8

The new Android has Host-based Card Emulation built in which takes care of the secure element: https://developer.android.com/guide/topics/connectivity/nfc/hce.html

Wondering what it takes to load NFC enabled cards unto a Nexus5 (or another Android Kitkat phone). Can one read out the cards and load them in some general app to create a digital wallet with public transport, company access and credit cards (how awesome!)? Or do the card suppliers need to enable this themself in compatible apps? Hoping for the first option of course, but seem unable to find the answer online and don't have the Nexus5 yet.

Thanks in advance! :)

7

All that host-based card emulation (HCE) does is it enables app authors to support more hardware: that is, devices that don't have the necessary secure element hardware. Developers of apps that previously made contactless transactions using the secure element will now be able to make their apps work on devices that don't have that hardware. However, using HCE is less secure than using a hardware secure element, so it's likely that payment card operators will choose not to support this.

Secure payment cards

The obstacle that stops you reading your own cards into your phone (cloning the cards) is not related to the phone's technology: it's because the card is designed to prevent this. The card contains a secret number that can't be accessed via an NFC transaction. To be more precise, there's no sanctioned way to do this: security researchers and criminals have found ways to use flaws in the design to clone various contactless payment cards. I wouldn't recommend doing this, as doing so may constitute a criminal offence where you are, and will almost certainly make you liable for your bank's losses should anything go wrong.

In summary: the only difference that HCE makes is that if your bank already offers an app to do this, but it doesn't work on your phone, it might (if your bank chooses) work after you upgrade to Android 4.4.

Door cards, etc.

Unlike the high-security payment cards, with processors and secret numbers, door entry cards and tags and the like often just have an ID, which they present to the card reader. Such cards are already very easy to clone. The main obstacle has been getting the the phone to present the desired ID, and HCE means there may well be an explosion of apps that are made for just this use case. (See also Can I clone my (mifare classic) Access card with an Android device?.) However, the long-term result of this is likely to be that door entry systems are changed to use challenge-response protocols and thus become harder to clone.

  • 1
    Thanks for your clear answer! Too bad, I was too enthousiastic for this new addition to the Android NFC capabitlities it seems, haha. – Jordann Gross Nov 17 '13 at 14:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.