Smart Card Handbook, 2nd Edition

by W. Rankl; W. Effing

• ISBN13: 9780471988755
• ISBN10: 0471988758
• Edition: 2nd
• Format: Hardcover
• Copyright: 2000-09-01
• Publisher: WILEY

Summary

Thoroughly revised and updated, this book is the most important reference for people working in the fast-moving smart card industry. New sections on Java, digital signatures, SQL, and the new PC smart card standard from Microsoft are included. Recent developments on electronic commerce and internet payments are discussed. Readers will also find smart card simulation software and relevant Web addresses on the book's ftp site.

Table of Contents

Foreword	xi
Preface to the Second Edition	xv
Symbols and Notation	xvii
Program Code Conventions	xix
Acronyms	xx
Introduction	1	(14)
The History of Smart Cards	2	(3)
Application Areas	5	(3)
Memory Cards	5	(1)
Microprocessor cards	6	(2)
Contactless cards	8	(1)
Standardization	8	(7)
Types of Cards	15	(12)
Embossed Cards	15	(1)
Magnetic-strip Cards	16	(2)
Smart Cards	18	(6)
Memory cards	18	(2)
Microprocessor cards	20	(1)
Contactless Smart Cards	21	(3)
Optical Memory Cards	24	(3)
Physical and Electrical Properties	27	(64)
Physical Properties	27	(10)
Card Formats	28	(4)
Card components and security markings	32	(5)
The Card Body	37	(13)
Smart Card materials	38	(2)
Chip modules	40	(10)
Electrical Properties	50	(6)
Connections	50	(1)
Supply voltage	51	(1)
Supply current	52	(2)
External Clock	54	(1)
Data transfer	54	(1)
Activation and de-activation sequences	54	(2)
Smart Card Microcontrollers	56	(19)
Processor types	59	(2)
Memory types	61	(10)
Supplementary hardware	71	(4)
Contact-type Cards	75	(3)
Contactless Cards	78	(13)
Close-coupling cards: ISO/IEC 10536	83	(5)
Remote coupling cards	88	(1)
Proximity integrated circuits(s) cards:ISO/IEC 1443	89	(1)
Hands-free integrated circuit cards: ISO/IEC 15693	89	(2)
Information-Technological Foundations	91	(68)
Data Structures	92	(4)
SDL Notation	96	(1)
State Machines	97	(4)
Fundamentals of state machine theory	97	(1)
Practical application	97	(4)
Error Detection and Correction Codes	101	(5)
XOR checksums	102	(1)
CRC checksums	103	(2)
Error correction	105	(1)
Data Compression	106	(2)
Cryptology	108	(22)
Symmetric cryptographic algorithms	112	(7)
Asymmetric cryptographic algorithms	119	(8)
Padding	127	(1)
Message authentication codes and cryptographic checksums	128	(2)
Key Management	130	(6)
Derived keys	130	(1)
Key diversification	130	(1)
Key versions	131	(1)
Dynamic keys	131	(2)
Key parameters	133	(1)
Key management example	133	(3)
Hash Functions	136	(2)
Random Numbers	138	(6)
Generating random numbers	138	(3)
Testing random numbers	141	(3)
Authentication	144	(8)
Symmetric unilateral authentication	145	(2)
Symmetric mutual authentication	147	(2)
Asymmetric static authentication	149	(1)
Dynamic asymmetric authentication	150	(2)
Digital Signatures	152	(4)
Certificates	156	(3)
Smart Card Operating Systems	159	(110)
The Development of Smart Card Operating Systems	160	(2)
Fundamentals	162	(3)
Design and Implementation Principles	165	(4)
Program Code Structure	169	(3)
Memory Organization	172	(3)
Smart Card Files	175	(16)
File types	176	(3)
File names	179	(4)
File selection	183	(1)
EF file structures	184	(4)
File access conditions	188	(2)
File attributes	190	(1)
File Management	191	(6)
Process Control	197	(1)
Atomic Processes	198	(2)
Smart Card Operating Systems with Downloadable Program Code	200	(26)
Executable native code	202	(6)
Java Card	208	(18)
The Small-OS Smart Card Operating System	226	(43)
Smart Card Data Transfers	269	(58)
The Physical Transmission Layer	271	(4)
Answer to Reset (ATR)	275	(12)
ATR characters	277	(7)
Practical examples of ATRs	284	(3)
Protocol Type Selection (PTS)	287	(3)
Data Transmission Protocols	290	(24)
Synchronous data transmission	292	(5)
The T=0 transmission protocol	297	(6)
The T=1 transmission protocol	303	(10)
Comparison of asynchronous transmission protocols	313	(1)
Message Structure: APDUs	314	(3)
Structure of the command APDU	314	(2)
Structure of the response APDU	316	(1)
Secure Data Transfers	317	(8)
The authentic mode procedure	320	(2)
The combined mode procedure	322	(1)
Send sequence counter	323	(2)
Logical channels	325	(2)
Smart Card Commands	327	(56)
File Selection Commands	331	(2)
Read and Write Commands	333	(8)
Search Commands	341	(2)
File Manipulation Commands	343	(2)
Identification Commands	345	(3)
Authentication Commands	348	(5)
Commands for Cryptographic Algorithms	353	(6)
File Management Commands	359	(7)
Database Commands: SCQL	366	(3)
Commands for Electronic Purses	369	(2)
Credit Card and Debit Card Commands	371	(2)
Commands for Completing the Operating System	373	(3)
Hardware Testing Commands	376	(3)
Application-Specific Commands	379	(1)
Transmission Protocol Commands	379	(4)
Security Techniques	383	(60)
User Identification	383	(16)
Testing a secret number	384	(6)
Biometric methods	390	(9)
Smart Card Security	399	(44)
A classification of attacks and attackers	400	(6)
Attacks and defense mechanisms during the development stage	406	(2)
Attacks and defense mechanisms during the production stage	408	(1)
Attacks and defense mechanisms when the card is in use	409	(34)
Quality Assurance and Testing	443	(28)
Card Body Tests	444	(5)
Microcontroller Hardware Tests	449	(2)
Evaluating and Testing Software	451	(20)
Evaluation	451	(6)
Testing methods for software	457	(7)
Dynamic tests for operating systems and applications	464	(7)
The Smart Card Life Cycle	471	(40)
The Five Phases of the Smart Card Life Cycle	472	(2)
Phase 1 of the Life Cycle in Detail	474	(21)
Generating the operating system and producing the chip	474	(11)
Producing a card body without integrated coils	485	(5)
Producing card bodies with integrated coils	490	(3)
Combining the card body and the chip	493	(2)
Phase 2 of the Life Cycle in Detail	495	(6)
Phase 3 of the Life Cycle in Detail	501	(7)
Phase 4 of the Life Cycle in Detail	508	(1)
Phase 5 of the Life Cycle in Detail	508	(3)
Smart Card Terminals	511	(16)
Mechanical Characteristics	515	(3)
Electrical Characteristics	518	(2)
Security Techniques	520	(2)
Linking a Terminal with PC/SC	522	(5)
Smart Cards in Payment Systems	527	(44)
Payment Transactions with Cards	528	(9)
Electronic payments with Smart Cards	528	(5)
Electronic money	533	(1)
Basic system architecture options	534	(3)
Prepaid Memory Cards	537	(1)
Electronic Purses	538	(20)
The CEN EN 1546 standard	539	(14)
The Mondex system	553	(5)
The Eurocheque System in Germany	558	(7)
Credit Cards with Chips	565	(6)
Sample Applications	571	(36)
Public Cardphones in Germany	571	(3)
Contactless Memory Cards for Air Travel	574	(3)
Health Insurance Cards	577	(4)
Electronic Toll Systems	581	(4)
The GSM Network	585	(10)
Digital Signatures	595	(12)
Application Design	607	(32)
General Notes and Characteristic Data	607	(7)
Microcontrollers	607	(4)
Applications	611	(2)
System considerations	613	(1)
Formulas for Estimating Processing Times	614	(8)
Processing Times of Typical Smart Card Commands	622	(1)
Typical Command Execution Times	623	(3)
Application Development Tools	626	(2)
The Course of a Smart Card Project	628	(1)
Design Examples for Smart Card Applications	629	(10)
Electronic purse system for arcade games	630	(3)
Access control system	633	(3)
Testing the genuineness of a terminal	636	(3)
Appendix	639	(92)
Glossary	639	(27)
Literature	666	(6)
List of Standards with Comments	672	(22)
Registration Authorities for RIDs	694	(1)
Events	694	(1)
World Wide Web Addresses	695	(12)
Characteristic Values and Tables	707	(24)
ATR interval	707	(1)
ATR data element conversion tables	707	(1)
Determining the data transmission rate	708	(1)
Sampling times	709	(1)
The most important Smart Card commands	710	(4)
Summary of Utilized instruction bytes	714	(2)
Smart Card command encoding	716	(3)
Smart Card return codes	719	(3)
Selected chips for memory cards	722	(2)
Selected microcontrollers for Smart Cards	724	(7)
Index	731