NXP JCOP v2.4.1 Java Card
NXP JCOP v2.4.1 Java Card
1
JCOP V2.4.1 secure smart card controller
Rev. 3.2 — 2 September 2009 Product short specification
167532 CONFIDENTIAL
1. General description
NXP Semiconductors offers a Java Card Open Platform operating system called
JCOP V2.4.1 based on independent, third party specifications, i.e. by Sun Microsystems,
the Global Platform consortium, the International Organization for Standards (ISO), EMV
(Europay, MasterCard and VISA) and others. JCOP V2.4.1 family based on the SmartMX
family which is manufactured in most advanced CMOS 0.14 μm 5 metal layer technology
is positioned to service high volume, single- and multi-application markets such as
eGovernment e.g. Smart Passport, banking/finance, mobile communications, public
transportation, pay TV, conditional access, network access and digital rights
management.
The Java Card, GlobalPlatform, EMV and ISO industry standards together ensure
application interpretability for card issuers as well as application providers. By adhering
not just to the standards themselves, but also to their spirit as evidenced in numerous
heritage applications, JCOP V2.4.1 ensures large interpretability with third party applets
as well as all existing smart card infrastructures. With JCOP V2.4.1 the promise of
multi-sourcing any component in smart card solutions becomes true. Even in existing
infrastructures, JCOP V2.4.1 equipped with proper applications can substitute any
existing smart card.
Within its targeted segments, the new JCOP V2.4.1 platform on SmartMX is the most
advanced solution available. It is combining standard interfaces as defined in Java
Card 2.2.2 (see Ref. 1), GlobalPlatform Card Specification 2.1.1 (see Ref. 2) and powerful
cryptographic capabilities by using co-processors for public and secret key encryption
supporting RSA, ECC and Triple-DES, within the high security, ultra low power,
performance optimized design concept of NXP Semiconductors' handshaking technology.
The platform supports class “C”, “B” and “A” voltage ranges (1.62 to 5.5 V) as required by
application standards such as 3G Mobile Communication (3GPP) and the credit/debit
card standard (EMV).
For further details on JCOP V2.4.1 platform features and specifications supported by this
product refer to Section 3.
The Administrator manual describes JCOP for the administrator of a JCOP card or secure
element. This means it explains the pre-personalisation process and its specific
commands.
The User manual describes JCOP for the applet developer. It outlines the features
available through the Java Card API. Also it explains any additional functionality at the
Java layer. Also, this User manual contains the information on how to order JCOP
products
The Hardware data sheet explains the details of the JCOP product from a hardware point
of view. This means it gives figures like pinning diagram and power consumption.
2. Block diagram
Application
MIFARE
Applets
layer
1 KB/4 KB
System classes emulation[3]
(incl. MIFARE
Applet Transaction I/O Network Other Security)
management management communication services
Memory A
Hardware layer
3.2 GlobalPlatform
JCOP V2.4.1 meets Global Platform specification as defined in Ref. 2 and Ref. 3.
• BAC, Basic Access Control according to ICAO 9303 (see Ref. 10 and Ref. 11)
• EAC, Extended Access Control according to BSI TR03110 V1.1 (see Ref. 12)
• Fingerprint Biometric Matching on Card
• Digital Signature according to PKCS#11, IEC/CEN 14980
• European Citizen Card based on IEC/CEN 15480
• Various eID applications based on national specifications
In order to increase performance of the applications where retrieval of large data sets has
to be completed as fast as possible, NXP Semiconductors is introducing BAC Accelerator
API. For more details refer to JCOP V2.4.1 Administrator and User manual.
3.4.2 EMV
EMV contactless communication is supported as defined in Ref. 5, Ref. 6, Ref. 7, Ref. 8
and Ref. 9. JCOP V2.4.1 supports all relevant security guidelines for the implementation
of EMV applets
Additionally, in combination with applets running under JCOP V2.4.1, the operating
system ensures flexible support for different authentication mechanisms and
implementations of payment options in combination with the eGovernment and banking
applets.
More details about the JCOPX API can be found in JCOP V2.4.1 User Manual.
5. Supported interfaces
JCOP V2.4.1 supports following communication interfaces
Contact mode: T=0 and T=1 according to ISO/IEC 7816 with 3.5712 MHz following
communication speeds are supported:
9600 bit/s [default]
19200 bit/s
38400 bit/s
57600 bit/s
115200 bit/s
223200 bit/s
Contactless mode: T=CL according to ISO/IEC 14443 Type A with following
communication speeds.
106 kbit/s
212 kbit/s
424 kbit/s
6. Memory
With this HW platform it is possible to have products in contactless or dual interface mode.
8. Ordering information
Jabcccxdd(d)/mvsrrffo
The ’J’ is a constant, all other letters are variables, which are explained in the following
Table 2.
[1] Refer also to JCOP v2.4.1 Administrator manual, Section 8 “Customer's type submission by using Order Entry Form”.
[2] x = G, C, or other according the COP V2.4.1 type classification see the JCOP v2.4.1 Administrator manual.
[1] To configure JCOP V2.4.1 to be application backward compatible contact NXP Semiconductors Customer Application Support (CAS)
[2] Further information on available EEPROM size for each product refer to the Section 6.1
Note that NXP Semiconductors can provide up to 50 modules and up to 5 cards free of
charge. Larger quantities have to be ordered separately. Valid NDA has to be in place
before samples are shipped.
All products ordered from NXP Semiconductors Stock will have same product type, 12NC
number, transport and authentication key.
Contact your local NXP Semiconductors representative for further information on OEF
availability.
8.5.2 Creating and ordering custom products with customer applets in the ROM
mask
It is possible to include customer applets in the free ROM space of the JCOP V2.4.1.
Customer will have to prepare, test and verify applet functionality on the generic
JCOP V2.4.1 sample.
Product type creation and submission of the applet is enabled through the NXP
Semiconductors Order Entry Form for JCOP V2.4.1.
Contact your local NXP Semiconductors representative for further information on OEF
availability.
Authentication key can be used for verification of the JCOP V2.4.1 authenticity during the
pre-personalization.
Customer will need at least the Transport Key for not pre-personalized samples of
JCOP V2.4.1.
More details about transport and authentication key and information how to order them
can be found in JCOP V2.4.1 User Manual.
9. Security certifications
Following security certificates apply for JCOP V2.4.1
10. Abbreviations
Table 6. Abbreviations JCOP
Acronym Description
ACM Access Condition Matrix
APDU Application Protocol Data Unit as defined in ISO/IEC 7816
CRC Cyclic redundancy check
DES Data Encryption Standard
EEPROM Electrically Erasable Programmable Read Only Memory
KB 1024 bytes
RAM Random Access Memory
ROM Read Only Memory
11. References
[1] Sun Microsystems: Java Card 2.2.1 http://java.sun.com/products/javacard
[2] Global Platform Consortium: GlobalPlatform Card Specification 2.1.1, March 2003
http://www.globalplatform.org/
[3] GlobalPlatform Consortium: GlobalPlatform; Card Specification 2.1.1 Amendment A,
March 2004
[4] Visa International: Visa GlobalPlatform 2.1.1 Card Implementation Requirements
Version 2.0; Effective: July 2007
[5] Visa GlobalPlatform 2.1.1 Card Implementation Requirements Configuration 1, 2
and 3 (“VGPCIR 1", “VGPCIR 2", “VGPCIR3”) version 1.0 dated May 2003
[6] EMV Contactless Communication Protocol Specification - V2.0, August 2007
[7] EMV Contactless Communication Protocol Specification V2.0, List of Changes,
August 03, 2007
[8] EMVCo Contactless Communication Protocol Specification replaces the PayPass -
ISO/IEC 14443 Application Note #4, March 31, 2006
[9] PayPass - ISO/IEC 14443 Implementation Specification, Version 1.1 - March 31,
2006
[10] Machine Readable Travel Documents Technical Report, Development of a Logical
Data Structure - LDS, For Optional Capacity Expansion Technologies, Revision -1.7,
published by authority of the secretary general, International Civil Aviation
Organization, LDS 1.7, 2004-05-18
[11] Machine Readable Passport - Volume 2 Specifications for Electronically Enabled
Passports with Biometric Identification Capabilities, Sixth edition, published by
authority of the secretary general, International Civil Aviation Organization, 2006
[12] German Federal Office for Information Security (BSI): “Technical Guideline
TR03110: Advanced Security Mechanisms for Machine Readable Travel Documents
- Extended Access Control (EAC)”, Version 1.1
[13] Java CardTM Technology for Smart Cards, Zhiqun Chen, ISBN 0-201-70329-7
[1] Please consult the most recently issued document before initiating or completing a design.
[2] The term ‘short data sheet’ is explained in section “Definitions”.
[3] The product status of device(s) described in this document may have changed since this document was published and may differ in case of multiple devices. The latest product status
information is available on the Internet at URL http://www.nxp.com.
13.2 Definitions damage. NXP Semiconductors accepts no liability for inclusion and/or use of
NXP Semiconductors products in such equipment or applications and
therefore such inclusion and/or use is at the customer’s own risk.
Draft — The document is a draft version only. The content is still under
internal review and subject to formal approval, which may result in Applications — Applications that are described herein for any of these
modifications or additions. NXP Semiconductors does not give any products are for illustrative purposes only. NXP Semiconductors makes no
representations or warranties as to the accuracy or completeness of representation or warranty that such applications will be suitable for the
information included herein and shall have no liability for the consequences of specified use without further testing or modification.
use of such information. Limiting values — Stress above one or more limiting values (as defined in
Short data sheet — A short data sheet is an extract from a full data sheet the Absolute Maximum Ratings System of IEC 60134) may cause permanent
with the same product type number(s) and title. A short data sheet is intended damage to the device. Limiting values are stress ratings only and operation of
for quick reference only and should not be relied upon to contain detailed and the device at these or any other conditions above those given in the
full information. For detailed and full information see the relevant full data Characteristics sections of this document is not implied. Exposure to limiting
sheet, which is available on request via the local NXP Semiconductors sales values for extended periods may affect device reliability.
office. In case of any inconsistency or conflict with the short data sheet, the Terms and conditions of sale — NXP Semiconductors products are sold
full data sheet shall prevail. subject to the general terms and conditions of commercial sale, as published
at http://www.nxp.com/profile/terms, including those pertaining to warranty,
intellectual property rights infringement and limitation of liability, unless
13.3 Disclaimers explicitly otherwise agreed to in writing by NXP Semiconductors. In case of
any inconsistency or conflict between information in this document and such
General — Information in this document is believed to be accurate and terms and conditions, the latter will prevail.
reliable. However, NXP Semiconductors does not give any representations or
No offer to sell or license — Nothing in this document may be interpreted or
warranties, expressed or implied, as to the accuracy or completeness of such
construed as an offer to sell products that is open for acceptance or the grant,
information and shall have no liability for the consequences of use of such
conveyance or implication of any license under any copyrights, patents or
information.
other industrial or intellectual property rights.
Right to make changes — NXP Semiconductors reserves the right to make
Quick reference data — The Quick reference data is an extract of the
changes to information published in this document, including without
product data given in the Limiting values and Characteristics sections of this
limitation specifications and product descriptions, at any time and without
document, and as such is not complete, exhaustive or legally binding.
notice. This document supersedes and replaces all information supplied prior
to the publication hereof.
Suitability for use — NXP Semiconductors products are not designed, 13.4 Trademarks
authorized or warranted to be suitable for use in medical, military, aircraft,
space or life support equipment, nor in applications where failure or Notice: All referenced brands, product names, service names and trademarks
malfunction of an NXP Semiconductors product can reasonably be expected are the property of their respective owners.
to result in personal injury, death or severe property or environmental FabKey — is a trademark of NXP B.V.
MIFARE — is a trademark of NXP B.V.
15. Tables
Table 1. Memory Maps for different configurations . . . . .6 Table 6. JCOP V2.4.1 product feature map. . . . . . . . . . 10
Table 2. JCOP Commercial Name Format . . . . . . . . . . .8 Table 7. Abbreviations JCOP. . . . . . . . . . . . . . . . . . . . . 14
Table 4. Ordering information of JCOP V2.4.1 . . . . . . . . .9 Table 8. Revision history . . . . . . . . . . . . . . . . . . . . . . . . 16
Table 5. JCOP V2.4.1 product overview . . . . . . . . . . . .10
16. Figures
Fig 1. Block diagram of all JCOP V2.4.1 products. . . . . .2
17. Contents
1 General description . . . . . . . . . . . . . . . . . . . . . . 1 8.4.2 Ordering generic products through Order Entry
2 Block diagram . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Form. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
3 Specifications supported with JCOP V2.4.1 . . 3 8.5 Ordering JCOP V2.4.1 custom products . . . . 12
8.5.1 Ordering custom products created by NXP
3.1 Java Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Semiconductors . . . . . . . . . . . . . . . . . . . . . . . 12
3.2 GlobalPlatform . . . . . . . . . . . . . . . . . . . . . . . . . 3
8.5.2 Creating and ordering custom products with
3.3 Supported eGovernment specifications and
customer applets in the ROM mask . . . . . . . . 12
applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
8.6 Ordering JCOP V2.4.1 support items . . . . . . 12
3.4 Supported banking specifications . . . . . . . . . . . 3
8.6.1 JCOP V2.4.1 transport and authentication
3.4.1 VISA International. . . . . . . . . . . . . . . . . . . . . . . 3
keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
3.4.2 EMV . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
8.6.2 JCOP V2.4.1 tools . . . . . . . . . . . . . . . . . . . . . 12
3.5 Specifications for transportation and ticketing . 4
9 Security certifications. . . . . . . . . . . . . . . . . . . 13
4 Additional JCOP V2.4.1 features . . . . . . . . . . . 5
4.1 JCOPX - Additional Application Programming 10 Abbreviations . . . . . . . . . . . . . . . . . . . . . . . . . 14
Interface (APIs) features. . . . . . . . . . . . . . . . . . 5 11 References. . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
4.2 MIFARE emulation features . . . . . . . . . . . . . . . 5 12 Revision history . . . . . . . . . . . . . . . . . . . . . . . 16
4.3 Extended Length APDU support . . . . . . . . . . . 5 13 Legal information . . . . . . . . . . . . . . . . . . . . . . 17
4.4 Security features. . . . . . . . . . . . . . . . . . . . . . . . 5 13.1 Data sheet status . . . . . . . . . . . . . . . . . . . . . . 17
5 Supported interfaces . . . . . . . . . . . . . . . . . . . . . 6 13.2 Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
6 Memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 13.3 Disclaimers . . . . . . . . . . . . . . . . . . . . . . . . . . 17
6.1 Available memory space. . . . . . . . . . . . . . . . . . 6 13.4 Trademarks . . . . . . . . . . . . . . . . . . . . . . . . . . 17
6.2 Garbage collection . . . . . . . . . . . . . . . . . . . . . . 6 14 Contact information . . . . . . . . . . . . . . . . . . . . 17
7 Supported hardware platforms. . . . . . . . . . . . . 7 15 Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
8 Ordering information . . . . . . . . . . . . . . . . . . . . . 7 16 Figures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
8.1 JCOP V2.4.1 naming conventions . . . . . . . . . . 7 17 Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
8.2 Ordering JCOP V2.4.1 products and support
items . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
8.2.1 JCOP V2.4.1 product configurations . . . . . . . . 9
8.2.2 Available JCOP V2.4.1 products . . . . . . . . . . 10
8.3 Ordering JCOP V2.4.1 samples . . . . . . . . . . . 11
8.4 Ordering generic JCOP V2.4.1 products . . . . 11
8.4.1 Ordering generic products from NXP
Semiconductors stock . . . . . . . . . . . . . . . . . . 11
Please be aware that important notices concerning this document and the product(s)
described herein, have been included in section ‘Legal information’.