JAVA based Cryptographic Smart Cards (JAVA Cards) By Ganesh Maddipati G00319990 A smart card is a plastic card about the size of a credit card, with an embedded microchip that can be loaded with data, used for telephone calling, electronic cash payments, and other applications, and then periodically refreshed for additional use. There are different types of smart cards like Memory cards, Microprocessor cards and contact less cards. There have been different standards that have been defined for each type of smart cards. The series of international standards ISO/IEC 7816, introduced in 1987 with its latest update in 2003 it defines various aspects of a smart card, including physical characteristics, physical contacts, electronic signals and transmission protocols, commands, security architecture, application identifiers, and common data elements. It is defined and controlled by the Joint Technical Committee 1(JTC1) of the International Standards Organization (ISO) and the International Electronic Committee (IEC) Smart cards can be contact or contactless depending on whether there the smart cards work by communicating via physical contact between a card reader and the smart card's 8-pin contact or communicate by means of a radio frequency signal, with a typical range of less than 2 feet. The SUN Microsystems have defined a set of specification which is part of java technology to be used for smart cards & other resource constrained devices, Java Card applets. A device that supports these specification is called as Java Card platform Java Card technology adapts the Java platform for use on smart cards and other devices whose environments are highly specialized, and whose memory and processing constraints are more severe than any of the devices. A complete Java Card application consists of a back-end application and systems, a host (off-card) application, an interface device (card reader), and the on-card applet, user credentials, and supporting software.Seeking answers to the following questions: o What are JAVA cards? o What is JAVA Card Technology? o What are the Specifications and standards for JAVA cards? o How is Security provided in JAVA? o What are the cryptographic algorithms supported in JAVA Cards? o How are the Security features implemented in JAVA Cards? o What are the various security threats and attacks that are possible on JAVA Cards and counter measures, if any? o What are the different commercially and approaches available JAVA Cards that can be used for multiple functions? o What are security features in future JAVA Cards. Tentative Table of Contents for Final Report: 1) Introduction to JAVA Cards 2) Specifications and Standards for JAVA Cards 3) Different Cryptographic algorithms supported in JAVA Cards 4) Different security attacks possible on JAVA Cards. 5)Survey of Commercially available multi-function JAVA Cards ,which provide cryptographic support6)Security features in JAVA Cards in future. 7)Conclusions. Time Table: MARCH 12: FINAL SPECIFICATION SUBMISSION MARCH 29, 30: First progress report will cover the following the topics • Introduction to JAVA Cards • Specification and Standards of JAVA Card Technology? • Security features provided by JAVA. April 18, 19: Second progress report will cover the following topics • Different cryptographic algorithms used in JAVA Cards • Implementation of Security features in JAVA Cards • Security Attacks that are possible on JAVA Cards. MAY 3, 4: Final progress report will cover the following topics & Final draft presentation. • Different commercial available multi function JAVA Cards with security features • Different approaches taken by the JAVA Card Vendors to prevent security attacks. • JAVA Cards with security features in
View Full Document
Unlocking...