FlexiPKI

1
FlexiPKI

• Smart Card Technology in FlexiPKI
• TU Darmstadt
• Michael Hartmann

2
Agenda
System StructureApplicationsOpen Card
PlatformJava CardOpen PlatformDisadvantages
Work in Progress
3
System Structure
Service
Application
Driver
Smart Card Application
4
Application Level
CDC-Provider
Currently available - PKCS11 Integration -
JNI GPK4000 - JNI TCOS 2.0Coming soon -
Open Card Framework Provider
5
OCF Open Card Framework

• Java Framework for Smart Card Applications-
  Encapsulation of Smart Card and Terminal
  Commands- CardTerminal Implementations-
  CardService Implementations- ISO 7816
  oriented- many defined Interfaces-
  interoperable

6
OCF Logical View
7
OCF Currently Available
CardTerminal - KOBILB1CardTerminal -
KOBILB1ProCardTerminal
CardService - TCOS12 - TCOS20
8
Java Card - Standards
Java Card API - API for On Card
Applications - Transactions - Inter Applet
Communication - Firewall Concept
Java Card API - API for On Card
Applications - Transactions - Inter Applet
Communication - Firewall Concept
Open Platform - Communication with Off Card
Entities - Secure Download of Applets -
Secure Channels for Communication
9
Java Card - Structure
Applets have a unique AID
10
Open Platform - Concept
Card Issuer
Application Provider
Applet 1
Application Provider
Security Domain
Applet 2
11
Open Platform - Structure
JCRE
Java Card API
OP API
OP Card Manager
Java Card Virtual Machine
Smartcard
12
Disadvantages
Open Platform - Delegated Management only
optional - DAP uses only Triple DES and RSA
1024Java Card - No dynamic JCA like provider
concept - Cryptographic functions hardwired in
JCRE
13
Work in Progress
Proposal for OP Standard ModificationMapping of
Flexi Concept on existing StandardsECDSA as
Java Card AppletNew Cryptographic
ComponentsJCA OCF-ProviderCard Management
SystemFormal Verification of Exchange
Protokoll
14
Thank you for your attention.
AG Prof. J.Buchmann Fachbereich Theoretische
Informatik Alexanderstr. 10 D- 64283
Darmstadt Telefon [phone] Telefax
06151/16-6036 hartmann_at_cdc.informatik.tu-darmstad
t.de http//www.informatik.tu-darmstadt/TI