{"id":3249,"date":"2012-01-12T17:14:53","date_gmt":"2012-01-12T17:14:53","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3249"},"modified":"2015-09-09T19:37:01","modified_gmt":"2015-09-09T11:37:01","slug":"sprint-adds-google-wallet-into-new-nfc-capable-phones","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2012\/01\/sprint-adds-google-wallet-into-new-nfc-capable-phones\/","title":{"rendered":"Sprint Adds Google Wallet Into New NFC Capable Phones"},"content":{"rendered":"

Oh look, another aspect of security and privacy to consider as Google<\/a> pushes its’ mobile payment solution ‘Wallet’ onto two new NFC capable phones – the Galaxy Nexus & LG Viper.<\/p>\n

If you haven’t heard of the service you can find out more here – Google Wallet<\/a> (Wikipedia<\/em>).<\/p>\n

The main concern here (security wise) is that this relies on a secure storage on the phone of your cryptographic keys that allow you to carry out transactions.<\/p>\n

Sprint’s two newly announced 4G handsets both support Google Wallet, bringing an important boost to Google’s aspirations, but they also hammer the death nail into WiMAX in the USA.<\/p>\n

Sprint’s last 4G handset, the “Sprint Nexus S 4G”, was a WiMAX device, but Sprint has admitted backing the wrong 4G horse and is now transitioning to LTE across its network. So the operator will now be selling Google’s Galaxy Nexus and LG’s Viper handsets, both with support for Google Wallet for those wanting pay-by-bonk functionality.<\/p>\n

Supporting the ability to make payments by tapping the phone against a reader isn’t just a matter of supporting Near Field Communications (NFC), you also need a secure element in which to store the cryptographic keys, which will be under the control of a mutually-trusted party, and then an application with which to make the payments.<\/p>\n

Both the Galaxy Nexus and the Viper have a module built into the phone, under the control of Google \u2013 which is trusted by Mastercard and Visa. So far only Google itself and Citibank have created applications with which a user can make payments, and despite offering to pay for users’ groceries, Google Wallet is proving something of a slow burner at best.<\/p><\/blockquote>\n

I’d imagine the wallet system will have functionality to auto-reload from your credit card too, so if someone can manage to grab those cryptographic keys from the ‘secure’ area on your phone – you might be in for a surprise when you get your next credit card statement.<\/p>\n

The plus side is, the adoption rate so far seems to be super low – so it’s not much of a risk right now.<\/p>\n