Smart Card Application Development Using Java

by Hansmann, Uwe; Nicklous, Martin S.; Schack, Thomas; Schneider, Achim; Seliger, Frank; Hansmann, Uwe

• ISBN13: 9783540432029
• ISBN10: 3540432027
• Edition: 2nd
• Format: Paperback
• Copyright: 2002-11-01
• Publisher: Springer-Verlag New York Inc

Summary

In today's world, smart cards play an increasingly important role in everyday life. We encounter them as credit cards, loyalty cards, electronic purses, health cards, and as secure tokens for authentication or digital signature. Their small size and the compatibility of their form with the magnetic stripe card make them ideal carriers of personal information such as secret keys, passwords, customization profiles, and medical emergency information. This book provides a guide for the rapid development of smart card applications using Java and the OpenCard Framework. It gives you the basic information you need about smart cards and how they work. It shows in detail how to develop applications that use smart cards by guiding you through examples step by step. A smart card provided with the book will help you to quickly get some first hands-on experience.

Table of Contents

Preface	1	(1)
About This Book	1	(1)
The Audience of This Book	2	(1)
No Need to Read the Whole Book	2	(6)
About the Authors	8	(2)
Acknowledgements	10	(1)
Part I Smart Card Introduction and Overview	11	(74)
What Makes the Smart Card ``Smart''?	13	(10)
What is a Smart Card?	13	(3)
The Benefits of Smart Cards	15	(1)
Smart Card Hardware	16	(7)
Memory Cards and Microprocessor Cards	16	(1)
Contactless Cards	17	(1)
The Computer on the Smart Card	17	(2)
Mechanical Contacts	19	(1)
The Size of a Smart Card	20	(1)
Hardware Security	21	(1)
The Manufacturing Process	21	(2)
Introduction to Smart Card Software	23	(12)
Smart Card Application Development Process	23	(1)
Communication with the Card	24	(4)
APDUs	24	(2)
T=0 and T=1	26	(1)
TLV Structures	27	(1)
Smart Card Operating Systems	28	(7)
File System Smart Cards	28	(3)
Java Card	31	(1)
Multos	32	(1)
Smart Card for Windows	33	(2)
Smart Cards and e-business	35	(16)
Electronic Purses	37	(6)
GeldKarte	39	(1)
Mondex	40	(1)
Proton	41	(1)
Visa Cash	41	(2)
Common Electronic Purse Specification	43	(1)
Authentication and Secure Access	43	(3)
Workstation Access	44	(1)
Network- and Server-Login	44	(1)
Secure Communication	45	(1)
Digital Signatures	46	(1)
Other Uses of Smart Cards in e-business	47	(4)
Electronic Ticketing	47	(1)
Loyalty Programs	48	(1)
Growth Expected	49	(2)
Cryptography	51	(18)
Cryptographic Algorithms	51	(8)
Symmetric Cryptographic Algorithms	52	(4)
Public-Key Algorithms	56	(3)
Hybrid Algorithms	59	(1)
Smart Card Cryptographic Protocols	59	(8)
External Authentication	59	(1)
Internal Authentication	60	(1)
Secure Messaging	61	(6)
TLS and Smart Cards	67	(2)
Smart Card Readers and Terminals	69	(6)
Smart Card Readers	69	(2)
Smart Card Terminals	71	(1)
Biometric Identification	72	(3)
Smart Card Standards and Industry Initiatives	75	(10)
ISO Standards	75	(2)
EMV ICC Specifications for Payment Systems	77	(2)
PC/SC	79	(3)
GlobalPlatform	82	(3)
Part II OpenCard Framework	85	(108)
Introduction to OpenCard	87	(14)
The History of the OpenCard Framework	87	(1)
The OpenCard Consortium	88	(1)
The Objectives of the OpenCard Framework	89	(1)
The Advantages of Using OCF	89	(2)
The OCF Architecture	91	(10)
A Note on Notation	91	(2)
Architecture Overview	93	(8)
The Utility Classes	101	(14)
The OpenCard Core Definitions	101	(1)
The Core Utility Classes	102	(7)
Hex String Processing	102	(1)
The Configuration Provider	103	(1)
The Tracer	104	(3)
System Access	107	(2)
The Optional Utility Classes	109	(6)
The Loader Classes	110	(1)
The Pass Thru Card Service	111	(2)
The Tag and TLV Classes	113	(2)
The Terminal Layer	115	(30)
Terminal Layer Core Components	116	(9)
Terminal Registry and Event Mechanism	117	(1)
Device Abstractions	118	(3)
The Terminal Layer Exceptions	121	(2)
PIN / Password Support	123	(2)
Terminal Layer Optional Components	125	(5)
The opencard.opt.terminal Package	126	(2)
The opencard.opt.terminal.protocol Package	128	(2)
Tracing in the Terminal Layer	130	(1)
Communicating with the Card Reader	130	(2)
The Java Communications API	131	(1)
The Implementation	132	(13)
Using the T=1 Protocol Support	133	(2)
Implementing the CardTerminal	135	(8)
Implementing the CardTerminalFactory	143	(2)
The Service Layer	145	(30)
The CardService Layer Core Components	147	(19)
The Application Access Classes	148	(4)
The Card Access Classes	152	(4)
The CardService Support Classes	156	(5)
The CHV Support Classes	161	(3)
The CardService Exceptions	164	(2)
The CardService Optional Components	166	(2)
Standard CardService Interfaces	168	(7)
The ISO File System CardService	169	(3)
The Signature CardService	172	(1)
The Application Management CardService	173	(2)
The OCF Security Concepts	175	(18)
OpenCard Security Overview	177	(2)
OpenCard Security Classes	179	(9)
Cryptographic Key Classes	180	(1)
The Smart Card Key Classes	181	(2)
CardService Interface Classes	183	(4)
Credentials	187	(1)
Running OCF in Browsers	188	(5)
Browser Security Models	189	(1)
Invocation of Privileged Methods	190	(1)
Security Implications	191	(2)
Part III Smart Card Application Development Using OCF	193	(80)
Using OCF	195	(20)
Preparing Your System	195	(1)
Configuring OCF on Your System	196	(2)
Setting the OCF Configuration Properties	196	(2)
The First Simple Application	198	(4)
Starting OCF and Shutting it Down Again	199	(1)
Obtaining a SmartCard Object via waitForCard(...)	200	(1)
Obtaining a CardService Object	201	(1)
Using this Sample Program with Other Cards	202	(1)
Smart Card Access of a Digital Signature Application	202	(13)
Attributes	203	(1)
Constructor	204	(1)
cardInserted()	205	(1)
allocateServices(SmartCard, int)	206	(1)
cardRemoved()	207	(1)
signatureCardPresent()	208	(1)
getCardHolderData()	208	(2)
propagateAnEarlierException()	210	(1)
setCardHolderData(String)	210	(1)
sign(int, byte[])	211	(1)
close()	212	(1)
Class SignatureCardException	212	(1)
The Complete Sample Source Code	213	(2)
OCF and e-business	215	(18)
Internet Stock Brokerage	215	(3)
Security Considerations	215	(1)
Secure Stock Brokerage Architecture	216	(1)
Protocols	217	(1)
Distributed Payment Systems	218	(15)
Card-to-Card Payment Schemes	219	(2)
Card-to-Card Payments via Internet	221	(5)
Architecture Overview	226	(2)
Implementation	228	(5)
Java Card and OCF	233	(22)
Developing a Card Applet	233	(1)
Inside the Java Card	234	(2)
The Java Card Framework	234	(1)
Lifetimes of On-card Programs and Objects	235	(1)
A Sample Java Card Applet	236	(6)
Using OCF to Work with Card Applets	242	(13)
Card Applet Proxies	243	(2)
Controlling Our Sample Card through OCF	245	(10)
Card and Application Management	255	(12)
Introduction	255	(3)
Card Management Systems	256	(1)
Application Management Systems	257	(1)
Key Management Systems	258	(1)
Using OCF for Card and Management	258	(9)
Example	259	(1)
Security	259	(2)
Architecture and Technology	261	(1)
Post-Issuance Application Download	262	(2)
Post-Issuance Application Personalization	264	(3)
OCF for Embedded Devices	267	(6)
Device Profiles	267	(2)
OCF for Embedded Devices	269	(4)
Differences between OCF and OCF for Embedded Devices	270	(2)
Footprint Statistics	272	(1)
Part IV Appendixes	273	(24)
A The Card	275	(10)
A.1 The IBM MultiFunction Card	275	(1)
A.2 The File Structure on the Card	276	(7)
A.3 Accessing the Card	283	(2)
B Useful Web Sites	285	(4)
C Bibliography	289	(4)
D Glossary	293	(4)
E Index	297