Security Design for Multi-service Smart Card Systems

Abstract

A multi-service smart card system enables users to access different services over an open network with a single smart card. Due to its highly economic and social benefits, the multi-service smart card system has drawn much attention in industrial and academic areas. However, the big hindrance to its wide employment is the risk of breaching user service confidentiality and privacy across different service systems. This paper proposes a secure multi-service system model to overcome such a problem. The model allows users to access different services with a single password. The privacy and service confidentiality are achieved through a set of protections-password protection, user identity protection, and service transaction protection-to guarantee the user?s anonymity to all service systems and ensure high unlinkability between different services.