards, access control for buildings, parking tickets and toll highways as well as ski-passes and public transport systems. Moreover, most of the phones marketed nowadays embed NFC chips allowing card emulation. Thus, smartphones have turned out to provide the same functionality as smart cards, proving enhanced high-level security features. Nevertheless, some smart cards systems, including payment systems, are vulnerable to attacks. As a result, end-users must carefully protect their cards privacy when keeping contactless smart cards in their pockets.

Pagination