DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
JAVA CARD
Presented by:
G Bharath Kumar Reddy
Regd.no: 08691F0004
Date : 20th April,2011 1
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
CONTENTS
Introduction
History
What is Java Card
Features of Java Card
Architecture
Working
Applications
Security
Challenges
Conclusion
References G.Bharath Kumar
Date : 20th April,2011 2 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
INTRODUCTION
Java Card refers to a technology that allows java-based applications(applets)to be
run securely on smart cards and similar small memory footprint devices.
Java Card gives the user ability to program the device and make them application
specific
The Java Card is an extremely secure Java-powered electronic token
Java Card could have a number of real-world applications.
G.Bharath Kumar
Date : 20th April,2011 3 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
HISTORY
1996 Introduction of Java Card technology
1997 Java Card 2.0 Technology Foundations
1999 Java Card 2.1 Interoperable File Format
2000 Java Card 2.1.1 Additional Crypto APIs
2002 Java Card 2.2 Next gen crypto ,memory
management
2003 Java Card 2.2.1 Enhancements for USIM
2004 Java Card Entry level Fixed Function cards
2006 Java Card 2.2.2 Contactless
2008 Java Card 3.0 “Classic ” and “Connected”
G.Bharath Kumar
Date : 20th April,2011 4 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
WHAT IS JAVA CARD?
A programmable smart card
A multi-application smart card
An interoperable smart card
A smart card for secure application loading
G.Bharath Kumar
Date : 20th April,2011 5 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
A programmable smart card
easy to program using the power of JAVA
standard language
object oriented
compact code
A multi-application smart card
several applications can be loaded onto the same card
firewall between applications
sharing between applications
An interoperable smart card
Interoperable at source code level is applications written for
one card can run on any card i.e Write once- Run anywhere(Platform
Independent).
G.Bharath Kumar
Date : 20th April,2011 6 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
Interoperable at load file level is since Java Card Runtime
Environment JCRE2.1 converted applet CAP file can be
loaded on to any card.
Interoperable at loader level
since open platform2.0 the loading APDUs and sequences
are defined.
A smart card for secure application loading
High security features of Java Card i.e allows application
loading after issuance.
VM concept i.e no direct hardware access and references
instead of pointers.
ByteCode verification
Firewall i.e secured execution contexts.
G.Bharath Kumar
Date : 20th April,2011 7 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES ARCHITECTURE
G.Bharath Kumar
Date : 20th April,2011 8 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
JCRE (JAVA CARD RUN TIME ENVIRONMENT)
SCIENCES
Card Reset Handling
Applet Selection and
APDU Dispatching
Firewall Control and
Context Switching
Access to Application
Identifiers (AIDs)
G.Bharath Kumar
Date : 20th April,2011 9 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
JAVA CARD ARCHITECTURE -
HARDWARE
CHIP FEATURES
64 KB ROM
32 KB EEPROM
28 KB available for the customer
2 KB RAM
slow and simple microprocessor(8-bit)
UART
support of transport protocols
G.Bharath Kumar
Date : 20th April,2011 10 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
JAVA CARD VIRTUAL MACHINE (JCVM)
The
java card virtual machine (JCVM) is responsible for
byte code interpretation
exception handling
firewall checks
object consistency checks
The
JCVM does not support
long, double and float variables
multithreading
garbage collection
reloadable classes
Currently no 32 bit integer
G.Bharath Kumar
Date : 20th April,2011 11 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
JAVA CARD VIRTUAL MACHINE(CONTD..)
SCIENCES
JCVM splits into two parts
The converter (off-card VM)
class loading, resolution and linking
verification
bytecode optimization and conversion to CAP file
The interpreter (on-card VM)
bytecode execution
java card firewall enforcement
G.Bharath Kumar
Date : 20th April,2011 12 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
WORKING
SCIENCES
G.Bharath Kumar
Date : 20th April,2011 13 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
MESSAGE PASSING MODEL
G.Bharath Kumar
Date : 20th April,2011 14 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
APDU STRUCTURE
CLA, INS define the command
P1, P2 – parameters
Lc – data field length
Le – maximum response length
SW1, SW2 – response status
G.Bharath Kumar
Date : 20th April,2011 15 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
APPLICATION
SCIENCES AREAS
Financial
• Smart Credit / Debit Mobile Communication
• Infotainment
• E-Purses
• Business Support
• Loyalty Programs
• Network Optimizers
G.Bharath Kumar
Date : 20th April,2011 16 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SECURITY
SCIENCES
Byte Code Verifier
verify java byte code before execution
Class loader system
load local class and network class separately
Data Encapsulation
data is stored within the application and Java Card applications are executed in an isolated environment(the Java Card
VM),separate from underlying operating system and hardware
Applet Firewall
unlike other java VMs ,a Java Card VM usually manages several applications,each one controlling sensitive
data.Different applications therefore separated from each other by an Applet Firewall which restricts and checks access
of data elements of one applet to another.
Applet
The Applet is a state machine which processes only incoming command requests and responds by sending data or
response status words back to the interface device
G.Bharath Kumar
Date : 20th April,2011 17 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
CHALLENGES
Java cards have very restricted resources
1.Limited Memory
2.Limited Computing Power
Java Card doesn’t support some of java features
1.Large primitive data types :long,double,float
2.char,string
3.Multidimensional array
4.Dynamic class loading
5.Garbage collection
6.Multithreading
7.Object Cloning
G.Bharath Kumar
Date : 20th April,2011 18 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
CONCLUSION
The java card adds a new platform to the world of
java
Java card is a significant step forward
Realistic threats exist also for java card
Off-card verification is more risky than it seems
Java card issuers to counter act the threats
Java card security is attainable
G.Bharath Kumar
Date : 20th April,2011 19 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
REFERENCES
[1] Java Card platform overview
By Sebastian Hans,
Senior Staff Engineer,
Sun Microsystems Inc.
http://developers.sun.com/techtopics/mobility/javacard/articles/javacard1
[2] Java Card™ 2.2 Application Programming Interface
http://www.sun.com
[3] “Understanding Java Card 2.0”
http://www.wireless.java.sun.com/javacard/
[4] Java Card Technology
http://www.java.sun.com/products/javacard/
[5] Java Cards
http://www.javaworld.com/
G.Bharath Kumar
Date : 20th April,2011 20 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
Thank U
G.Bharath Kumar
Date : 20th April,2011 21 Regd.no: 08691F0004
DEPARTMENT OF MASTER OF COMPUTER
APPLICATIONS
MADANAPALLE INSTITUTE OF TECHNOLOGY &
SCIENCES
Queries ?
G.Bharath Kumar
Date : 20th April,2011 22 Regd.no: 08691F0004
