Search

The original inventors of the smart card more than 30 years ago envisaged it being contactless – or RFID. However, affordable contactless cards took a long time to become available. Dr Peter Harrop of analyst firm IDTechEx, which is currently researching a report called ‘Contactless Cards and Near Field Communication’, tells CTT that in spite of initial pessimism from some critics, the technology has proved itself and volumes of shipments are growing rapidly.

The smart card has a microprocessor or a memory chip embedded in a plastic card. It has been in wide use in Europe and Japan for payment, entry into buildings and computer systems, and storage and access of special types of information. In the US, despite efforts by the credit card industry, the smart card has not been nearly as widely adopted as in Europe and Japan. In this article, we will review the status of the technology and applications of the smart card. Then we will summarize various issues that hinder a wider adoption of the smart card, particularly in the US, and discuss the trends and prognosis for the adoption of the smart card in the US in the foreseeable future.

The smart card industry has the answers for many identity problems facing the world today — from corporate identity cards to the use of SIM cards in wireless LAN. But in the new and confused world of ‘smart passports’ the industry has been shown to be lacking in recent months.

Smart cards offer an excellent means for providing the security required for network access, and for implementing the mechanisms needed for making payments, placing orders and exchanging confidential information over the Internet. It is true that security measures such as PKI can be implemented on PCs, but the fact that private keys can be kept on the card and never stored on the PC or transmitted across the network, gives the smart card the edge on security. The secret keys for encryption/decryption and for digital signature generation cannot be traced by a hacker.

Credit cards with computer chips in them, which allow users to give merchants detailed financial information without contacting central banks, are described. The SuperSmart Card is a powerful credit-card-sized computer that fits into a wallet and promises to take over many of the jobs of transaction-support systems, redistributing vast amounts of data-processing work. The card's electronics, user-friendly features, and security features are examined. Field-testing in Japan, which began in Dec.1986, is discussed. >

The smart card is a plastic card with the dimensions of an ordinary credit card, but incorporating an integrated circuit with memory and processing capabilities. These capabilities open many new areas of application: at the technological level the issues of authenticity and security; at the sociological level, that of a ‘cashless’ society. The technology involved in smart cards, including data security issues, is presented here.

In this paper, a designing method of RFID (Radio Frequency Identification) card reading instrument is introduced in detail, and the hardware structure and principle are expounded. By using HY-502 which is a RFID module and LPC2368 which is an ARM core controller, the RFID card information is received and translated to computer by RS232 or USB interface. With the corresponding computer application and database, the card information could be achieved and displayed. The instrument has good prospects in schools, transport, supermarkets, logistics and other fields.

The idea of an individual portable medical file is an old one which recent technology in microprocesser on cards has made possible. The required features of such a card are: confidentiality, dependability, multiple usage.

The Data Protection System-800/12 (DPS-800/12) is a dial-up security device that provides identification and authentication for a host system. The DPS-800/12 consists of a Controller Card, an optional Printer/Log Card, and from one to twelve Port Cards. The Controller Card uses a microprocessor and contains the DPS-800/12 system program. This card controls the Printer/Log Card and the Port Cards. The Printer/Log Card drives the printer in order to print the audit records. Each Port Card controls a communication line between a modem and the respective host. This report documents the findings of the evaluation. Keywords: Computer security; Computer hardware; NCSC; TCSEC; IA Test and evaluation; Identification authentication; DPS-800/12.

Nowadays, mobile banking becomes a popular tool which consumers can conduct financial transactions such as shopping, monitoring accounts balance, transferring funds and other payments. Consumers dependency on mobile needs, make people take a little bit more interest in mobile banking. The use of the one-time password which is sent to the user mobile phone by short message service (SMS) is a vulnerability which we want to solve with proposing a new scheme called S-Mbank. We replace the authentication using the one-time password with the contactless smart card to prevent attackers to use the unencrypted message which is sent to the user's mobile phone. Moreover, it deals vulnerability of spoofer to send an SMS pretending as a bank's server. The contactless smart card is proposed because of its flexibility and security which easier to bring in our wallet than the common passcode generators. The replacement of SMS-based authentication with contactless smart card removes the vulnerability of unauthorized users to act as a legitimate user to exploit the mobile banking user's account. Besides that, we use public-private key pair and PIN to provide two factors authentication and mutual authentication. We use signcryption scheme to provide the efficiency of the computation. Pair based text authentication is also proposed for the login process as a solution to shoulder-surfing attack. We use Scyther tool to analyze the security of authentication protocol in S-Mbank scheme. From the proposed scheme, we are able to provide more security protection for mobile banking service., 6 pages

Remote user authentication is important to identify whether communicating parties are genuine and trust- worthy using the password and the smart card between a login user and a remote server. A number of password-based authentication schemes using smart cards have been proposed in recent years. We find that two most recent password-based authentication schemes (Hsiang and Shih 2009, Chen and Huang 2010) assume that the attacker cannot extract the secret information of the smart card. However, in reality, the authors in (Kocher et al. 1999 and Messerges et al. 2002) show that the secrets stored in the card can be extracted by monitoring its power consumption. Therefore, these schemes fail to resist smart card security breach. As the main contribution of this paper, a robust remote user authentication scheme against smart card security breach is presented, while keeping the merits of the well-known smart card based authentication schemes. http://dx.doi.org/10.5755/j01.itc.40.3.632

Plentiful studies have discussed the potential applications of contactless smart card from understanding interchange patterns to transit network analysis and user classifications. However, the incomplete and anonymous nature of the smart card data inherently limit the interpretations and understanding of thefindings, whichfurther limit planning implementations. Geodemographics, as ‘an analysis of people by where they live’, can be utilised as a promising supplement to provide contextual information to transport planning. This paper develops a methodological framework that conjointly integrates personalised smart card data with open geodemographics so as to pursue a better understanding of the traveller’s behaviours. It adopts a text mining technology, latent Dirichlet allocation modelling, to extract the transit patterns from the personalised smart card data and then use the open geodemographics derived from census data to enhance the interpretation of the patterns. Moreover, it presents night tube as an example to illustrate its potential usefulness in public transport planning.

In this paper a crypto processor for contactless smart cards is presented. The proposed architecture is based on DES algorithm standard. The introduction in the proposed system a power management unit results in a significant power consumption reduction. The use of feedback design techniques reduces the required silicon area. The overall system throughput satisfies the contactless smart card data rate demands. The proposed system operates in 55 MHz frequency with maximum data rate 42.5 Mbps. A 50% power reduction, in comparison with conventional implementations, has estimated mainly due to the switching activity and the total memory accesses reduction. Additional techniques for silicon area reduction are also presented.