检索结果-内蒙古大学图书馆

3rd International Workshop on Information Security Theory and Practice

作者： Paradinas, Pierre Cordry, Julien Bouzefrane, Samia INRIA Rocquencourt F-78150 Le Chesnay France Conservatoire Natl Arts & Metiers F-75003 Paris France

ISBN: (纸本)9783642039430

The advent of the java card standard has been a major turning point in smart card technology. With the growing acceptance of this standard, understanding the performance behaviour of these platforms is becoming crucial. To meet this need, we present in this paper, a benchmark framework that enables performance evaluation at the byte-code level. This paper focuses on the validity of our time measurements on smart cards.

关键词： java card Benchmark Performance

来源：评论

学校读者我要写书评

暂无评论

Advanced control flow in java card programming 04

Advanced control flow in Java card programming

引用

Conference on Languages, Compilers and Tools for Embedded Systems

作者： Li, P Zdancewic, S Univ Penn Philadelphia PA 19104 USA

ISBN: (纸本)9781581138061

java card technology simplifies the development of smart card applications by providing a high-level programming language similar to java. However, the master-slave programming model used in current java card platform creates control flow difficulties when writing complex card programs, making it inconvenient, tedious, and error-prone to implement java card applications. This paper examines these drawbacks of the master-slave model and proposes a concurrent thread model for developing future java card programs, which is much closer to conventional java network programming. This paper also presents a code translation algorithm and a corresponding tool that makes it possible to write card programs in the concurrent thread model without losing compatibility with the existing java card API.

关键词： languages java card continuation CPS control flow smart card trampolined style

来源：评论

学校读者我要写书评

暂无评论

Design of SCIP System for Push Services Based on java card

Design of SCIP System for Push Services Based on Java Card

引用

IEEE International Conference on Electronics, Communications and Control (ICECC)

作者： Chang, Wenjuan Fan, Chunxiao Zou, Junwei Zhang, Xiaoying Beijing Univ Posts & Telecommun Commun & Network Ctr Beijing 100088 Peoples R China

ISBN: (纸本)9781457703218

with communications technologies improving and the market continuing to expand, there is a transfer of mobile value-added services to the wide variety of data services. OTA (Over the Air) is a remote management technology for SIM card data and applications through the air interface of the mobile communication. As one of today's popular value-added services, it achieves the personalization of STK (SIM card Toolkit) card menu via SMS and BIP two kinds of load mode, which makes users able to update built-in menus of mobile phones anytime and anywhere and customize the content they are interested in, enjoying a wide variety of personalized service. OTA has well promoted the development of card applications and achieved some good results. It also exposes many issues yet, such as the service form too single and over-reliance on operators. In addition, PUSH technology allows information to take the initiative to search for users, easy to achieve timely delivery of relevant content and quick access for user, especially those mobile data content with big update speed, high information generated frequency and stable user requirements relatively. However, the audience of pushed information is difficult to reconcile. As active PUSH mechanism instead of artificial selection, it will inevitably lead to the differences between pushed information and the needs of users. In this paper we first describe the questions of current OTA application and PUSH technology briefly, and then propose SCIP (Secure Communications Interoperability Protocol) system for push services based on 3G java card. This system combines various applications of 3G mobile Internet industry, and pushes the value-added services to users that they may need according to the characteristics of mobile users interested in analysis and consumer habits. For the service upgrades, changes and other information, it takes the initiative to remind mobile users, in order to help them to select and use the information of intere

关键词： java card OTA SCIP PUSH

来源：评论

学校读者我要写书评

暂无评论

A Security Vulnerability of java card on Array Access in Financial System

A Security Vulnerability of Java Card on Array Access in Fin...

引用

22nd Wireless and Optical Communications Conference (WOCC)

作者： Xu, Jiang-pei Wu, Li-ji Yang, Xiang-jun Wang, Yu-zhong Zhang, Xiang-min Tsinghua Univ Inst Microelect Beijing 100084 Peoples R China Beijing Smart Card Res Inst Zhongchao Credit Card Co Ltd Beijing Peoples R China

ISBN: (纸本)9781467356978;9781467356992

Generally, java card mainly consists of the following parts: COS (Chip Operating System), JCVM (java card Virtual Machine), and API (Application Programming Interface). As a multi-application system, java card itself is very complicated, so it may inevitably exist some security vulnerabilities inside. Based on these parts of java card, we can find out some detectable points to its security vulnerabilities. This paper presents a method containing a specific case to test java card on array access, aiming to detect the possible security vulnerabilities of JCVM. In this paper, three different kinds of java cards have been tested and the test result has been described. From the test result, we successfully find out a security vulnerability of JCVM.

关键词： java card security vulnerability array access

来源：评论

学校读者我要写书评

暂无评论

Anonymous Credentials on a Standard java card 09

Anonymous Credentials on a Standard Java Card

引用

16th ACM Conference on Computer and Communications Security

作者： Bichsel, Patrik Camenisch, Jan Gross, Thomas Shoup, Victor IBM Res Corp Yorktown Hts NY 10598 USA

ISBN: (纸本)9781605583525

Secure identity tokens such as Electronic Identity (eID) cards are emerging everywhere At the same tune user-centric identity management gams acceptance Anonymous credential schemes are the optimal realization of user-centricity However, on inexpensive hardware platforms, typically used for ell) cards, these schemes could not be made to meet the necessary requirements such as future-proof key lengths and transaction times on the order of 10 seconds. The reasons for tins is the need for the hardware platform to be standardized and certified Therefore an implementation is only possible as a java card applet, This results in severe restrictions little memory (transient and persistent), an 8-bit CPU, and access to hardware acceleration for cryptographic operations only by defined interfaces such as RSA encryption operations Still, we present the first practical implementation of an anonymous credential system on a java card 2.2 1 We achieve transaction times that are orders of magnitudes faster than those of any prior attempt, while raising the bar in terms of key length and trust model Our system is the first one to act. completely autonomously on card and to maintain its properties in the face of an untrusted terminal hi addition, we provide a formal system specification and share our solution strategies and experiences gained and with the java card

关键词： Anonymous credential systems java card privacy-enhancing systems smart card

来源：评论

学校读者我要写书评

暂无评论

Research on the java card operand stack based attack and countermeasures 6

Research on the java card operand stack based attack and cou...

引用

6th International Conference on Electronics and Information Engineering (ICEIE)

作者： Li, Yi Wang, Lin Wuhan Univ Technol Sch Int Educ Wuhan 430070 Hubei Peoples R China Wuhan Univ Technol Sch Mech & Elect Engn Wuhan 430070 Hubei Peoples R China

In this paper, we analyze the impact of fault attacks on the operand stack, provide experiments of attacks based on the operand stack, and describe two approaches to protect the operand stack, and finally quantize the... 详细信息

ISBN: (纸本)9781510600294

关键词： smart card java card logical attack fault attack

来源：评论

学校读者我要写书评

暂无评论

A B model for ensuring soundness of a large subset of the java card virtual machine

A B model for ensuring soundness of a large subset of the Ja...

引用

5th ERCIM International Workshop on Forman Methods for Industrial Critical Systems (FMICS)

作者： Requet, A Gemplus Res Lab F-13881 Gemenos France

java cards are a new generation of smart cards that use the java programming language. As smart cards are usually used to supply security to an information system, security requirements are very strong. The byte code interpreter and verifier are crucial components of such cards, and proving their safety can become a competitive advantage. Previous works have been done on methodology for proving the soundness of the byte code interpreter and verifier using the B method. It refines an abstract defensive interpreter into a byte code verifier and a byte code interpreter. However, this work had only been tested on a very small subset of the java card instruction set. This paper presents a work aiming at verifying the scalability of this previous work. The original instruction subset of about 10 instructions has been extended to a larger subset of more than one hundred instructions, and the additional cost of the proof has been managed by modifying the specification in order to group opcodes by properties. (C) 2002 Elsevier Science B.V. All rights reserved.

关键词： B method java card formal specification

来源：评论

学校读者我要写书评

暂无评论

JCML: A specification language for the runtime verification of java card programs

引用

SCIENCE OF COMPUTER PROGRAMMING 2012年第4期77卷 533-550页

作者： da Costa, Umberto Souza Moreira, Anamaria Martins Musicante, Martin A. Souza Neto, Placid A. DIETInf Inst Fed Rio Grande Norte BR-5901500 Natal RN Brazil DIMAp Univ Fed Rio Grande Norte Natal RN Brazil

java card is a version of java developed to run on devices with severe storage and processing restrictions. The applets that run on these devices are frequently intended for use in critical, highly distributed, mobile conditions. They are required to be portable and safe. Often, the requirements of the application impose the use of dynamic, on-card verifications, but most of the research developed to improve the safety of java card applets concentrates on static verification methods. This work presents a runtime verification approach based on Design by Contract to improve the safety of java card applications. To this end, we propose JCML (java card Modelling Language) a specification language derived from JML (java Modelling Language) and its implementation: a compiler that generates runtime verification code. We also present some experiments and quality indicators. This paper extends previous published work from the authors with a more complete and precise definition of the JCML language and new experiments and results. (C) 2010 Elsevier B.V. All rights reserved.

关键词： JML java card JCML Runtime verification

来源：评论

学校读者我要写书评

暂无评论

Novel File System with ASN.1 Support for java card Applications

Novel File System with ASN.1 Support for Java Card Applicati...

引用

IEEE 23rd International Symposium on Industrial Electronics (ISIE)

作者： Imam, Mostafa Sobh, Mohamed Ain Shams Univ Comp & Syst Engn Dept Cairo Egypt

ISBN: (纸本)9781479923991

By the release of java card 3.0 Connected version and the rapid evolution of ubiquitous computing, many embedded software applications have been proposed recently to exploit the benefits of the new technology. These recent research and software development activities make it inevitable to defend the new applications in the open untrusted environments through proposing parallel research in securing embedded software platforms. This paper proposes a novel File System Applet for existing java card systems that provides highly secure storage for security-critical objects of the other residing Applets. The new file system Applet depends on PKCS15 and ISO7816 standards and features new built-in ASN.1 parser to prevent intended/unintended leakage of sensitive information.

关键词： Computer Security java card Multi-Application Smart cards File Systems Embedded Software Design Cryptography Systems

来源：评论

学校读者我要写书评

暂无评论

A Fault Attack Emulation Environment to Evaluate java card Virtual-Machine Security 17

A Fault Attack Emulation Environment to Evaluate Java Card V...

引用

17th Euromicro Conference on Digital System Design (DSD)

作者： Lackner, Michael Berlach, Reinhard Hraschan, Michael Weiss, Reinhold Steger, Christian Graz Univ Technol Inst Tech Informat A-8010 Graz Austria

ISBN: (纸本)9781479957934

java-enabled smart cards are used in different fields of application, such as access control, electronic banking, and passports. On these cards, a standardized virtual machine runs, which protects the security-critical code and data using a sandbox model. Unfortunately, this sandbox can be circumvented by fault attacks, which corrupt the data on which the virtual machine operates. The fault emulation environment of this work enables the user to configure faults at definable java applet code locations. The user specifies which java code she wants to attack but does not need to provide any information on where these data are placed in the memory and when the memory is accessed. To enable this approach, our environment monitors the virtual machine during the applet execution to receive the information which java code is currently executed and which security-critical memory regions are in use. Then, the faults are injected using a bus saboteur at the correct clock cycle and memory location. This generic high-level approach provides the environment user an abstraction of the internal states of the virtual machine and the emulated hardware. Therefore, our environment enables the recreation of currently known attacks and allows us to study the effects of fault attacks on the virtual-machine behavior. The concept was successfully evaluated by a java wallet case study. This case study shows a speedup of 6,600 compared to a simulation.

关键词： Barium Data models Emulation Field programmable gate arrays java Security Virtual machining Fault Attack Fault Emulation Hardware/Software Design Tool java card java card Virtual Machine Security virtual machines Field programmable gate arrays java java programming language simulating java card data models barium Simulated Environment faults virtual machining Security Memory Memory memory locations

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：