Smart Card Application Development Using Java

by Hansmann, Uwe; Nicklous, Martin S.; Schack, Thomas; Seliger, Frank; Hansmann, Uwe

• ISBN13: 9783540658290
• ISBN10: 3540658297
• Edition: 1st
• Format: Paperback
• Copyright: 1999-12-01
• Publisher: Springer Verlag

Summary

Provides a guide for the rapid development of smart card applications using Java and the Open- Card framework. Reveals in detail how to develop applications that use smart cards by guiding you through examples step-by-step. Softcover. CD-ROM included.

Table of Contents

Preface	1	(1)
About This Book	1	(7)
The Audience of This Book	2	(1)
No Need to Read the Whole Book	2	(6)
About the Authors	8	(1)
Acknowledgements	9	(2)
Part I. Smart Card Introduction and Overview	11	(68)
What Makes the Smart Card ``Smart''?	13	(10)
What is a Smart Card?	13	(3)
The Benefits of Smart Cards	15	(1)
Smart Card Hardware	16	(7)
Memory Cards and Microprocessor Cards	16	(1)
Contactless Cards	17	(1)
The Computer on the Smart Card	17	(2)
Mechanical Contacts	19	(1)
The Size of a Smart Card	20	(1)
Hardware Security	21	(1)
The Manufacturing Process	21	(2)
Introduction to Smart Card Software	23	(12)
Smart Card Application Development Process	23	(1)
Communication with the Card	24	(4)
APDUs	24	(2)
T=0 and T=1	26	(1)
TLV Structures	27	(1)
Smart Card Operating Systems	28	(7)
File System Smart Cards	28	(3)
Java Card	31	(1)
Multos	32	(1)
Smart Card for Windows	33	(2)
Smart Cards and e-business	35	(14)
Electronic Purses	37	(6)
GeldKarte	39	(1)
Mondex	40	(1)
Proton	40	(1)
Visa Cash	41	(1)
Common Electronic Purse Specification	42	(1)
Authentication and Secure Access	43	(3)
Workstation Access	44	(1)
Network- and Server-Login	44	(1)
Secure Communication	45	(1)
Digital Signatures	46	(1)
Other Uses of Smart Cards in e-business	47	(2)
Electronic Ticketing	47	(1)
Loyalty Programs	48	(1)
Growth Expected	48	(1)
Cryptography	49	(18)
Cryptographic Algorithms	49	(8)
Symmetric Cryptographic Algorithms	50	(3)
Public-Key Algorithms	53	(3)
Hybrid Algorithms	56	(1)
Smart Card Cryptographic Protocols	57	(7)
External Authentication	57	(1)
Internal Authentication	58	(1)
Secure Messaging	59	(5)
TLS and Smart Cards	64	(3)
Smart Card Readers and Terminals	67	(4)
Smart Card Readers	67	(2)
Smart Card Terminals	69	(1)
Biometric Identification	70	(1)
Smart Card Standards and Industry Initiatives	71	(8)
ISO Standards	71	(2)
EMV ICC Specifications for Payment Systems	73	(2)
PC/SC	75	(3)
Visa Open Platform	78	(1)
Part II. OpenCard Framework	79	(102)
Introduction to OpenCard	81	(12)
The History of the OpenCard Framework	81	(1)
The OpenCard Consortium	82	(1)
The Objectives of the OpenCard Framework	83	(1)
The Advantages of Using OCF	84	(1)
The OCF Architecture	85	(8)
A Note on Notation	85	(2)
Architecture Overview	87	(6)
The Utility Classes	93	(14)
The OpenCard Core Definitions	93	(1)
The Core Utility Classes	94	(7)
Hex String Processing	94	(1)
The Configuration Provider	95	(1)
The Tracer	96	(3)
System Access	99	(2)
The Optional Utility Classes	101	(6)
The Loader Classes	101	(2)
The PassThruCardService	103	(2)
The Tag and TLV Classes	105	(2)
The Terminal Layer	107	(30)
Terminal Layer Core Components	108	(9)
Terminal Registry and Event Mechanism	109	(1)
Device Abstractions	110	(3)
The Terminal Layer Exceptions	113	(1)
PIN/Password Support	114	(3)
Terminal Layer Optional Components	117	(4)
The opencard.opt.terminal Package	118	(1)
The opencard.opt.terminal.protocol Package	118	(3)
Tracing in the Terminal Layer	121	(1)
Communicating with the Card Reader	121	(2)
The Java Communications API	122	(1)
The Implementation	123	(14)
Using the T=1 Protocol Support	124	(2)
Implementing the CardTerminal	126	(8)
Implementing the CardTerminalFactory	134	(3)
The Service Layer	137	(28)
The CardService Layer Core Components	139	(17)
The Application Access Classes	140	(4)
The Card Access Classes	144	(4)
The CardService Support Classes	148	(5)
The CHV Support Classes	153	(2)
The CardService Exceptions	155	(1)
The CardService Optional Components	156	(2)
Standard CardService Interfaces	158	(7)
The ISO File System CardService	159	(3)
The Signature CardService	162	(1)
The Application Management CardService	163	(2)
The OCF Security Concept	165	(16)
OpenCard Security Overview	166	(2)
OpenCard Security Classes	168	(8)
The Smart Card Key Classes	170	(2)
CardService Interface Classes	172	(3)
Credentials	175	(1)
Running OCF in Browsers	176	(5)
Browser Security Models	176	(1)
Invocation of Privileged Methods	177	(2)
Security Implications	179	(2)
Part III. Smart Card Application Development Using OCF	181	(82)
Using OCF	183	(20)
Preparing Your System	183	(1)
Configuring OCF on Your System	184	(1)
Setting the OCF Configuration Properties	184	(1)
The First Simple Application	185	(5)
Starting OCF and Shutting it Down Again	186	(1)
Obtaining a SmartCard Object via waitForCard(...)	187	(1)
Obtaining a CardService Object	188	(2)
Using this Sample Program with Other Cards	190	(1)
Smart Card Access of a Digital Signature Application	190	(13)
Attributes	191	(1)
Constructor	192	(1)
cardInserted()	192	(2)
allocateServices(SmartCard, Slot)	194	(1)
cardRemoved()	195	(1)
signatureCardPresent()	196	(1)
getCardHolderData()	196	(2)
propagateAnEarlierException()	198	(1)
setCardHolderData(String)	198	(1)
sign(int, byte[])	199	(1)
close()	200	(1)
Class SignatureCardException	200	(1)
The Complete Sample Source Code	201	(2)
OCF and e-business	203	(18)
Internet Stock Brokerage	203	(3)
Security Considerations	203	(1)
Secure Stock Brokerage Architecture	204	(1)
Protocols	205	(1)
Distributed Payment Systems	206	(15)
Card-to-Card Payment Schemes	207	(2)
Card-to-Card Payments via Internet	209	(5)
Architecture Overview	214	(2)
Implementation	216	(5)
Java Card and OCF	221	(24)
Developing a Card Applet	221	(1)
Inside the Java Card	222	(2)
The Java Card Framework	222	(1)
Lifetimes of On-card Programs and Objects	223	(1)
A Sample Java Card Applet	224	(6)
Using OCF to Work with Card Applets	230	(15)
Card Applet Proxies	231	(2)
Controlling Our Sample Card Applet through OCF	233	(12)
Card and Application Management	245	(12)
Introduction	245	(3)
Card Management Systems	246	(1)
Application Management Systems	247	(1)
Key Management Systems	247	(1)
Using OCF for Card and Application Management	248	(9)
Example	248	(1)
Security	249	(2)
Architecture and Technology	251	(1)
Post-Issuance Application Download	252	(2)
Post-Issuance Application Personalization	254	(3)
OCF for Embedded Devices	257	(6)
Device Profiles	257	(2)
OCF for Embedded Devices	259	(4)
Differences between OCF and OCF for Embedded Devices	260	(2)
Footprint Statistics	262	(1)
Part IV. Appendixes	263	(2)
A The Card	265	(1)
A.1 The IBM Multi Function Card	265	(1)
A.2 The File Structure on the Card	266	(6)
A.3 Accessing the Card	272	(1)
B Useful Web Sites	273	(4)
C Bibliography	277	(4)
D Glossary	281	(4)
E Index	285