Towards a secure and practical multifunctional smart card

Authors:
Idir Bakdi
Affiliations:
Lehrstuhl für Wirtschaftsinformatik II, Universität Regensburg, Regensburg, Germany
Venue:
CARDIS'06 Proceedings of the 7th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Applications
Year:
2006

Citing 10
Cited 0

Applied cryptography (2nd ed.): protocols, algorithms, and source code in C

Applied cryptography (2nd ed.): protocols, algorithms, and source code in C
Crowds: anonymity for Web transactions

ACM Transactions on Information and System Security (TISSEC)
ACM SIGAda Ada Letters

ACM SIGAda Ada Letters
Java Card Technology for Smart Cards: Architecture and Programmer's Guide

Java Card Technology for Smart Cards: Architecture and Programmer's Guide
Handbook of Applied Cryptography

Handbook of Applied Cryptography
Byte Code Verification for Java Smart Card Based on Model Checking

ESORICS '98 Proceedings of the 5th European Symposium on Research in Computer Security
An Operational Semantics of the Java Card Firewall

E-SMART '01 Proceedings of the International Conference on Research in Smart Cards: Smart Card Programming and Security
A High-Speed Oscillator-Based Truly Random Number Source for Cryptographic Applications on a Smart Card IC

IEEE Transactions on Computers
Breaking up is hard to do: modeling security threats for smart cards

WOST'99 Proceedings of the USENIX Workshop on Smartcard Technology on USENIX Workshop on Smartcard Technology
Tamper resistance: a cautionary note

WOEC'96 Proceedings of the 2nd conference on Proceedings of the Second USENIX Workshop on Electronic Commerce - Volume 2

Quantified Score

Hi-index	0.00

Visualization

Abstract

One of the most promising features of smart card technology is its potential to serve several applications using a single hardware token. Existing multifunctional smart cards, however, are either simple and suffer from serious limitations or they have a high complexity that is not justified for most applications. This paper describes a new scheme permitting different applications to flexibly share a hardware token. The proposed solution supports off-line transactions as well as post-issuance loading. Each application can load one or more “virtual tokens” (remotely) into a common smart card. Despite its simplicity, the scheme guarantees the authenticity and integrity of virtual tokens and prevents their duplication. Moreover, it protects the privacy of card holders by providing a possibility to use pseudonymous identities that cannot be linked to one another.