Summary

The Smart Card Handbook is firmly established as the definitive reference to every aspect of smart card technology and has proved to be an invaluable resource for security systems development engineers.This fourth edition is comprised of 25 chapters, the entire book having been reviewed and updated to include the many technological advances made in the six years since the third edition was published. The author has also integrated changes and clarifications due to comments from readers all over the world regarding the third edition of the book, also to include the teachings from the author's lectures at Royal Holloway University of London. The revised structure of the book considers all different aspects of smart cards and their applications, with all chapters adapted to include the newest international standards and specifications.The book examines the new Internet technologies for smart cards like HTTP-Server on card, HTTP-Protocol, TCP/IP, and SSL/TSL. It discusses the integration of the new flash-based microcontrollers for Smart Cards (omitting the ROM-based microcontrollers used in the past). The chapter on Smart Card production has been expanded upon, as has the chapter about Java Card to include information about the upcoming Java Card 3.0. There is a fully updated and revised chapter on the security of Smart Cards, supplying information about new attacks and new protection methods against attacks. The chapter on contactless card data transmission with Smart Cards (detailing ISO/IEC 10536, ISO/IEC 14443, and ISO/IEC 15693) has been completely revised. There are 600 Glossary items, completely revised with explanations of all important Smart Card relevant subjects.As well as updated chapters there are three new chapters; one on Smart Cards for passports and ID-cards (a very topical subject); one about health care cards; and one on Smart Cards for public transport. A new subchapter on near field communication (NFC) has been introduced, also one about multi megabyte Smart Cards (microcontroller with NAND-Flash). The subchapter covering USB and single wire protocol (SWP) for Smart Cards has been enlarged.

Author Biography

Wolfgang Rankl, Munich, Germany
Wolfgang Rankl is currently Head of Telecom and Research and Development at Giesecke & Devrient (G&D) Germany. He is an experienced author, having written three editions of the book Smart Card Handbook for Wiley (3rd Edition published 2003), and the 4th German edition of this book for Hanser Chipkarten Anwendungen: Entwurfsmuster für Einsatz und Programmierung con Chipkarten which was published in March 2008. He has been dedicated to the development and research of smart card systems since 1990.

Preface to the Fourth Edition
Symbols and Notation
Abbreviations
Introduction
The history of smart cards
Card types and applications
Standardization
Card Types
Embossed cards
Magnetic-stripe cards
Smart cards
Optical memory cards
Physical Properties
Card formats
Contact field
Card body
Card materials
Card components and security features
Chip modules
Electrical Properties
Electrical connections
Supply voltage
Supply current
Clock supply
Data transmission with T = 0 or T =1
Activation and deactivation sequences
Smart Card Microcontrollers
Semiconductor technology
Processor types
Memory types
Supplementary hardware
Extended temperature range
Information Technology Foundations
Data structures
Encoding alphanumeric data
SDL notation
State machines
Error detection and correction codes
Data compression
Security Foundations
Cryptology
Hash functions
Random numbers
Authentication
Digital signatures
Certificates
Key management
Identification of persons
Communication with Smart Cards
Answer to reset (ATR)
Protocol Parameter Selection (PPS)
Message structure: APDUS
Secure Data Transmission
Logical channels
Logical protocols
Connecting terminals to higher-level systems
Data Transmission with Contact Cards
Physical transmission layer
Memory card protocols
ISO transmission protocols
USB transmission protocol
MMC transmission protocol
Single-wire protocol (SWP)
Contactless Data Transmission
Inductive coupling
Power transmission
Data transmission
Capacitive coupling
Collision avoidance
State of standardization
Close-coupling cards (ISO/IEC 10536)
Remote coupling cards
Proximity cards (ISO/IEC 14443)
Vicinity integrated circuit cards (ISO/IEC 15693)
Near field communication (NFC)
FeliCa
Mifare
Smart Card Commands
File selection commands
Read and write commands
Search commands
File operation commands
Commands for authenticating persons
Commands for authenticating devices
Commands for cryptographic algorithms
File management commands
Application management commands
Completion commands
Commands for hardware testing
Commands for data transmission
Database commands (SCQL)
Commands for electronic purses
Commands for credit and debit cards
Application-specific commands
Command processing times
Smart Card File Management
File structure
The life cycle of files
File types
Application files
File names
File selection
EF file structures
File access conditions
File attributes
Smart Card Operating Systems
Evolution of smart card operating systems
Fundamental aspects and tasks
Command processing
Design and implementation principles
Operating system completion
Memory organization and memory management
File management
Sequence control
ISO/IEC 7816-9 resource access
Atomic operations
Multitasking
Performance
Application management with global platform
Downloadable program code
Executable native code
Open platforms
The small-OS smart card operating system
Smart Card Production
Tasks and roles in the production process
The smart card life cycle
Chip and module production
Card Body production
Combining the card body and the chip
Electrical testing of modules
Loading static data
Loading individual data
Envelope stuffing and dispatching
Special types of production
Termination of card usage
Quality Assurance
Card body tests
Microcontroller hardware tests
Test methods for contactless smart cards
Evaluation of hardware and software
Smart Card Security
Classification of attacks and attackers
A history of attacks
Attacks and defense measures during development
Attacks and defense measures during production
Attacks and defense measures during card usage
Smart Card Terminals
Mechanical properties
Electrical properties
User interface
Application interface
Security
Smart Cards in Payment Systems
Payment transactions with cards
Prepaid memory cards
Electronic purses
EMV Application
PayPass and payWave
The Eurocheque System in Germany
Smart Cards in Telecommunication Systems
Public card phones in Germany
Telecommunication
Overview of mobile telecommunication systems
The GSM system
The UMTS system
The wireless identification module (WIM)
Microbrowsers
Smart Cards in Health Care Systems
Health insurance cards in Germany
Electronic health care cards in Germany
Smart Cards in Transportation Systems
Electronic tickets
Ski Passes
Tachosmart
Electronic toll systems
Smart Cards for Identification and Passports
FINEID personal ID card
ICAO-compliant passports
Smart Cards for IT Security
Digital signatures
Signature applications compliant with PKCS #15
Smart Card Web Server (SCWS)
Application Design
General information and characteristic data
Application generation tools
Analyzing an unknown smart card
Appendix
Glossary
Related reading
Bibliography
Directory of standards and specifications
Web addresses
Index
Table of Contents provided by Publisher. All Rights Reserved.

Supplemental Materials

What is included with this book?

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.