Lịch sử hình thành chuẩn EMV, multi-application, SDA, DDA. | Smart Cards and EMV Michael J Ganley Agenda Introduction to smart cards Smart card infrastructure Introduction to EMV EMV Cryptography Concluding remarks Introduction to Smart Cards Introduction to smart cards Smart card infrastructure Introduction to EMV EMV Cryptography Concluding remarks What is a Smart Card? A smart card (also called a chip card or an integrated circuit card (ICC)) is a credit card sized plastic card containing a microprocessor. A Subscriber Identification Module (SIM), used in a mobile phone, is essentially a cut-down smart card. A smart card may be a contact card or a contact-less (proximity) card; some cards are of both types (combi-card); a contact card requires a card reader to allow communication with the card. A smart card application may be extremely simple (essentially a memory card, such as a phone card) or very complex (. a credit application); cards may be single application or multiple application. Smart Card Architecture RAM Wire-bonds EEPROM ROM Processor Source: ORGA Systems UK, “ORGA - Smart Cards Basics” Smart Card Memory ROM EEPROM RAM Operating System Application Data & OS Extensions OS Work Space 1000 times slower to write than RAM ROM EEPROM RAM Min Max ~3Kb ~64Kb ~128Kb ~3Kb ~1Kb ~128b Operating Systems Most smart cards, today, have proprietary operating systems. Java Card – smart card capable of running a Java program. Communicates with OS via Java Card Virtual Machine. “Write once, run anywhere” concept. Multos – proprietary OS, endorsed by MasterCard (amongst others). High levels of security (ITSEC level 6 for some chips). Demonstrates basic principle of “the higher the complexity, the lower the assurance level”. Mondex electronic purse is a Multos application. Windows for Smart Cards – MicroSoft initiative, now largely disappeared. Open Platform – “a global and open multi-industry interoperable framework”, promoted by Visa (amongst others). Smart Card Security (1) Physical Security Chip | Smart Cards and EMV Michael J Ganley Agenda Introduction to smart cards Smart card infrastructure Introduction to EMV EMV Cryptography Concluding remarks Introduction to Smart Cards Introduction to smart cards Smart card infrastructure Introduction to EMV EMV Cryptography Concluding remarks What is a Smart Card? A smart card (also called a chip card or an integrated circuit card (ICC)) is a credit card sized plastic card containing a microprocessor. A Subscriber Identification Module (SIM), used in a mobile phone, is essentially a cut-down smart card. A smart card may be a contact card or a contact-less (proximity) card; some cards are of both types (combi-card); a contact card requires a card reader to allow communication with the card. A smart card application may be extremely simple (essentially a memory card, such as a phone card) or very complex (. a credit application); cards may be single application or multiple application. Smart Card Architecture RAM .