How to test NFC phones in security demanding environments Hajo Sandschneider, COMPRION GmbH WIMA, Monaco, 2011 Agenda  Introducing COMPRION  Testing the NFC Communication Chain  Current Status of NFC Conformance Testing  Requirements for Test Tools Introducing COMPRION The Company  Developing, producing and selling test equipment for mobile equipment (ME), Smart Cards and ME/card interfaces  World wide sales representatives  Headquarters in Paderborn, Germany  Company in private hands  Owned and managed by:  Dr. Torsten Maeser  Michael Wehmeier History 2004: IT³ Move! First COMPRION trace tool 2002: Company founded IT³ Platform First terminal conformance tester 2002 2004 2008: CLT Move First contactless trace tool 2007: ICC Spectro First smart card test tool COMPRION SIMfony First solution for combined handset testing (GSM/W-CDMA) 2007 2008 2009: CLT ONE First contactless simulator 2009 2010: COMPRION SIMfony Solution for combined handset testing for LTE and CDMA2000 2010 2011: UT³ Platform NFC conformance testing 2011 Standardisation and Regulation 3GPP CT6 3GPP2 TSG-C ETSI SCP GCF PTCRB CCF ETSI Plugtests NFC Forum Global Platform Testing the NFC Communication Chain Elements of NFC Communication ME UICC Uu ISO 7816 IC-USB ETSI 102.600 SWP/HCI ETSI 102.613 ETSI 102.622 SPI, I²C, USB SPI, I²C, USB NCI CLF NFC Device NFC-A,-B,-F ISO 14443 ISO 18092 SE I²C NFC-WI ECMA 373 Conformance Testing  „Fulfilment by a product, process or service of all requirements specified.” ETSI ETR022 (ISO9646)  IUT is evaluated or measured against a standard.  Dedicated test system that has full control and observes the IUT's behaviour.  Test system simulates the interface to the IUT according to the standard.  The tests are performed on accessible standardised interfaces. Conformance Testing of NFC Mobiles ETSI TS 102 230 3GPP 31.121 UICC Simulator ME ISO 7816 ETSI TS 102 922-1 IC-USB ETSI TS 102 694 ETSI TS 102 695 SWP/HCI NFC Device Simulator NFC Forum Digital Protocol Tag Operation NFC-A,-B,-F CLF Interoperability Testing  „Interoperability: The ability of two or more systems or components to exchange information and to use the information that has been exchanged.” IEEE glossary  The Equipment Under Test (EUT) and Qualified Equipment (QE) come from different suppliers (or, at least, different product lines)  Interoperability tests are performed at interfaces that offer only normal user control and observation  Interoperability tests are based on functionality as experienced by a user  The tests are performed and observed at functional interfaces such as Man-Machine Interfaces (MMIs), protocol service interfaces and Application Programming Interfaces (APIs) Interoperability testing of NFC Mobiles ME UICC Uu ISO 7816 IC-USB SPI, I²C, USB SPI, I²C, USB SWP/HCI CLF NFC Device SE I²C NFC-A,-B,-F Current Status of NFC Conformance Testing ETSI SWP/HCI Test Case Specifications  Standardisation - Under control of ETSI SCP Terminal test specifications have been approved beginning of 2010  Specifications - ETSI TS 102 694-1: SWP terminal test specification ETSI TS 102 695-1: HCI terminal test specification (mobiles) ETSI TS 102 965-3: designs) HCI terminal test specification (reference  SWP/HCI features as low-level HCI transport, link management gate, administration gate, ACT frames, link establishment and data flow  24 combined tests, requiring NFC device simulator  10 test cases require enhanced analogue measurement capabilities. SWP/HCI Test Case Certification  Global Certification Forum (GCF) - GCF approved Work Item #133 introducing SWP and HCI - 40+ tests validated against real handsets Test case list has been agreed and introduced into GCF DCC data base  PCS Type Certification Review Board (PTCRB) - PTCRB have issued a Request for Test for what they call NFC testing, covering the same test specifications as GCF WI#133 - First tests validated against real handsets NFC Forum: Compliance Program Objectives Develop a means of establishing compliance with the Forum’s published open standards and interoperability of NFC devices Develop a product certification program with a consumer-recognizable trademark guaranteeing the NFC-brand promise of compliance and interoperability When a device passes certification testing, the N-Mark can be used to indicate the spot on the device where it reads NFC tags. Technical Architecture Card Emulation Reader / Writer Peer-to-Peer Connection Handover RTD (record type definitions) NDEF (NFC data exchange format) Protocol Bindings (IP, OBEX etc) Tag Operation (Types 1, 2, 3, 4a, 4b) LLCP (Logical Link Control Protocol) Activity (Listen mode state machine, device activation, collision detection, data exchange) Digital Protocol (NFC-A, NFC-B, NFC-F modulation, ISO-DEP, NFC-DEP RF Analog (Signal interface NFC-A, NFC-B, NFC-F) Status of NFC Forum Testing and Certification   Compliance program started end of 2010 (1st wave of certification) Scope:       246 Test Cases for Digital Protocol (including Activity test cases) 11 Test Cases for Type 1 Tag Operation 6 Test Cases for Type 2 Tag Operation 8 Test Cases for Type 3 Tag Operation 5 Test Cases for Type 4 Tag Operation Digital protocol TCs comprise polling and listening mode TC for NFCA, NFC-B, NFC-F, tag platforms 1 to 4b, NDEF and P2P Status of NFC Forum testing and certification   NFC Forum plans 2nd wave of certification starting early 2012 Scope:    LLCP (Logical Link Control Protocol based on P2P mode) RF Analog test specification under development      RF Analog Stable draft RF Analog test comprise polling and listening device tests About 40 TCs with different conditions LLCP test specificaion work just started Test will be mandated when 2nd wave starts Requirements for Test Tools Test Tool Requirements (for NFC Mobiles)  Synchronized simulation and monitoring of contactless and contactbased NFC communication  Ability to perform digital test cases (SWP/HCI and DP/TO/LLCP)     NFC Device Simulator Smart Card Simulator Ability to perform analog test cases (SWP and RF Analog)  Analog measurement and analysis capabilities (Digital sampling oscilloscope or data acquisition card)  Analog conformance of the simulated interfaces with all NFC related standards (specialized waveform generator) GCF, PTCRB and NFC Forum validated Thank you!