MARTSOFT USB Steve C., PhD, Manager,

1
?????????????????????????????MARTSOFT USB
??????????? Steve C., PhD, Manager, ????????
MartSoft ??????
2
????

• ??MartSoft
• MartSoft ??????
• MartSoft ???????
• MartSoft ?????
• ATM IC??????????

3
MartSoft ??

• MartSoft ????????????????????????NIST???????CSE
  ???MartSoft?????????????????????MartSoft 2004
  CMVP ?????????????????????500 ???????

• ????
• CNET http//investor.news.com/Engine?Accountcne
  tPageNameNEWSREADID1028335TickerACTISOURCE
  SFM06426042004-1
• NIST http//csrc.nist.gov/cryptval/140-1/1401val
  2004.htm380
• FIPS certificate http//csrc.nist.gov/cryptval/1
  40-1/140crt/140crt380.pdf
• Atmel News http//www.atmel.com/dyn/corporate/vi
  ew_detail.asp?FileNameSmartCardSolution.html
• Atmel is among the world top 4 smart card IC
  makers
• ActivCard News http//www.activcard.ca/newsroom/
  press_releases/042604_us.html
• ActivCard is the 1 smart card system supplier
  to US DoD
• Smart Card Alliance http//www.smartcardalliance
  .org/industry_news/industry_news_item.cfm?itemID1
  300
• Many others coming

4
MartSoft ??????????? -- ?? ? ????
????
???
??CA??????? ??CA???????
5
MartSoft ??????
  ?????????     (?????????)

• ?????A-120-B V1.2
•       ??????XP/2000/2003
• ???????????
• ?????????

6
???????????

• ???
• ???IC?? (EAL4 ????????IC)
• ?????
• MartSoft ???????(FIPS ????)
• ??????, ????
• ?????????

MartSoft ???????????????????????
7
MartSoft ???????
???????
8
MartSoft ?????
9
 ??????????

• ???? MartSoft ?????????????, ?????????????????
• ????????? ????????????????????????(VPN)????,????I
  C????
• ???? ????????,????,????
• ????? MartSoft??????????????????????????????USB??
  ?????????????????(Wi-Fi)??????????
• ????? ? MartSoft Java Card ??????????????????????
  ?????????
• ?????? vs. ??USB ??? ASIC ?? ????????????,
  ????????????

10
?????????????
Best Choice!
11
IDC ???? ? 2004 ? 2006 ?,???? USB
????????????????92 ?????.
12
???? ???????ATM IC???????

• ???? ??????? - ??ATM IC?????????,???????????.
  ????, ????????ATM IC??. ???????? ATM IC?????????.
  ????????????????ATM IC???????????????????????,
  ???????????????????????????IC?????????????????????
  ????????????????????????????????????????????USB
  ????. ????????. ???USB ???????????????????????????
  ??????
• (ATM IC ? ???) ???USB????????

? ?
? ?
??? ???
USB???
13
???? ???????ATM IC???????(?)

• ATM ???????????????????????????
• ????????? - ATM??????????????????????????????????
  ??????????????????????????????
• ??ATM??????????????????????????????????ATM
  ??????????????????????????????????????????????????
  ??????????????????????
• ?????,???????
• ATM?????????????????,??????????????????????????
  ?????????????????.

14
???? ???????ATM IC???????(?)

• ????????
• ???????, ??????????????????????????????????.
  ????????????????
• ?????O2 Micro ??????????????????????
• ????????? Target ?IC??????????IC??AMEX Blue
  Card??????
• ?????????????????????????????????
• ???????????????????????,???????????
• ???????
• ??USB?????????????????????
• ????? ????????????????IC??????????????????????
  ????????????????

15
???? ???????ATM IC???????(?)

• ??
• ??????
• ????????????
• ??, ??, ??????
• ????????
• ?????
• ?????????????????????.?
• ???????????????????????
• ?????
• ??USB ????????
• ????????????????????????????
• ???? - (?????????????????, ????? ??
• ?)?????????????????????????

16
????????? ?????
17
???

• PAUL CHEN
• PAUL_at_MARTSOFT.COM
• WWW.MARTSOFT.COM

18
Login by A Smart Token
19
Client-Side Protection
(2) Mutual Authentication
(3) One-time Session Protected, Encrypted Secure
Channel
(1) User activates the secure smart card /
token every time before use
20
Server-Side Authentication
HTTPS Secure Server
Internet
(4) SSL authentication and encryption
with Certificates, PKI calculation from the
Client token
21
Clean Sign-off, No Traces Left
22
Clean Sign-off, No Traces Left
HTTPS Secure Server
Internet
(5) Take the lock away, all SSL sessions
automatically self-destroy upon that event. No
data caching, no passwords, nor private keys
exposed. All base on FIPS-certified crypto
calculation