Smart Card Handbook, 4th Edition

by Wolfgang Rankl (Giesecke & Devrient GmbH, Munich, Germany); Wolfgang Effing (Giesecke & Devrient GmbH)

• ISBN13: 9780470660898
• ISBN10: 0470660899
• Format: eBook
• Copyright: 2010-05-01
• Publisher: Wiley

Summary

The most comprehensive book on state-of-the-art smart card technology available

Updated with new international standards and specifications, this essential fourth edition now covers all aspects of smart card in a completely revised structure. Its enlarged coverage now includes smart cards for passports and ID cards, health care cards, smart cards for public transport, and Java Card 3.0.

New sub-chapters cover near field communication (NFC), single wire protocol (SWP), and multi megabyte smart cards (microcontroller with NAND-Flash). There are also extensive revisions to chapters on smart card production, the security of smart cards (including coverage of new attacks and protection methods), and contactless card data transmission (ISO/IEC 10536, ISO/IEC 14443, ISO/IEC 15693).

This edition also features:

· additional views to the future development of smart cards, such as USB, MMU, SWP, HCI, Flash memory and their usage;

· new internet technologies for smart cards; smart card web server, HTTP-Protocol, TCP/IP, SSL/TSL;

· integration of the new flash-based microcontrollers for smart cards (until now the usual ROM-based microcontrollers), and;

· a completely revised glossary with explanations of all important smart card subjects (600 glossary terms).

Smart Card Handbook is firmly established as the definitive reference to every aspect of smart card technology, proving an invaluable resource for security systems development engineers. Professionals and microchip designers working in the smart card industry will continue to benefit from this essential guide. This book is also ideal for newcomers to the field.

The Fraunhofer Smart Card Award was presented to the authors for the Smart Card Handbook, Third Edition in 2008.

Table of Contents

Preface

Symbols and Notation

Abbreviations

Introduction

TheHistoryofSmartCards

Card Types and Applications

Standardization

Card Types

EmbossedCards

Magnetic-stripe Cards

SmartCards

OpticalMemoryCards

Physical Properties

CardFormats

ContactField

CardBody

CardMaterials

Card Components and Security Features

Chip Modules

Electrical Properties

Electrical Connections

Supply Voltage

Supply Current

Clock Supply

DataTransmissionwithT=0orT=1

Activation and Deactivation Sequences

Smart Card Microcontrollers

Semiconductor Technology

Processor Types

Memory Types

Supplementary Hardware

Extended Temperature Range

Information Technology Foundations

DataStructures

Encoding Alphanumeric Data

SDLNotation

State Machines

Error Detection and Correction Codes

DataCompression

Security Foundations

Cryptology

Hash Functions

Random Numbers

Authentication

Digital Signatures

Certificates

Key Management

Identification ofPersons

Communication with Smart Cards

Answer toReset

Protocol Parameter Selection

MessageStructure

Secure Data Transmission

Logical Channels

Logical Protocols

Connecting Terminals to Higher-level Systems

Data Transmission with Contact Cards

Physical Transmission Layer

Memory Card Protocols

ISO Transmission Protocols

USB Transmission Protocol

MMC Transmission Protocol

Single-Wire Protocol

Contactless Data Transmission

Inductive Coupling

PowerTransmission

DataTransmission

Capacitive Coupling

Collision Avoidance

State of Standardization

Close-Coupling Cards (ISO/IEC 10536)

RemoteCouplingCards

Proximity Cards (ISO/IEC 14443)

VicinityIntegratedCircuitCards

NearFieldCommunication (NFC)

FeliCa

Mifare

Smart Card Commands

File Selection Commands

Read and Write Commands

Search Commands

File Operation Commands

Commands for Authenticating Persons

Commands for Authenticating Devices

Commands for Cryptographic Algorithms

File Management Commands

Application Management Commands

Completion Commands

Commands for Hardware Testing

Commands for Data Transmission

Database Commands (SCQL)

Commands for Electronic Purses

Commands for Credit and Debit Cards

Application-Specific Commands

CommandProcessingTimes

Smart Card File Management

FileStructure

TheLifeCycle ofFiles

File Types

ApplicationFiles

FileNames

FileSelection

EFFileStructures

File Access Conditions

FileAttributes

Smart Card Operating Systems

Evolution ofSmartCardOperatingSystems

Fundamental Aspects and Tasks

CommandProcessing

Designand ImplementationPrinciples

OperatingSystemCompletion

Memory Organization and Memory Management

File Management

Sequence Control

ISO/IEC 7816-9 Resource Access

AtomicOperations

Multitasking

Performance

Application Management with Global Platform

Downloadable Program Code

Executable Native Code

OpenPlatforms

TheSmall-OSSmartCardOperatingSystem

Smart Card Production

Tasks and Roles in the Production Process

SmartCardLifeCycle

Chip and Module Production

Card Body Production

Combining theCardBody and theChip

Electrical Testing of Modules

Loading Static Data

Loading Individual Data

EnvelopeStuffing andDispatching

Special Types of Production

Termination ofCardUsage

Quality Assurance

CardBodyTests

Microcontroller Hardware Tests

Test Methods for Contactless Smart Cards

Test Methods for Software

Evaluation ofHardware andSoftware

Smart Card Security

Classification of Attacks and Attackers

A History of Attacks

Attacks and Defense Measures During Development

Attacks and Defense Measures During Production

Attacks and Defense Measures During Card Usage

SmartCardTerminals

Mechanical Properties

Electrical Properties

User Interface

Application Interface

Security

Smart Cards in Payment Systems

PaymentTransactionswithCards

Prepaid Memory Cards

ElectronicPurses

Inter-sector electronic purses compliant with EN 1546

EMVApplication

PayPass and payWave

The Eurocheque System in Germany

Smart Cards in Telecommunication Systems

Public Card Phones in Germany

Telecommunication

OverviewofMobileTelecommunicationSystems

TheGSMSystem

TheUMTSSystem

TheWIM

Microbrowsers

Smart Cards in Health Care Systems

Health Insurance Cards in Germany

ElectronicHealthCareCards inGermany

Smart Cards in Transportation Systems

ElectronicTickets

SkiPasses

Tachosmart

ElectronicTollSystems

Smart Cards for Identification and Passports

FINEID Personal ID Card

ICAO-compliantPassports

Smart Cards for IT Security

Digital Signatures

Signature Applications Compliant with PKCS #15

SmartCardWebServer

ApplicationDesign

General Information and Characteristic Data

Application Generation Tools

Analyzing an Unknown Smart Card

Appendix

Glossary

Related Reading

Bibliography

Directory of Standards and Specifications

WebAddresses

Index

Table of Contents provided by Publisher. All Rights Reserved.