Smart Card Industry Research Articles

Power Measurement-Based Vulnerability Assessment of IoT Medical Devices at Varying Countermeasures for Cybersecurity

A method for the vulnerability assessment of Internet-of-Things (IoT) medical transducers cybersecurity at varying the power countermeasures is proposed. The implemented countermeasures reinforce the most popular cryptographic algorithm, advanced encryption standard (AES), running on a low-cost, low-energy, and low-performance smart transducer for IoT medical devices. The proposed method is based on attacks standardized in the smart-card industry: differential power analysis (DPA) and correlation power analysis (CPA). Adopting a methodically rigorous framework, a boost for the study of power countermeasures was offered for IoT medical transducers. An experimental comparison of security performance among different power countermeasures was realized. Each countermeasure increases the number of power traces needed to discover the AES secret key. Random delay, random SBox, and masking strengthen the AES of 1.3, 208, and 318 factors, respectively. The masking countermeasure was by far the most effective.

SCA-Pitaya

Athough side-channel attacks appeared more than two decades ago, they remain very little discussed by security professionals outside the academia or very specific sectors (e.g., smartcard industry, governments). However, with the increasing generalisation of Internet of Things systems, they are a threat that can no longer be ignored by the operational world. This work aims to demonstrate that side-channel attacks can be practically achieved by an attacker, with reasonable means, effort, knowledge, and time. For this purpose, the contribution of this work is twofold. First, it is shown how a side-channel attack setup exploiting power leakages through electro-magnetic radiations, and making use of general-purpose and affordable equipment, can be built. The acquisition of attack power traces is made thanks to a Red Pitaya STEMlab platform coupled with a home-built radio front-end. Second, it is shown how an attack can be conducted against targets that are representative of Internet of Things devices: 8-bit and 32-bit Arduino boards.

A novel consumer-centric card management architecture and potential security issues

Multi-application smart card technology has gained momentum due to the Near Field Communication (NFC) and smart phone revolution. Enabling multiple applications from different application providers on a single smart card is not a new concept. Multi-application smart cards have been around since the late 1990s; however, uptake was severely limited. NFC has recently reinvigorated the multi-application initiative and this time around a number of innovative deployment models are proposed. Such models include Trusted Service Manager (TSM), User Centric Smart Card Ownership Model (UCOM) and GlobalPlatform Consumer-Centric Model (GP-CCM). In this paper, we discuss two of the most widely accepted and deployed smart card management architectures in the smart card industry: GlobalPlatform and Multos. We explain how these architectures do not fully comply with the UCOM and GP-CCM. We then describe our novel flexible consumer-centric card management architecture designed specifically for the UCOM and GP-CCM frameworks, along with ways of integrating the TSM model into the proposed card management architecture. Finally, we discuss four new security issues inherent to any architecture in this context along with the countermeasures for our proposed architecture.

Security automaton to mitigate laser-based fault attacks on smart cards

Security and attacks are two sides of the same coin in the smart card industry. Smart cards are prone to different types of attacks to gain access to the assets stored in it and that can cause security issues. It is necessary to identify and exploit these attacks and implement appropriate countermeasures to mitigate their effects. Fault attacks are one among them. They can introduce abnormal behaviour on the smart card environment. The redundancy is necessary to detect this change in their environment. In this work, we propose an automatic method to obtain control flow redundancy using a security automaton to mitigate laser-based fault attacks and hence implement a smart card countermeasure based on the combination of static analysis and dynamic monitoring method. This is a very cost effective approach which can identify and mitigate the effects of fault attacks in an efficient way.

SMALL WORLD CHARACTERISTICS OF INNOVATIVE SMART CARD NETWORKS

The paper examines the evolving innovative network structure in the smart card industry between 1992 and 2006. The aim is to search for sub-groups within the main network which allowed better understanding of the global innovative network structure and the speed of the smart card innovation system. Based on a proprietary database covering inter-firm agreements in the smart card industry, our empirical results reveal the existence of small-world structures, widely thought to enhance creativity and knowledge diffusion, and the emergence of giant components of innovative networks. Three notable features of this small world structure were the presence of broker incumbents, the decrease of average degree, and the increase of average distance of the networks.

Dynamics of R&D networked relationships and mergers and acquisitions in the smart card field

This paper analyzes how the structure and the evolution of inter-firm agreements have shaped the development of the smart card industry. The aim is to establish a closer connection between the evolution of inter-firm agreements in the smart card industry and the patterns of change of technology and demand in this new high-tech industry. Based on a proprietary database covering both collaborative agreements and mergers and acquisitions (M&As) occurring in this industry over the period 1992–2006, we find that the evolution of technology and market demand shapes the dynamics of R&D networks and M&As are likely to change the industry structure. We also find that a small group of producers – first-movers – still control the industry and technological trajectories. Their position arises not for oligopolistic reasons of market structure, but for technological and organizational reasons.

Automatic and real-time inspection system for smart card module inspection

We present an automatic and real-time vision system to inspect the two sides of a smart card module using fuzzy logic. In the smart card industry, the module is the referential element supporting the chip. It is designed via successive microelectronic operations to be finally embedded in the plastic card. For the chip side, the system can detect overflow of resin, integrity problems of the surface or of the resin protection, and misalignments. For the contact side, the system can detect all the defects affecting the module surface such as scratches, marks, or pollution. The vision system is flexible and real time. It is organized in dedicated layers and offers the necessary elements including controlled illumination systems to manage different films. A priori knowledge is introduced in the system, and fuzzy classifiers allow fast and reliable decisions. This industrial system has exhibited an efficiency comparable to that of experienced human observers but at much higher speed.

GlobalPlatform – the future of mobile payments

With an ever increasing number of proximity contactless trials using mobile handsets worldwide, the smart card industry is at a critical juncture. Gil Bernabeu, GlobalPlatform technical director and technology advisor to the Standardization and Technology Department at Gemalto tells CTT that technology standards and specifications are essential for addressing industry challenges.

The Smart Card Firms’ Network Positions:: A Social Network Analysis

Based on a social network analysis, as a methodology that can be used to analyze the relationships among people, as well as a proprietary database built by ourselves on inter-firm agreements formed in the smart card industry, this paper analyses the role and the influence of particular firms on the formation of inter-firm partnerships in this industry over the period 1997–2003. These inter-firm partnerships lead to the development of networks in which smart card incumbents as well as large financial providers are the central players and take a leading role in their formation.

The economics of the smart card industry: Towards coopetitive strategies

This article uses an explorative case study of the smart card industry where ‘coopetition’ is to be found. We show that the nature of interaction between smart card actors, dealing with industry and market conditions that create a very complex competitive landscape, constitutes a mix of competition and cooperation. Here, we assume that the paradoxical aspect of competition and cooperation [Quinn, R.E. and Cameron, K.S. (1988) Paradox and Transformation. Cambridge, MA: Ballinger] can be juxtaposed in order to understand the strategic phenomena characterizing actors' interactions. Actors cooperate in some activities and compete on other ones. Such strategic behaviour is called coopetitive strategy, which is increasingly adopted by high-tech industry players.

Oligopolistic competition and concentration in the smart card industry

Based on some stylised fact, and using a proprietary database of more than 750 agreements spanning from collaborations to merger and acquisition agreements between 1997 and 2003, we try in this paper to characterise and understand the movement of industry concentration. We ask whether the smart card industry will know a monitoring oligopolistic concentration on the fundamental assets and markets, despite increased levels of competition? Or will know radical technological progress, dealing with demand evolution, lead to a change in the current market structure and thus towards a ‘multipolarisation’ of global competition? We find that the smart card industry is struck by a strongly concentrated oligopoly despite fierce competition.

Requirements traceability in automated test generation

Automated test case and test driver generation from a formal model is becoming a more widely used practice in the smart card area. This innovative approach for validation testing makes it possible to ensure the functional coverage of the test suite and to automate the production of executable test scripts. This paper presents an approach to automatically produce the Traceability Matrix from requirements to test cases, as part of the test generation process. This approach is embedded in the LEIRIOS Test Generator (LTG) tool, and has been used for several real-life applications in the smart card industry. This paper introduces the approach to annotating the formal model and using it to generate the Traceability Matrix. It also discusses some lessons learnt from our experience using Model-Based Testing for smart card software validation.

Standard competition: Is collaborative strategy necessary in shaping the smart card market?

This paper is concerned with the standard competition in the three most outstanding innovation cases of videocassette recorder [VCR; video home system (VHS)/Betamax standard competition], Windows operating system for personal computers (PC; Windows standard competition), and smart cards (smart cards standard competition). The study presents a comparative analysis of major conceptual frameworks in innovation management—the Competitive Forces Model by Porter [M. Porter, Competitive Strategy, Free Press, New York, 1980] and the Managing Migration Paths Model by Hamel and Prahalad [G. Hamel and C.K. Prahalad, Competing for the future, Harvard Business School Press Boston, MA, 1994] for empirical analysis and discussions. It is argued that the ability to establish an industry standard enables an innovator to create competitive advantage. In other words, the ability to establish an industry standard provides a platform for an innovator to excel at the innovation process by generating a continuity of commercially successful innovations. The paper evaluates the strategic management of innovations by studying the previous standard competition of innovations, to suggest the direction of smart cards. The players in the smart card industry may use this empirical analysis to define strategic approach for their plan to compete in smart card launch.

Smart card industry: a technological system

The aim of this paper is to study smart card industry from a system perspective. This provides three analysis levels. First, it outlines a conceptual approach to the description and analysis of smart card as a complex and diversified technological cluster. Second, it highlights the market structure at three main different levels of downstream/upstream relationship. Third, it deals with the nature of the innovation process. This brings fundamental importance to our analysis. It involves the need for new organisational forms such as networking and system integrators, and co-opetition strategy.

Smart cards for safer roads

The smart card industry is moving into new markets, thanks to decisions made by the European Commission (EC). This feature takes a look at the new EU regulation affecting trucks and buses, and examines how smart cards are helping to promote driver safety.

Industry gears up for Cartes

As the smart card industry prepares to descend on Paris for this year’s Cartes show, we take a look at some of the issues being discussed, and highlight some of the new products being exhibited.

How can the security market bring salvation?

Autumn is the time of year when the smart card industry takes stock. This year the theme is likely to be that the boom days are well and truly over. Tim Gower of Datamonitor tells me that annual growth for the next few years is likely to show an unspectacular 5%. The roll-out of EMV cards across Europe is now well under way and sales in the wireless telecoms sector is becalmed. However, there is one ray of light: Gower sees growth coming from the use of smart cards as a security enabler. Smart cards can be used for logical access to networks and applications, for physical access to buildings and rooms, to store private keys and digital certificates, and to store authentication information such as user data and biometrics. “Wherever you see a need for security,” says Gower, “smart-card-based solutions have been brought to market.”

NEWS COMMENT — No clear passage for new ‘smart’ passports

The smart card industry has the answers for many identity problems facing the world today — from corporate identity cards to the use of SIM cards in wireless LAN. But in the new and confused world of ‘smart passports’ the industry has been shown to be lacking in recent months.

Smart card market leaves doldrums years behind

The transition to 3G mobile phones in the telecoms sector, the migration toward using EMV smart cards in the financial world and the increasing use of smart cards as part of national ID projects will help drive the smart card industry forward in 2003, according to new research. Market analyst group Frost & Sullivan claims that this combination of factors should help manufacturers leave the difficult market conditions experienced in 2002 behind them, as long as they are able to select and develop appropriate strategic partnerships and alliances prior to entering new market segments. This is a short news story only. Visit www.compseconline.com for the latest computer security industry news.

ICAO passport blueprint specifies high-capacity contactless chips

In what could turn out to be a significant boost for the smart card industry, the International Civil Aviation Organization has formally adopted a global standard for the integration of contactless smart card chips and biometric information into passports and other machine readable travel documents (MRTDs). This is a short news story only. Visit www.compseconline.com for the latest computer security industry news