Smart cards: State-of-the-art to future directions

Abstract

Abstract. Creating security architectures and processes that directly interact with consumers, especially in consumer electronics, has to take into account usability, user-experience and skill level. Smart cards provide secure services, even in malicious environments, to end-users with a fairly straightforward limited usage pattern that even an ordinary user can easily deal with. The way the smart card industry achieves this is by limiting users' interactions and privileges on the smart cards they carry around and use to access dierent services. This centralised control has been the key to providing secure and reliable services through smart cards, while keeping the smart cards fairly useable for end-users.However, as smart cards have permeated into every aspect of modern life, users have ended up carrying multiple cards to perform mundane tasks, making smart card-based services a cumbersome experience. User Centric Smart Cards (UCSC) enable users to have all the services they might be accessing using traditional smart cards on a single device that is under their control. Giving "freedom of choice" to users increases their privileges, but the design requirement is to maintain the same level of security and reliability as traditional architectures while giving better user experience. In this paper, we will discuss the challenges faced by the UCSC proposal in balancing security with usability and "freedom of choice", and how it has resolved them.

A taxonomy of various attacks on smart card–based applications and countermeasures

“…In other words, a single insecure application on the card may lead to insecurity of the whole platform. It also increases burden on the card operating system 130,131 …”

Criptografia Homomórfica Utilizada para Autênticação em Smart Card

“…Figura 1-Representação Genérica da Arquitetura Java Card 3. Fonte: [5] D. Java Card Para que dispositivos possam se comunicar com as aplicações contidas em java cards é utilizado o protocolo APDU (Application Protocol Data Unit). A grosso modo, ele é um conjunto de bytes hexadecimais, sendo que, cada byte expressa informação sobre qual aplicação deve ser executada, qual método da mesma, o dado que está sendo recebido/enviado, ou faz parte do dado [1].…”