Multi-application Smart Cards Research Articles

A Robust Authentication System With Application Anonymity in Multiple Identity Smart Cards

User Authentication plays a crucial role in smart card based systems. Multi-application smart cards are easy to use as a single smart card supports more than one application. These cards are broadly divided into single identity cards and Multi-identity cards. In this paper we have tried to provide a secure Multi-identity Multi-application Smart Card Authentication Scheme. Security is provided to user’s data by using dynamic tokens as verifiers and nested cryptography. A new token is generated after every successful authentication for next iteration. Anonymity is also provided to data servers which provides security against availability attacks. An alternate approach to store data on servers is explored which further enhances the security of the underlying system.

A Compressed Brain Image Classification System Enhance with Multi Image Particle Swarm Optimization Segmentation

Compression methods reduce the file size of images through the reduction of data required for representing images that are similar to the original by way or removing redundancies. Smart cards possess embedded integrated circuits comprising memory as well as micro-processing components. Images regarding the card holder's medical history, fingerprints, palm print and so on are stored. Multi-application smart cards are rapidly becoming the replacement for traditional cards like driving license, identity cards, credit cards and so on as a single card. Hence, the quantity of information in storage within one card is great, which requires techniques for compressing the data so that the card may be effectively used. Images are segmented through extension of active contour models for finding image contours through the suggested Multi Image Particle Swarm Optimization (MI-PSO).

Recovering from a lost digital wallet: A smart cards perspective extended abstract

Multi-application smart cards enable a user to potentially have a diverse set of applications on her smart card. The growing trend of services convergence fuelled by Near Field Communication and smart phones has made multi-application smart cards a tangible reality. In such an environment, cardholders might have a number of applications on their smart cards and if a card is lost, all of the applications would be lost with it. In addition, consumers might decide to upgrade their smart cards and require a seamless and secure framework to migrate their applications from the old smart card to the new one. Currently, the recovery of a smart card-based service might take from a day to a week at best as each of the lost cards can only be replaced by the respective card issuer, during which time the card issuer might lose business from the user because she is not able to access the provisioned services. Similarly, there is at present no migration mechanism proposed for smart card applications. The proposed framework in this paper enables a user to acquire a new smart card as she desires and then migrate/restore all of her applications onto it—allowing her to recover from her lost digital wallet in a secure, efficient, seamless and ubiquitous manner.

A novel consumer-centric card management architecture and potential security issues

Multi-application smart card technology has gained momentum due to the Near Field Communication (NFC) and smart phone revolution. Enabling multiple applications from different application providers on a single smart card is not a new concept. Multi-application smart cards have been around since the late 1990s; however, uptake was severely limited. NFC has recently reinvigorated the multi-application initiative and this time around a number of innovative deployment models are proposed. Such models include Trusted Service Manager (TSM), User Centric Smart Card Ownership Model (UCOM) and GlobalPlatform Consumer-Centric Model (GP-CCM). In this paper, we discuss two of the most widely accepted and deployed smart card management architectures in the smart card industry: GlobalPlatform and Multos. We explain how these architectures do not fully comply with the UCOM and GP-CCM. We then describe our novel flexible consumer-centric card management architecture designed specifically for the UCOM and GP-CCM frameworks, along with ways of integrating the TSM model into the proposed card management architecture. Finally, we discuss four new security issues inherent to any architecture in this context along with the countermeasures for our proposed architecture.

Java智能卡EEPROM碎片整理算法<br>An EEPROM Defragmentation Algorithm on Java Smart Card

Java智能卡已经被广泛应用于金融、通信等安全性要求很高的领域。但是受限于当前智能卡的硬件资源，特别是多应用智能卡的流行，卡片的存储资源越来越受到重视，Java卡虚拟机的具体实现方式和相关机制也严重影响了卡片的执行效率。通过分析Sun公司Java卡规范算法，总结出现有算法的一些缺陷，对EEPROM的结构重新设计，提出一种带碎片整理的EEPROM存储管理算法。 Java smart card is widely used in the highly security fields such as bank, social security etc. Because the hardware resources of the smart card are limited, and especially the multi-application smart card is popular, the card’s storage resources have been paid more and more attention. The implementations and related mechanisms of Java Card virtual machine are also seriously affecting the efficient of the card. This paper analyzes the management methods that Sun Inc. has given of the Java Card’s EEPROM, finds the disadvantages of the existing methods, redesigns the EEPROM structure, and at last designs a new management algorithm that include EEPROM’s defragmentation.

A Hybrid Image Compression Technique using Symmetric Wavelet for Multi-Application Smart Card Application

This paper proposes an improved wavelet with approximating function which is symmetric in nature is proposed for compression technique. Multi-application smart cards are fast replacing the conventional cards such as driving license, health insurance card, identity card, credit card with a single card. Thus, the amount of data stored in the smart card is high, requiring methods to compress the data for effective usage of the cards. Segmentation of Region of Interest (ROI) is explored to achieve higher compression rate. The images are segmented by an extension of active contour segmentation model based on Particle Swarm Optimization (PSO) to optimize the segmentation as proposed in our previous work. The ROI and Non-ROI obtained is compressed using lossless and lossy compression respectively, using the proposed wavelet technique.

The design and implementation of an experimental model for secure management of personal data based on electronic identity card and PKI infrastructure

This paper presents an experimental information system for the management of personal data and citizen identification, called PLATSEC, based on multi-application smartcards technologies and on PKI infrastructures. The introduction offers a global view of the current context in Romania and emphasizes the necessity of a new approach in the public sector – which addresses both the public sectors services and the public information security. The second section presents the platform architecture – from both software and hardware point of view. Afterward, we introduce and explain a use-case scenario, which aims to prove our system efficiency and advantages, which have also been confirmed by the quality assurance tests performed. In the end, there are a few main talking points that conclude all presented above.

스마트카드 기반의 전력원격검침 프레임워크

Inspection of an Electrical Meter is an action of measuring power usage to charge electricity rates and Electricity AMR(Automatic Meter Reading) is a system to automatize the action. AMR has been highlighted because it can reduce metering cost by substituting an automatic system for personnel and strengthen customer service. In this paper, we proposed and developed a smart card based AMR framework SCEMS as an alternative to other current AMR Models. This proposed SCEMS uses a java card based multi-application smart card and supports customer service such as various meter rates according to electricity consumption pattern data per household and transaction data that are accumulated in a smart card. This research can be a solution to the problems such as diversity, heterogeneity, and complexity that environmental changes will cause soon to the power supply industry.

Multiapplication smart card: Towards an open smart card?

Smart cards were invented four decades ago so as to keep data secrets and to process them secretly. Even though their main goal are still the same today, the smart cards have been subject to many evolutions at both their hardware and software levels. Indeed they have been the target of numerous attacks and new demands from the market. These demands have expanded their domains of application. When they were born and during some thirty years smart cards have been monolithic platforms with a fixed piece of software dedicated to one single application. But in the mid 90's, some technologies appeared that have broken this situation by enabling to easily host several applications on the same card. These new technologies have changed the business models and pushed the smart cards towards new domains and to a world where they will integrate lots of new functionalities.The aim of this paper is to give an overview of the evolution of the smart cards (and of their application domains) from monolithic static pieces of hardware and software to a flexible multiapplication platforms. This paper also explores the possibilities to see open multiapplication cards in the future and exposes the breakthroughs that are required to achieve in order to produce such cards.

A Multi-Application Smart Card System with Authentic Post-Issuance Program Modification

A multi-application smart card system consists of an issuer, service vendors and cardholders, where cardholders are recipients of smart cards (from the issuer) to be used in connection with applications offered by service vendors. Authentic post-issuance program modification is necessary for a multi-application smart card system because applications in the system are realized after the issuance of a smart card. In this paper, we propose a system where only authentic modification is possible. In the proposed system, the smart card issuer stores a unique long bitstring called PID in a smart card. The smart card is then given to the cardholder. A unique substring of the PID (subPID) is shared between the cardholder and a corresponding service vendor. Another subPID is shared between the issuer and the cardholder. During program modification, a protocol using the subPIDs, a one-way hash function and a pseudorandom number generator function verifies the identity of the parties and the authenticity of the program.

Data protection and multi-application smart cards – the use of intelligent servers to ensure interoperability and data flow requirements

This is the third part of a paper, commenced in CLSR in 2003–2004, that looked at the data protection implications of multi-application smart cards. Technical solutions were then canvassed to demonstrate that any privacy concerns could be overcome. In this final part, the authors look at the use of the card over communications networks and EU regulation of the data protection implications.

Data protection: Multi-application smart cards: the use of global unique identifiers for cross-profiling purposes - Part II: towards a privacy enhancing smart card engineering

In the first part of this paper, 1 the underlying privacy concerns of multi-application smart card schemes were identified. In relation to the use of global unique identifiers, the regulatory framework for the smart card manufacturer was assessed. To demonstrate that multi-application smart card technology can be reconciled with the principles of data protection legislation, in particular with the requirements that personal data be processed fairly and lawfully, 2 three technical solutions will now be analysed and commented upon. 3 The first two solutions will relate to the role and functioning of the scheme's application providers. The third solution consists of the development of a less privacy-infringing smart card technology in relation to the use of unique identifiers.

Multi application smart card schemes: Data protection: multi-application smart cards: the use of global unique identifiers for cross-profiling purposes — Part I

This article, consisting of three parts, will comment on how the opportunities offered by multi-application smart card schemes can be reconciled with data protection requirements. In the first part, the focus will be on the regulatory framework of the smart card manufacturer and the legal requirements to develop less privacy-killing technologies. Hereafter, some technical solutions will be proposed to demonstrate that multi-application smart card technology can be reconciled with the principles of personal data protection legislation. In the third and final part, the communication of personal data through electronic communications networks will be analysed. In relation hereto, it must be indicated that intelligent servers will become increasingly important to assure the interoperability between different application providers and different smart card schemes.

Bahrain issues biometric smart ID card tender

The Kingdom of Bahrain is planning a new national ID card based on multi-application smart cards, PKI and biometrics. The country’s Central Informatics Organisation has issued a ‘request for tender’ that highlights the extent of the ambitious project. The card may be used as a driving licence, for health data, for immigration and as an e-purse, as well as for ID. It can also be used for fast tracking through Bahrain International Airport, using fingerprint technology to authenticate passengers at two dedicated access gates (one in arrivals, one in departures). This is a short news story only. Visit www.compseconline.com for the latest computer security news.

Smart cards give citizens the ‘edge’

An ambitious multi-application smart card scheme was launched in the UK borough of Bracknell Forest at the end of September. The ‘edge’ smart card replaces an existing non-smart card based loyalty scheme, and could eventually provide a host of useful services to citizens. Like its predecessor, however, it will also offer deals and discounts in hundreds of shops and stores in the borough. This is a short news story only. Visit www.compseconline.com for the latest computer security news.

Dutch Parliament gets smart

The Dutch Houses of Parliament has begun the implementation of a multi-application smart card solution for its staff and visitors. In the first phase of the project the cards will be used for access control and visual identification, but in the latter stages, the Dutch Parliament will activate additional functionality, such as electronic payment, PC log-on and public key infrastructure (PKI). This is a short news story only. Visit www.compseconline.com for the latest computer security news.

Bahrain to issue biometric ID cards: …residents of Bahrain to get biometric ID cards

Joining a growing list of countries in the Middle East, the Kingdom of Bahrain has announced plans for a new national ID card based on multi-application smart cards, PKI and biometrics. Visit www.compseconline.com for the latest computer security industry news

Architectural Support for Long Integer Modulo Arithmetic on Risc-Based Smart Cards

Various algorithms for public-key cryptography, such as the Rivest-Shamir-Adleman or Diffie-Hellman algorithms, are based on long integer arithmetic operations, most notably modulo multiplication. To be adequate for long-term security, the modulus should have a length of at least 1024 bits. Long integer arithmetic is difficult to implement efficiently in software, particularly on smart cards due to their constrained resources and relatively slow clock frequency. In this paper we investigate the potential of application-specific instruction set extensions for cryptographic workloads such as long integer arithmetic. We define two special instructions that carry out computations of the form a ×b + c + d, whereby a,b,c,d are single-precision words (unsigned integers). These additional instructions can be executed on an optimized multiply/accumulate unit and therefore they are simple to incorporate into common RISC architectures such as the MIPS32. The proposed extensions cause almost no speed or area penalty since no extra functional units are required. Experimental results indicate that the inner-loop operation of a multiple-precision multiplication can be accelerated by a factor of almost 2. We also estimate the execution time of a 1024-bit modulo exponentiation assuming that these special instructions were made available. The presented concept is an alternative solution to a crypto co-processor, especially for multi-application smart cards (e.g. Java cards) with an embedded 32-bit RISC core.

An overview of the GlobalPlatform smart card specification

Over the last five years smart card technology has changed considerably, both at the hardware and software level. More powerful microprocessors along with secure multi-application smart card operating systems provided the necessary functionality required by a large number of smart card applications. GlobalPlatform is considered among the leading multi-application smart card propositions that make an attempt to meet the requirements, for post issuance, issuer control, and interoperability. This article provides an overview of the GlobalPlatform card specification with an emphasis on its security functionality.

Are we smart about security?

Abstract The introduction of new technologies and changes in behaviours has resulted in an erosion of personal contact and greater reliance on security systems and safeguards. The proliferation of independent security measures has generated an increasing amount of security information that must be stored and recalled by the consumer. Overall security can then be weakened as the consumer is inexpert at managing such data and really needs an integrated high security solution that is also easy to use. The multi-application smart card offers a promising solution, however, we may need to challenge some existing practices if we are to empower the citizen in the online world.