检索结果-内蒙古大学图书馆

COMPUTER NETWORKS-THE INTERNATIONAL JOURNAL OF COMPUTER AND TELECOMMUNICATIONS NETWORKING 2001年第4期36卷 473-487页

作者： Husemann, D IBM Corp Zurich Res Lab Div Res CH-8803 Ruschlikon Switzerland

In this paper, I take you on a guided tour through the world of smart card standards. We briefly touch ISO 7816, the defining standards for smart cards;then we take a longer look at current de-facto standards for smart card operating systems (SCOSs) such as javacard, MULTOS, BasicCard, and Windows for Smart Cards. The paper concludes with a discussion of PC/SC, MUSCLE, and the OpenCard Framework which are smart card middlewares for smart card-application communication. (C) 2001 Elsevier Science B.V. All rights reserved.

关键词： Smart card Smartcard ISO 7816 javacard MULTOS mondex windows for Smart Card BasicCard PC/SC OpenCard framework OCF MUSCLE Linux

来源：评论

学校读者我要写书评

暂无评论

Security Improvement Based on Fingerprint Match-on-card for Access Control Protocol in ePassports

Security Improvement Based on Fingerprint Match-on-card for ...

引用

4th European Conference on Information Management and Evaluation

作者： Lopez, Cristobal Navas, Francisco Senciales, Jose-Carlos Salinas, Jose Andalusian Ctr Innovat Informat & Commun Technol Malaga Spain

ISBN: (纸本)9781906638726

Nowadays e-passports base their security on Basic Access Control (BAC) protocol, whose encryption keys are derived from the Machine Readable Zone (MRZ) characters of the document. MRZ data has very low entropy, thus this security measurement does not mean a problem for potential attackers. This paper proposes an alternative access control protocol to improve e-passports' security, based on the holder's fingerprint. First an optimized implementation of an asymmetric matching algorithm for javacard platform is proposed, which offers a faster Match-On-Card (MOC) performance;this matching algorithm uses information from the best local minutiae on the fingerprint, and the spatial relationship between them, thus allowing less use of memory and a smaller runtime. Next, an alternative access control protocol for e-passports based on MRZ and random characters, and the bearer's fingerprint Match-On-Card, is presented. The proposed protocol uses the document's Active Authentication (AA) public key to send a candidate template to the card in a secure way, and a random key seed to set the session encryption and Message Authentication Code (MAC) keys;by this way, more secure e-passports can be produced. This access control protocol has been implemented on a Radio Frequency Identification (RFID) javacard to show effectiveness and security of our approach. The proposed protocol has been developed as a part of IDENTICA, an advanced identity verification project requested by Telvent, and co-financed by Ministry of Industry, Tourism and Commerce of Spain, in the framework of the National Plan of Scientific Research, Development and Technological Innovation 2004-2007.

关键词： e-passport security fingerprints minutiae RFID javacard

来源：评论

学校读者我要写书评

暂无评论

WooKey: Designing a Trusted and Efficient USB Device 19

WooKey: Designing a Trusted and Efficient USB Device

引用

35th Annual Computer Security Applications Conference (ACSA)

作者： Benadjila, Ryad Michelizza, Arnauld Renard, Mathieu Thierry, Philippe Trebuchet, Philippe ANSSI Paris France

ISBN: (纸本)9781450376280

The work presented in this paper takes place in the design initiatives that have emerged to thwart BadUSB threats [59]. Though many attempts were focusing on the host side, by enhancing the operating system's USB sub-module robustness [78, 80] or by adding a proxy between the host and the device [6, 53], we have chosen to focus our efforts on the device side. More specifically, our work presents the WooKey platform, a custom highly secure USB thumb drive with mass storage capabilities, designed for user data encryption and protection, and embedding a full-fledged set of in-depth defenses. The device encloses a firmware with a secure DFU (Device Firmware Update) implementation using up-to-date cryptography as well as an external and extractable authentication token based on a secure element. The runtime software security is built upon EwoK, an innovative open source microkernel designed for microcontrollers with advanced security and performance in mind. Finally, another strength of the project is its core guiding principle: provide an open source and open hardware platform [3] using off-the-shelf components.

关键词： MCU microkernel MPU USB DFU STM32 Ada SPARK javacard

来源：评论

学校读者我要写书评

暂无评论

The case for a secure multi-application smart card operating system 1st

The case for a secure multi-application smart card operating...

引用

1st International Workshop on Information Security (ISW 97)

作者： Markantonakis, C Univ London Royal Holloway & Bedford New Coll Dept Comp Sci Informat Secur Grp Egham TW20 0EX Surrey England

ISBN: (纸本)3540643826

The idea of a multi-application smart card operating system is not a new one, but only recently the smart card industry is catching up with proper software and hardware architectures that contribute in the anticipated evolution. In this paper we survey some of the proposed software architectures and comment on their applicability and performance, along with investigating the entirely new demands imposed both in the smart card operating system and the application level. We also present a slightly different more decentralized view of a secure smart card multi-application operating system with some interesting new features.

关键词： smart card multi-application operating system interpreter applet objects Java javacard

来源：评论

学校读者我要写书评

暂无评论

Implementation Aspects of Mobile and Embedded Trusted Computing

引用

International Conference on the Technical and Socio-Economic Aspects of Trusted Computing (Trust 2009)

作者： Dietrich, Kurt Winter, Johannes Inst Appl Informat Proc & Commun A-8010 Graz Austria

ISBN: (纸本)9783642005862

Nowadays, trusted platform modules (TPMs) are usually deployed together with desktop PCs and notebooks. However, these platforms are not the only ones that can host TPMs. Mobile and embedded platforms like cell phones can also host TPMs but may have different requirements and different use-case scenarios. In contrast to common TPMs, TPMs for mobile platforms do not need to be implemented as micro controllers, leading to different security assumptions. In order to find these differences, we have designed and implemented two approaches for mobile TPMs that are analyzed in detail in the context of this paper.

关键词： Mobile Trusted Computing MTMs ARM TrustZone Secure Element javacard

来源：评论

学校读者我要写书评

暂无评论

TrustBox: A Security Architecture for Preventing Data Breaches

TrustBox: A Security Architecture for Preventing Data Breach...

引用

19th International Euromicro Conference on Parallel, Distributed and Network-Based Processing (PDP)

作者： Schmidt, Matthias Fahl, Sascha Schwarzkopf, Roland Freisleben, Bernd Univ Marburg Dept Math & Comp Sci Hans Meerwein Str 3 D-35032 Marburg Germany

ISBN: (纸本)9780769543284

In this paper, a novel approach to prevent accidental or deliberate data breaches is presented. The proposed approach provides platform, network and offline security. Data is categorized as sensitive or insensitive, and the corresponding applications are isolated by using virtualization technology. Data theft or accidental loss is prevented by encrypting virtual hard disks and by introducing a multi-lane network architecture. If no connection to a corporate network is available, an offline mode handles data transfer and encryption. Authentication is managed by applying a biometric feature vector in association with a smart card setup. The approach increases security without disrupting the everyday work routines of users. An implementation based on VirtualBox and javacard is presented. A performance evaluation of the critical components is provided.

关键词： Biometric Data Breach javacard Virtualization Data breaches Virtualization Health Smart Cards Intranets Performance Evaluation data transmission Eigenvector Security NETWORK STRUCTURE OFF LINE

来源：评论

学校读者我要写书评

暂无评论

Safety property driven test generation from JML specifications

引用

1st Joint International Workshop on FATES/RV

作者： Bouquet, Fabrice Dadeau, Frederic Groslambert, Julien Julliand, Jacques Univ Franche Comte LIFE CNRS INRIA 16 Route Gray F-25030 Besancon France

ISBN: (纸本)9783540496991

This paper describes the automated generation of test sequences derived from a JML specification and a safety property written in an ad hoc language, named JTPL. The functional JML model is animated to build the test sequences w.r.t. the safety properties, which represent the test targets. From these properties, we derive strategies that are used to guide the symbolic animation. Moreover, additional JML annotations reinforce the oracle in order to guarantee that the safety properties are not violated during the execution of the test suite. Finally, we illustrate this approach on an industrial javacard case study.

关键词： automated testing safety properties black-box testing Java Modeling Language javacard

来源：评论

学校读者我要写书评

暂无评论

Fooling Primality Tests on Smartcards 25th

Fooling Primality Tests on Smartcards

引用

25th European Symposium on Research in Computer Security (ESORICS)

作者： Sedlacek, Vladimir Jancar, Jan Svenda, Petr Masaryk Univ Brno Czech Republic Ca Foscari Univ Venice Venice Italy

ISBN: (纸本)9783030590123;9783030590130

We analyse whether the smartcards of the javacard platform correctly validate primality of domain parameters. The work is inspired by Albrecht et al. [1], where the authors analysed many open-source libraries and constructed pseudoprimes fooling the primality testing functions. However, in the case of smartcards, often there is no way to invoke the primality test directly, so we trigger it by replacing (EC)DSA and (EC)DH prime domain parameters by adversarial composites. Such a replacement results in vulnerability to Pohlig-Hellman [30] style attacks, leading to private key recovery. Out of nine smartcards (produced by five major manufacturers) we tested (See https://***/papers/primality_esorics20 for more information), all but one have no primality test in parameter validation. As the javacard platform provides no public primality testing API, the problem cannot be fixed by an extra parameter check, making it difficult to mitigate in already deployed smartcards.

关键词： Pseudoprimes Primality testing javacard (EC)DSA (EC)DH

来源：评论

学校读者我要写书评

暂无评论

Using MTMs to Secure Electronic Signatures Generation

Using MTMs to Secure Electronic Signatures Generation

引用

9th International Conference on Communications (COMM)

作者： Serb, Mihai Patriciu, Victor Valeriu Mil Tech Acad Doctoral Sch Bucharest Romania

ISBN: (纸本)9781467325738

In an ever growing number of countries, electronic signatures can produce the same legal effects as handwritten signatures, if certain conditions are met. But these rules do not alleviate the risk of an attacker tampering with the application that is used to generate the signature or verify the signature. It is much easier for an attacker to try to replace this application with a modified version which fools the user into applying a valid signature on data that was modified without his knowledge, than to try to forge the signature. In this paper we present a solution for creating a secure environment for signature creation / verification based on the use of MTM (Mobile Trusted Module) devices. We show that by using a MTM for both secure storage of private keys and as a means to determine the integrity of the signature creation / verification application, the user can be certain of the fact that the signing / verification process was not tampered with.

关键词： electronic signatures MTM SSCA SSCD javacard

来源：评论

学校读者我要写书评

暂无评论

javacardAPI的安全性测试方法

引用

中国集成电路 2019年第4期28卷 81-84,93页

作者：左捷上海计算机软件技术开发中心上海201112 上海市计算机软件评测重点实验室上海201112

随着现代生活中对于智能卡多应用需求的不断提升,Java Card得到了越来越广泛的使用。Java Card标准API的定义是将平台和应用开发进行了分离,使得开发应用更为便利。同时,Java Card提供的这种通用且开放的模式也使得Java Card API的安全... 详细信息

随着现代生活中对于智能卡多应用需求的不断提升,Java Card得到了越来越广泛的使用。Java Card标准API的定义是将平台和应用开发进行了分离,使得开发应用更为便利。同时,Java Card提供的这种通用且开放的模式也使得Java Card API的安全性显得尤为重要。论文探讨了Java Card API的安全性测试方法,该方法提供了如何编写测试Applet,并通过修改测试Applet的Cap文件的方式,将修改后的Cap文件下载在智能卡中,从而达到非法获取智能卡中有效信息的攻击效果,以此来验证Java Card API的安全性。本文所提供的测试方法,可以有效地被利用在javacard API的安全性测试中。

关键词：智能卡 javacard API Cap Applet 安全性测试

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：