tailieunhanh - Smart cards a fascinating and fruitful adventure

No internal timer, battery. No keyboard, display, network interface. Current generation: μ-processor: 16-bits, 10MHz. RAM: 4K. ROM: 100K for code storage. E2PROM (105 updates ): 64K for data storage. I/O: serial (9600 bps), Contactless protocols: MiFare, FeliCa, Calypso. | Smart cards a fascinating and fruitful adventure Gemalto Technology & Innovation Nguyen Quang Huy Smart Cards in the our life Secure transaction (banking, pay-TV) Telecom (SIM/USIM/RUIM, M2M, convergence, M-TV, M-banking, M-ticket) Control Access (physical and logical resource) E-citizen (e-passport, e-ID, e-Heath, e-driving license, ) No internal timer, battery No keyboard, display, network interface Current generation µ-processor: 16-bits, Smart Card SW Proprietary architecture Undisclosed specification Tedious application development Closed configuration: no application can be added after issuance Open architecture Open specification High-level programming languages Post-issuance applications are available Some open architectures Java Card MULTOS .NET Card Basic Card Example: Java Card Introduced by Schlumberger in 1996 Leading open multi-applicative architecture >5 billions Java-embedded cards issued Applications (applets) developed in Java Integrated Circuit Operating System Java Card Virtual Machine API in Java Native API Card Manager Applet 1 Applet 2 JC Firewall I/O command Security threats No battery Card tearing (or power failure ) may cause inconsistency data No internal timer Logging for post-mortem analysis is not possible No keyboard, display, network device secure usage environment Payment terminals (POS and ATM): security certification Security of PC and handset: keyboard logger, false display (phishing), etc Contactless interface Cardholder is not aware of malicious actions Physically owned by attackers Vulnerable to both logical and physical attacks Attacks Logical attacks: use I/O . | Smart cards a fascinating and fruitful adventure Gemalto Technology & Innovation Nguyen Quang Huy Smart Cards in the our life Secure transaction (banking, pay-TV) Telecom (SIM/USIM/RUIM, M2M, convergence, M-TV, M-banking, M-ticket) Control Access (physical and logical resource) E-citizen (e-passport, e-ID, e-Heath, e-driving license, ) No internal timer, battery No keyboard, display, network interface Current generation µ-processor: 16-bits, Smart Card SW Proprietary architecture Undisclosed specification Tedious application development Closed configuration: no application can be added after issuance Open architecture Open specification .