Introduction to Smart Cards

Introduction to Smart Cards

1. Properties

   • Tamper Resistant Security
   • Information Storage
   • Information Processing
   • Portability
   • Value Added Applications
   • Contact and Contactless

2. Contactless

   • electromagnetic induction
     • RFID
   • Active
   • Passive
   • NFC
     • Can act as the reader or tag

3. chip

   • RAM
     • Running Programs
     • ~8kb
   • Processor
   • EEPROM
     • Read/Write
     • Applications
     • Crypto Keys
     • ~64kb
   • wire-bonds
   • ROM
     • READ ONLY (OS)
     • ~200kb
   • Limitations
     • No internal power
     • No clock
     • Small memory/cpu power
     • controlled by the ussuer

4. GSM

   • SIM
     • Authentication
     • Encryption
     • Phonebook
     • SMS message
     • SIM/ME interface
       • Apps STK

5. Applications

   • A3/8 - SIM Cards
     • Secret key ki
     • IMSI
     • SIM Toolkit
       • Menus
       • Profile Download
   • EMV
     • Offline Authentication Static Data
     • card details signed with issuer cert
       • root cert known to Acquirer
   • Satelite TV Cards
     • DRM
   • Smart ID

6. swipe cards

   • Low Cost
   • Skimming
   • Counterfeiting

7. OS Types

   • Multos
     • Secure
   • Java Card
     • JVM
     • popular

8. OTA

   • Roaming Lists
   • Bugs/Rebranding
   • SIM 03.48
   • need senative keys

9. Attacks

   • Logical
     • brute force
     • Overflow
     • bugs/errors
   • Physical
     • Probe Circuit
     • Change Voltages/temperature
     • Current/Physical Barriers
     • Encrypt system busses
   • Side Channel
     • DPA - Differential Power Analysis
     • DFA - Differential Fault Analysis
     • Timing Attacks
     • RF Emission monitoring

10. security

    • PINs
      • Log Failed attempts counter
      • Req. to modify card
    • SIM
      • Secured Command Packet Structure