NFC技术在AFC系统中的安全研究

介绍NFC技术在地铁票务中的典型应用。NFC技术在天然保密性、双向鉴权和对原AFC系统改动少等方面具有一定的优势，但其同时在通信、设备、软件和所在环境方面也具有一定的安全隐患。分析NFC在内部传输、软硬件及环境方面的安全威胁，提出手机端软件技术改进方法和后台使用数据风险监控三级预警方法，采用双重安全机制以规避安全威胁，确保NFC技术在地铁应用中的收益安全，尽可能地避免收益漏洞。

Security of NFC Technology in AFC System

This paper introduces a remarkable application of near-field communication (NFC) technology in subway ticketing. NFC technology has certain advantages in natural security, bidirectional authentication, and causes less change to the original automated fare collection (AFC) system. However, it has some security risks in communication, equipment, software, and environment. This paper analyzes the security threats of NFC in the aspects of internal transmission, software/hardware, and environment, and proposes an improvement method in software technology and a three level warning method for data risk monitoring in the background, and uses double security mechanism to avoid security threats while ensuring that NFC technology gains revenue in subway applications and avoids loss of revenue.