Using PCSC

1
(No Transcript)
2
GSC-IS Phase I Testing

• James Dray
• John Wack
• Michaela Iorga
• Computer Security Division
• NIST
• July 10, 2001

3
Overview of Phase I Testing

• Tests the card-edge interface
• Ability to communicate with the card
• Cards file system (J.8, CCF)
• Access control of files

4
Test Plan

• Developed according to GSC-IS requirements
• Lays out testing steps and defines format for
  test outputs
• Specifies tests for CCC implementation
• Specifies tests for J.8 data structures
• Posted on communityzero.com

5
Initial Steps

• Developed Test Plan March, 2001
• Acquired hardware, built testing environment
• Developed testing software
• Received first cards from PRC April, 2001
• Issued first test results July, 2001

6
Testing Environment

• Windows 2000 systems with PCSC
• Combination of C and Java
• Flat reader from Infineer
• Using PCSC only as simple transport for sending
  and receiving raw APDUs

7
Using PCSC

• lReturn SCardTransmit(hCardHandle, // set by a
  call to sCardConnect
• SCARD_PCI_T0, // using
  the T0 protocol
• pbSend, // points
  to the buffer with the APDU
  
• dwSend, // the
  number of bytes to send
• NULL,
• pbRecv, // points
  to the status bytes returned
• dwRecv ) // the
  number of bytes returned

• Acts as a tunnel directly to the card
• Takes raw APDU and returns raw status bytes
• Could be replaced easily by a call to a direct
  serial port driver or any other APDU transport

8
Cards Received

• Gemplus MPCOS April
• Schlumberger Cryptoflex April
• Gemplus GPK June
• Schlumberger Payflex June
• All cards from PRC/Litton
• Testing on all 4 cards by end July

9
First Test Results

• MPCOS-EMV Smartcard
• Submitted by PRC/Litton
• Card passed all tests
• No EDCs, undefined in current spec
• Cooperation with PRC was excellent
• Posted at communityzero.com

10
Work in Progress

• IAB certification process (soon?)
• Port tests to raw serial reader (no PCSC)
• Converting more code to Java, will issue source
  code at future date
• Change tests according to revisions in next
  version of the GSC-IS (Phase I or II?)
• Phase II