Segurança em meios de pagamento com NFC

Abstract

This work, entitled "SECURITY IN PAYMENT METHODS WITH NFC," analyzes the application of Near Field Communication (NFC) technology in payment systems, focusing on security and implementation in Android devices. Based on a literature review, the study addressed the operation of NFC, the architecture of contactless payments, and the security mechanisms employed. The study focused on the EMV architecture (Eurocard, Mastercard, and Visa), exploring security patterns such as cryptography, tokenization, and the use of Secure Elements (SE) for transaction protection and authentication. Practical development utilized Android Studio and Kotlin. The focus was on the use of native Android classes, such as IsoDep and NfcA, for low-level communication via APDU (Application Protocol Data Unit) messages. Tests involved sending APDU commands (SELECT DF, SELECT APPLICATION) to a smartcard to validate communication and the interpretation of responses. The results demonstrated that using standard documentation (Android, EMV, and ISO), without implementing advanced security channels (such as Secure Messaging or the Blinded Diffie-Hellman - BDH protocol), prevented the acquisition of sensitive user information, but that it is possible to initiate basic communication with an NFC tag supporting IsoDep classes. It is concluded that accessing critical data requires the activation of more complex security mechanisms and encryption keys.