检索结果-内蒙古大学图书馆

7th International Conference on Availability, Reliability and Security (ARES)

作者： Dubreuil, Jean Bouffard, Guillaume Lanet, Jean-Louis Cartigny, Julien Univ Limoges XLIM Labs Secure Smart Devices SSD Team F-87060 Limoges France

ISBN: (纸本)9780769547756

Smart card are often the target of software or hardware attacks. For instance the most recent attacks are based on fault injection which can modify the behavior of applications loaded in the card, changing them as mutant application. In this paper, we propose a new protection mechanism which makes application to be less prone to mutant generation. This countermeasure requires a transformation of the original program byte codes which remains semantically equivalent. It requires a modification of the java Virtual Machine which remains backward compatible and a dedicated framework to deploy the applications. Hence, our proposition improves the ability of the platform to resist to Fault Enabled Mutant.

关键词： smart card java card viruses fault countermeasures

来源：评论

学校读者我要写书评

暂无评论

Side Channel Analysis of a java--based Contactless Smart card

Side Channel Analysis of a Java--based Contactless Smart Car...

引用

作者： Mateos Santillan, Edgar University of Waterloo

学位级别：master

Smart cards are widely used in different areas of modern life including identification, banking, and transportation cards. Some types of cards are able to store data and process information as well. A number of them can run cryptographic algorithms to enhance the security of their transactions and it is usually believed that the information and values stored in them are completely safe. However, this is generally not the case due to the threat of the side channel. Side channel analysis is the process of obtaining additional information from the internal activity of a physical device beyond that allowed by its specifications. There exist different techniques to attempt to obtain information from a cryptosystem using other ways than the normally permitted. This thesis presents a series of experiments intended to study the side channel from a particular type of smart card, known as java cards. This investigation uses the well known technique, Correlation Analysis, and a new type of side channel attack called fast correlation in the frequency domain to study the side channel of java cards. This research presents a giant magnetoresistor (GMR) probe and for the first time, this type of sensor is used to investigate the side channel. A novel setup designed for studying the side channel of smart cards is described and two metrics used to evaluate the analysis results are presented. After testing the GMR probe and methodology on electronic devices executing the Advanced Encryption Standard (AES), such as 8 bit microcontrollers and 128 bit AES implementations on FPGAs, these techniques were applied to analyse two different models of java cards working in the contactless mode. The results show that successful attacks on a software implementation of AES running on both models of java cards are possible

关键词： Side channel fast correlation in the frequency domain Correlation Analysis java card Giant magnetoresistance GMR EM analysis smart card Side Channel Analysis

来源：评论

学校读者我要写书评

暂无评论

Design and Implementation of A Low Power java Coprocessor for Dual-interface IC Bank card

Design and Implementation of A Low Power Java Coprocessor fo...

引用

2011 IEEE 9th International Conference on ASIC(2011年第九届IEEE国际专用集成电路大会)

作者： Junwei He Liji Wu Xiangmin Zhang Institute of Microelectronics Tsinghua National Laboratory for Information Science and Technology. Tsinghua University Beijing 100084 China

java card Coprocessor is used for implementing java card Virtual Machine by hardware. java card needs to run with low power consumption, especially in the field of contactless java card. In this paper, a previous designed java card Coprocessor[2]is analyzed. This paper mainly focuses on the hardware implementation of the instruction set for java card Virtual Machine and its disadvantages. In order to reduce the power consumption, a novel instruction classification of java card Virtual Machine has been achieved. And because java card Virtual Machine is based on stack operation, a new operand stack is designed by changing the width of the operand stack to reduce the instruction execute times, the new java card Coprocessor is 40％ faster than previous one at the same frequency. So we can reduce the frequency by 40％ while operating the same instruction in the same time. The novel java Coprocessor has been implemented by hardware and verified by FPGA. The power consumption of the novel java Coprocessor is about 40％ lower than the previous one.

关键词： java card Coprocessor Instruction Set Virtual Machine Stack

来源：评论

学校读者我要写书评

暂无评论

Load time code validation for mobile phone java cards

引用

JOURNAL OF INFORMATION SECURITY AND APPLICATIONS 2013年第2-3期18卷 108-129页

作者： Gadyatskaya, Olga Massacci, Fabio Nguyen, Quang-Huy Chetali, Boutheina Univ Trento Dept Informat Engn & Comp Sci Via Sommarive 14 I-38123 Trento Italy Trusted Labs F-78000 Versailles France

Over-the-air (OTA) application installation and updates have become a common experience for many end-users of mobile phones. In contrast, OTA updates for applications on the secure elements (such as smart cards) are still hindered by the challenging hardware and certification requirements. The paper describes a security framework for java card-based secure element applications. Each application can declare a set of services it provides, a set of services it wishes to call, and its own security policy. An on-card checker verifies compliance and enforces the policy;thus an off-card validation of the application is no longer required. The framework has been optimized in order to be integrated with the run-time environment embedded into a concrete card. This integration has been tried and tested by a smart card manufacturer. In this paper we present the architecture of the framework and provide the implementation footprint which demonstrates that our solution fits on a real secure element. We also report the intricacies of integrating a research prototype with a real java card platform. (C) 2013 Elsevier Ltd. All rights reserved.

关键词： Load time application validation Secure elements Security-by-Contract java card

来源：评论

学校读者我要写书评

暂无评论

New Countermeasures against Fault and Software Type Confusion Attacks on java cards

New Countermeasures against Fault and Software Type Confusio...

引用

8th IFIP WG 11.2 International Workshop on Information Security Theory and Practice (WISTP)

作者： Barbu, Guillaume Giraud, Christophe Oberthur Technol Cryptog & Secur Grp F-33600 Pessac France

ISBN: (纸本)9783662438268;9783662438251

Attacks based on type confusion against java card platforms have been widely studied in the literature over the past few years. Until now, no generic countermeasure has ever been proposed to cover simultaneously and efficiently direct and indirect type confusions. In this article we bridge this gap by introducing two different schemes which cover both type confusions. First, we show that an adequate random transformation of all the manipulated data on the platform according to their type can bring a very good resistance against type confusion exploits. Secondly, we describe how a so-called java card Virtual Machine Abstract Companion can allow one to detect all type confusions between integers and Objects all across the platform. While the second solution stands as a strong but resource-demanding mechanism, we show that the first one is a particularly efficient memory/security trade-off solution to secure the whole platform.

关键词： java card Countermeasures Fault Injection Combined Attacks

来源：评论

学校读者我要写书评

暂无评论

Detecting Attacks on java cards by Fingerprinting Applets

Detecting Attacks on Java Cards by Fingerprinting Applets

引用

22nd IEEE International WETICE Conference (WETICE)

作者： Morana, Giovanni Tramontana, Emiliano Zito, Daniele Univ Catania Dipartimento Matemat & Informat I-95124 Catania Italy

ISBN: (纸本)9780769550022

Differently from classical JVMs, generally javacard Virtual Machines (JCVMs) rely only on limited amount of resources typical of smart cards. Recently, several mixes of logical and physical manoeuvres have been devised to exploit typical JCVM weaknesses and to have mutant applets by means e. g. of faults injection. Such combined attacks manage to bypass the existing countermeasures of several versions of JCVMs. This paper proposes an approach for detecting mutant applets, as soon as they appear at runtime, hence revealing and thwarting an ongoing attack. The approach is completely transparent to the applet's developer, and only a limited (a priori computable) amount of resources are used at runtime, hence it is affordable on board of smart cards. Our experiments have shown that the proposed solution has only a very limited impact on the performances of the target platform.

关键词： java card combined attacks runtime verification

来源：评论

学校读者我要写书评

暂无评论

Application-Replay Attack on java cards: When the Garbage Collector Gets Confused 12

Application-Replay Attack on Java Cards: When the Garbage Co...

引用

4th International Symposium on Engineering Secure Software and Systems

作者： Barbu, Guillaume Hoogvorst, Philippe Duc, Guillaume Inst Telecom Telecom ParisTech CNRS LTCI Dept COMELEC F-75634 Paris 13 France

ISBN: (纸本)9783642281662

java card 3.0 specifications have brought many new features in the java card world, amongst which a true garbage collection mechanism. In this paper, we show how one could use this specific feature to predict the references that will be assigned to object instances to be created. We also exploit this reference prediction process in a combined attack. This attack stands as a kind of "application replay" attack, taking advantage of an unspecified behavior of the java card Runtime Environment (JCRE) on application instance deletion. It reveals quite powerful, since it potentially permits the attacker to circumvent the application firewall: a fundamental and historical java card security mechanism. Finally, we point out that this breach comes from the latest specification update and more precisely from the introduction of the automatic garbage collection mechanism, which leads to a straightforward countermeasure to the exposed attack.

关键词： java card Combined Attack Garbage Collection Application Firewall

来源：评论

学校读者我要写书评

暂无评论

Detecting Attacks on java cards by Fingerprinting Applets

Detecting Attacks on Java Cards by Fingerprinting Applets

引用

IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises

作者： Giovanni Morana Emiliano Tramontana Daniele Zito Dipartimento di Matematica e Informatica University of Catania

ISBN: (纸本)9781479904051

Differently from classical JVMs, generally javaC-ard Virtual Machines (JCVMs) rely only on limited amount of resources typical of smart cards. Recently, several mixes of logical and physical manoeuvres have been devised to exploit typical JCVM weaknesses and to have mutant applets by means e.g. of faults injection. Such combined attacks manage to bypass the existing countermeasures of several versions of JCVMs. This paper proposes an approach for detecting mutant applets, as soon as they appear at runtime, hence revealing and thwarting an ongoing attack. The approach is completely transparent to the applet's developer, and only a limited (a priori computable) amount of resources are used at runtime, hence it is affordable on board of smart cards. Our experiments have shown that the proposed solution has only a very limited impact on the performances of the target platform.

关键词： java card Combined attacks Runtime verification

来源：评论

学校读者我要写书评

暂无评论

A novel consumer-centric card management architecture and potential security issues

引用

INFORMATION SCIENCES 2015年 321卷 150-161页

作者： Akram, Raja Naeem Markantonakis, Konstantinos Sauveron, Damien Univ London Smart Card Ctr Informat Secur Grp Egham Surrey England Univ Limoges UMR 7252 XLIM CNRSDept Math Informat Limoges France

Multi-application smart card technology has gained momentum due to the Near Field Communication (NFC) and smart phone revolution. Enabling multiple applications from different application providers on a single smart card is not a new concept. Multi-application smart cards have been around since the late 1990s;however, uptake was severely limited. NFC has recently reinvigorated the multi-application initiative and this time around a number of innovative deployment models are proposed. Such models include Trusted Service Manager (TSM), User Centric Smart card Ownership Model (UCOM) and GlobalPlatform Consumer-Centric Model (GP-CCM). In this paper, we discuss two of the most widely accepted and deployed smart card management architectures in the smart card industry: GlobalPlatform and Multos. We explain how these architectures do not fully comply with the UCOM and GP-CCM. We then describe our novel flexible consumer-centric card management architecture designed specifically for the UCOM and GP-CCM frameworks, along with ways of integrating the TSM model into the proposed card management architecture. Finally, we discuss four new security issues inherent to any architecture in this context along with the countermeasures for our proposed architecture. (C) 2015 Elsevier Inc. All rights reserved.

关键词： Smart card GlobalPlatform java card Multos User centric smart cards card management architecture

来源：评论

学校读者我要写书评

暂无评论

A model driven architecture for the development of smart card software

引用

COMPUTER LANGUAGES SYSTEMS & STRUCTURES 2014年第2期40卷 53-72页

作者： Saritas, Hidayet Burak Kardas, Geylani Ege Univ Uluslararasi Bilgisayar Enstitusu TR-35100 Izmir Turkey

Smart cards are portable integrated devices that store and process data. Speed, security and portability properties enable smart cards to have a widespread usage in various fields including telecommunication, transportation and the credit card industry. However, the development of smart card applications is a difficult task due to hardware and software constraints. The necessity of the knowledge of both a very low-level communication protocol and a specific hardware causes smart card software development to be a big challenge for the developers. Written codes tend to be error-prone and hard to debug because of the limited memory resources. Hence, in this study, we introduce a model driven architecture which aims to facilitate smart card software development by both providing an easy design of smart card systems and automatic generation of the required smart card software from the system models. Differentiating from the previous work, the study in here contributes to the field by both providing various smart card metamodels in different abstraction layers and defines model-to-model transformations between the instances of these metamodels in order to support the realization of the same system on different smart card platforms. Applicability of the proposed methodology is shown for rapid and efficient application development in two major smart card frameworks: java card and ZeitControl Basic card. Lessons learned during the industrial usage of the architecture are also reported in the paper. Finally, we discuss how the components of the architecture can be integrated in order to provide a domain-specific language for smart card software. (C) 2014 Elsevier Ltd. All rights reserved.

关键词： Model driven architecture Metamodel Model transformation Smart card java card Basic card

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：