Researchers today anticipate that in the near future, the majority of the owners of a smartphone will use it as a wallet, i.e. for contactless payment. The technology that enables contactless payment today is “Near Field Communication” (NFC), which is increasingly embedded in smartphones. Applications like mobile payment between a phone and a terminal use NFC. With Mobile payment the user’s credit and banking information gets saved and it’s extremely important for a user that the saved data doesn’t fall into the wrong hands. How should then a user of an NFC equipped device ensure that end-to-end security is strong enough when they use NFC technology? Can user feel safe enough to keep their private documents on the phone without getting “robbed”? NFC uses a security element “Secure Element” (SE) that offers the user safety for their mobile purchases but also in other applications such as transportation tickets. The security element comes in three forms: SD card based, SIM card based or embedded in the smartphone. Over time, the technology behind the secure element is further developed and a new phenomenon has emerged, a new type of secure element. The new technology is an application based secure element: “Software Emulation Card” (Soft-SE), which offers security without a physical SE This thesis will deal with the Secure Element’s area to see if the Soft-SE are so confident that we can count it as an option when we do our mobile purchases in the store. A number of threats and attacks that an SE or generally an NFC device can be exposed to will be mentioned and some will also be described and some possible threats and attacks against Soft-SE. In addition, a few pros and cons of applying Soft-SE will be discussed. The analysis is based on how a user can get more out of the existing SE instead of applying the Soft-SE. Based on the facts, pros and cons, and the analysis that has been treated, it has been concluded that the Soft-SE is not a more secure alternative than the SE that is already used by NFC phones. Since Soft-SE is still new, it has not yet developed to protect themselves against the possible attacks that they may be exposed to. It is strongly recommended that users of Google Wallet adhere to the Secure Element that the smartphone use instead of applying Soft-SE. / Dagen forskare förutser att inom en snar framtid kommer majoriteten av ägarna till smarttelefon använda den som sin plånbok, det vill säga använda sig utav kontaktlös betalning. Tekniken som möjliggör kontaktklös betalning idag är närfältkommunikation (Engelska: “Near Field Communication” - NFC) som finns inbäddad i smarttelefoner. Applikationer som mobila betalningar mellan en telefon och terminal använder sig av NFC. Vid mobila betalningar sparas användarens kredit- och bankinformation och det är ytterst viktigt för en användare att dess sparade data inte kommer i fel händer. Hur ska då en användare av NFC vara säker på att säkerhetsutvecklingen går hand i hand med NFC-tekniken? Kan en användare känna sig tillräckligt säker för att spara sina privata handlingar på telefonen utan att bli bestulen? NFC använder sig utav ett säkerhetselement (Engelska: “Secure Element” - SE) som erbjuder användaren säkerhet vid alla mobilköp men även i andra applikationer som till exempel färdmedelsbiljetter. Säkerhetselementet kommer i tre olika former: SD-kortbaserat, SIM-kortbaserat eller inbäddad i smarttelefonen. Med tiden har tekniken bakom SE vidareutvecklats och ett nytt fenomen har uppstått, nämligen ett nytt slags säkerhetselement. Den nya tekniken är ett applikationsbaserat säkerhetselement: mjukvarubaserad kortemulering (Engelska: “Software Card Emulation” - Soft SE), som erbjuder säkerhet utan ett fysiskt SE. Denna avhandling kommer behandla säkerhetselementets område och se över om Soft-SE är så pass säker att vi kan räkna det som ett alternativ vid våra mobilköp i affären. Ett antal hot och attacker som ett SE eller allmänt en NFC-enhet kan utsättas för kommer att nämnas och en del kommer även att beskrivas samt möjliga hot och attacker mot Soft-SE. Utöver det kommer ett par för- och nackdelar med att tillämpa Soft-SE att diskuteras. Analysen är baserat på hur en användare kan få ut mer av den existerande SE istället för att tillämpa Soft-SE. Utifrån fakta, för- och nackdelar och analysen som har behandlats drogs slutsatsen att Soft-SE inte är ett säkrare alternativ än den SE som redan används av NFC-telefoner. Eftersom Soft-SE fortfarande är något nytt har den inte ännu utvecklats tillräckligt för att skydda sig mot de möjliga attacker som den kan utsättas för. Det är starkt rekommenderat att användarna av Google Wallet håller sig till det säkerhetselement som smarttelefonen använder sig utav istället för att tillämpa Soft-SE.

Syftet med denna studie var att undersöka framtidsutsikter och utmaningar för kontaktlös betalningsmetod som är NFC-baserad. Detta mynnade ut i frågor som undersökte kring varför enbart ett fåtal banker valt att satsa på kontaktlösa betalkort, vilka utmaningar som NFC-baserade betalningar står inför i den svenska marknaden och även vilka framtidsutsikter den kontaktlösa betalningsmetoden har i den svenska betalningsbranschen. För att svara på dessa frågor, tillämpades en kvalitativ fallstudie med semistrukturerade intervjuer. Två respondenter från varsin bank som infört kontaktlös betalningsmetod i Sverige intervjuades, likaså en respondent från en bank som inte hade infört kontaktlös betalningsmetod i Sverige och ytterligare två respondenter från en annan bank som inte infört kontaktlösa betalningsmetoder i Sverige. Utöver detta, intervjuades även en forskare från Sveriges riksbank och en konsult som arbetar inom ett forum för kontaktlös betalningsmetod. Studien påvisade att anledningen till att ett fåtal banker erbjudit kontaktlös betalningsmetod till sina kunder var till följd av att Sverige varit relativt sena med att byta från magnetremsa som betalningsmetod till chip och PIN, vilket gjort att man ogärna investerade i kontaktlös betalningsmetod. Utmaningar som kontaktlös betalningsmetod står inför är att se till att infrastrukturen utökas i Sverige samt informera kunder om kontaktlös betalningsmetod. Framtidsutsikterna för kontaktlös betalningsmetod är positiva och tanken bland flera aktörer är att kontaktlös betalningsmetod ska vara väldigt utbrett i Sverige år 2020. / The purpose of this research was to investigate future prospects and challenges regarding contactless payment method which is based on NFC. These lead to the formulation of questions which researched why only a few banks had chosen to employ contactless payment cards, which challenges that NFC-based payments are facing in the Swedish market, and also which future prospects the contactless payment method has in the Swedish payment market. In order to answer these questions, a qualitative case study with semi-structured interviews was utilized. Interviews were conducted with two respondents from respective banks which had introduced contactless payment in Sweden while additional interviews were conducted with one respondent from a bank which had not introduced contactless payment in Sweden and two respondents from another bank which had not introduced contactless payment methods in Sweden. In addition to this, one respondent from the central bank of Sweden and one consultant working within a forum regarding contactless payment have been interviewed. The study showed that the reason to why few banks have offered contactless payment method to their customers was due to that Sweden had been relatively late in regards to changing from magnetic strip as a payment method to chip and PIN, which resulted in that the market participants did not wish to invest in the contactless payment method. Challenges which the contactless payment method is facing, is to make sure that the infrastructure will be increased in Sweden, and inform customers about the contactless payment method. The future prospects for the contactless payment methods are positive and the intention among several market participants is that the contactless payment method will be very widespread in Sweden 2020.

This master thesis "Payment cards in the Czech republic" deals with payment cards, which are currently the most widely used payment instrument. Theoretical part is focused on the formation and development of the first ancestors of payment cards, various kinds of payment cards, there is historical development, basic characteristic, division, possibilities of their current use and future of payment cards. Also there are introduced different types of the payment cards according to different criteria, according to their mode of operation and safety. In the first part practical part of the work is an analysis of the current situation and developments in the payment cards market in the Czech Republic. Subsequently, there is analysis of the payment cards, current accounts and related services at selected bank in the Czech republic mBank S.A., Fio banka a.s., Equabank a.s., Zuno bank a.s. and Air bank a.s. When the objective of the thesis is to find out whether these banks target the same segments of clients. There is a comparation of payment card payment from the perspective of the monthly cost of using payment card from four basic segments of one bank, while there is a comparison of services related to payment card and in the end for every client is chosen the best alternative of payment card and the current account from the perspective of the average monthly cost.

This diploma thesis deals with the development of payments instruments, contactless technologies and instruments of contactless payments. This thesis describes intentions of card associations VISA and MasterCard in area contactless payments. It also contains a questionnaire survey, on the basis of which was carried out an evaluation and comparison with intentions associations. At the same was recommend of development for a provider of services in the area.

The diploma thesis "Innovation in Commerce" provides an analysis of the development and usage of up-to-day innovative technologies in trade sphere both in our country and abroad. It maps their forms and scope of usage in selected trade units, primarily focusing on modern payment instruments and self-service cash desks and, further on, also from the point of view of their development and usage in the nearest future. The thesis gives an independent solution of using up-to-date payment instruments and self-service cash desks depending on the customer´s age as well as payment forms (cash, non-cash) from z point of view of differences between "rural" and urban population. The thesis includes a proposal for the implementation of two arising up-to-date technologies - self-scanning and iBeacon technology in the Terno Supermarket in České Budějovce.

Smartwatch is a technological product that has rekindled a lot of interest worldwide and areseen to be connected to our day-to-day lives. The recent growth on the adoption of thesmartwatch has posed challenges to researchers and other interest groups. Humans now live inmodern scientific societies that are heavily reliant on numerous smart devices of which thesmartwatch is a part of it. Past research has been done on the smartwatch phenomenon and itsassociated question that surround it. In this paper, we seek answers to the vital questionsbordering the usage of smartwatch and how those factors that are responsible for the increasein adoption of the smartwatch . The grounded theory research designed was used as ourmethodological approach and data were collected from twenty participants, some living inSweden and some in Norway. Analysis of data is also based upon, and informed by, theguidelines of grounded theory data coding steps. Further open coding & axial coding techniqueswere applied in data analysis section. Analysis of the data collected from the interviewsrevealed some interesting areas of smartwatch applications today. It also presented an insighton how consumers of smartwatch think about the product. Results from this study will be usefulfor future researchers as well as smartwatch merchants and makers.

Att betala med kort är idag standardiserat, men något som också är väldigt vanligt är att betala kontaktlöst. Detta kan göras både med ett kontaktlöst kort eller med en smarttelefon. Teknologin som möjliggör detta är närfältskommunikation. Examensarbetet undersöker hur säkerheten i dessa betalningsmetoder är uppbyggd, vad det finns för säkerhetsproblem samt hur användningen kan se ut i framtiden. Den primära frågeställningen var att undersöka om det är lika säkert eller till och med säkrare att använda en smarttelefon för kontaktlösa betalningar jämfört med ett kontaktlöst kort. För att undersöka detta, gjordes en omfattande litteraturstudie och en enkätundersökning. Resultatet av examensarbetet visade på att det fanns olika typer av hot och sårbarheter som exempelvis avlyssning, modifikation och korruption av data, reläattacker, skadlig applikation och programvara, svag autentisering och manipulation av applikationer. Det fanns även flertalet aspekter som påverkade hur väl dessa hot kunde utföras, bland annat tokenisering, kryptering men även det korta avståndet som krävs och social ingenjörskonst. Det upptäcktes även att attackytan skiljde sig mellan metoderna. Smarttelefonen hade flertalet hot och sårbarheter som ofta baseras på att det finns ett användargränssnitt, att enheten har ett annat användningsområde, och exempelvis skadlig programvara och ”rootade” enheter. När en enhet är ”rootad” betyder det att användaren får en annan typ av åtkomstkontroll. Enkätundersökningen visade att ungefär hälften av deltagarna kan tänka sig använda smarttelefonen i framtiden för att utföra kontaktlösa betalningar. / To pay with a card is standardized today, but something that is also very common is to pay contactless. This is possible to do with a contactless card or with a smartphone. The technology that makes this possible is Near Field Communication. This thesis examines how the security in these payment methods is structured, which security issues exists but also how the use may look in the future. The thesis also includes to investigate if it is as safe or even safer to use a smartphone for contactless payments compared to a contactless card. To investigate this, an extensive literature study and a questionnaire survey was conducted. The results of the thesis showed that there were different types of threats and vulnerabilities such as eavesdropping, data modification, data corruption, relay-attacks but also malicious application and software, weak authentication, and manipulation of applications. However, there were also several aspects that affected how well these threats could be carried out, including tokenization, encryption but also the short distance required and social engineering. It was also discovered that the attack surface differed between the two methods. The smartphone had several threats and vulnerabilities many of them existed since there is a user interface, and that the device is used in other ways. For example, malware and “rooted” devices, when a device is “rooted” it means that the user gets another type of access control for the device. The survey showed that about half of the participants may be willing to use a smartphone in the future to make contactless payments.