Search

A creative dynamic frequency scaling method in contactless smart card is presented for the first time. A low power magnetic field detection circuit, a simple load detection circuit, the quick load comparator and the simple clock switch scheme in the method are also presented. The test result shows that the longest communication distance is improved from 6 to 8 cm compared to the same contactless smart card (CSC) chip using the fixed frequency divided by 4 and the transaction time is saved by 18% in average, compared to the same CSC chip using the fixed frequency divided by 8.

Smart cards improve the convenience and security of any transaction. They provide tamper-proof storage of user and account identity. Multifunction cards are used to manage network system access, store value and other data. The cards carry personal account, credit and buying-preference information and thus, security becomes a primary issue here. Public Key Cryptography plays an essential role in electronic banking and financial transactions. ECC is one of the best public key techniques for its small key size, high security and is suitable for secure access of smart cards. This article gives principles of public key cryptography, illustrates two cryptographic algorithms RSA and ECC. The elliptic curve cryptography is implemented on smart card using Menezes-Vanstone Elliptic Curve Cryptosystem and Nyberg-Rueppel Signature Scheme [2]. The implementation of these algorithms is done using Java Card technology. The test results are analysed and comparison about the public key sizes and security aspects are also discussed.

This paper introduces the application mode about the material weighing systems by using non-contact RF IC Card, designs the storage mode of the IC card and some key program for reading information from handset IC card.

The passenger flow in the western division of Mumbai Suburban Railway system is multiplying day by day. The existing ticketing system is causing a considerable increase in the travel time due to a major drawback- „long queues‟, which absorbs a significant portion of the travelling time. On an average, a commuter spends around 15 minutes in the queue at the suburban booking office windows of Mumbai. In this study we aim to explain the use of mobile services by looking at an area where it has been quite successful; that is, mobile ticketing in public transportation. Firstly, this paper provides a brief glance at ATVMs (Automatic Ticket Vending Machines) and (CVM) Coupon Validating Machines; technologies which are already implemented in the Mumbai Suburban Railways, along with a statistical insight of its drawbacks. Later it provides an insight into our proposed technology ATVMS (Automatic Ticket Vending via Messaging Service) which uses SMS (Short Messaging Service) as a medium to issue tickets. We provide a comprehensive description of our proposed architecture models along with the possible hurdles in our endeavour, and also real time solutions to it. The scope of this paper is particularly for the „Mumbai Suburban Railways‟ (MSR) where cost effectiveness is of paramount importance. The challenge was to design a system that would be least costly, as MSR is massively used by middle class people who cannot afford even the slightest of increase in the ticket price. Hence something beyond NFC (Near Field Communication) and Automated Fare Collection (AFC) system (through contactless smart card technology) was needed. The concept and implementation of ATVMS put forth by the authors is completely “new and original”.

IC(Integrated circuits)card, generally be named smard card, embedded MPU(Micro Processor Unit) of small-size, memory, EEPROM, Card Operating System(COS) and security algorithm. The IC card is used in almost all industry such as a finance(credit, bank, stock etc.), a traffic, a communication, a medical, a electronic passport, a membership management and etc. Recently, a application field of IC card is on the increase by method for payments of T-commerce, as T-commerce is becoming a new growth engine of the broadcating industry by trend of broadcasting and telecommunication convergence, smart mechanization of TV. For example, we can pay in IC credit card(or IC cash card) on T-Commerce. or we can be provided TV banking service in IC cash card such as ATM. However, so far, T-commerce payment services have weakness in security such as storage and disclosure of card information as well as dropping sharply about custom ease because of taking advantage of card information input method using remote control. To solve this problem, This paper developed processing payment module for implementing TV electronic payment system using IC credit card payment standard, EMV.

The elevator smart security system provides a good method to access the elevator car buttons. It uses contactless smart card to active the car buttons. Only after brushing the authorized card, the car buttons can be selected, so the passenger can take the elevator to his home floor. Visitor can take the elevator via a visitor automatic controller not using card.

A building security management system based on single board computer is currently under development. In this paper, a part of the system which is an automatic door access system using contactless smart card for identification is discussed. Running test shows that the system is working as expected. The system can identify multiple users each with different card. More specific access such as access by day, hour, even minute can be implemented. Alarm is used as indicator if the door is unlocked or any forced intrusion is happening. The corresponding system is going to be integrated in a building security management system to provide safer work environment.

The paper presents a contactless mobile payment method based on security TF card and NFC technology, with which we can use the security TF card, instead of a special SIM card that support SWP protocol, as a security module to store the user’s important information (e.g. transaction data) in mobile payment. And because security TF card can be distributed by non-telecom operators, the method can obtain a more extensive support by units and institutions other than telecom operators. then it is meaningful to the development of NFC technology.

Microeconomic optimisation of scheduled public transport operations has traditionally focused on finding optimal values for the frequency of service, capacity of vehicles, number of lines and distance between stops. In addition, however, there exist other elements in the system that present a trade-off between the interests of users and operators that have not received attention in the literature, such as the optimal selection of a fare payment system and a designed running speed (i.e., the cruising speed that buses maintain in between two consecutive stops). Alternative fare payment methods (e.g., on-board and off-board, payment by cash, magnetic strip or smart card) have different boarding times and capital costs, with the more efficient systems such as a contactless smart card imposing higher amounts of capital investment. Based on empirical data from several Bus Rapid Transit systems around the world, we also find that there is a positive relationship between infrastructure cost per kilometre and commercial speed (including stops), achieved by the buses, which we further postulate as a linear relationship between infrastructure investment and running speed. Given this context, we develop a microeconomic model for the operation of a bus corridor that minimises total cost (users and operator) and has five decision variables: frequency, capacity of vehicles, station spacing, fare payment system and running speed, thus extending the traditional framework. Congestion, induced by bus frequency, plays an important role in the design of the system, as queues develop behind high demand bus stops when the frequency is high. We show that (i) an off-board fare payment system is the most cost effective in the majority of circumstances; (ii) bus congestion results in decreased frequency while fare and bus capacity increase, and (iii) the optimal running speed grows with the logarithm of demand.

Distance bounding is often proposed as a countermeasure to relay attacks and distance fraud in RFID proximity identification systems. Although several distance-bounding protocols have been proposed the security of these proposals are dependent on the underlying communication channel. Conventional communication channels have been shown to be inappropriate for implementing distance bounding, as these channels introduce latency that can be exploited to obscure attempted attacks. Distance-bounding channels for RFID tokens have been proposed but have failed to address distance fraud or have not been practically implemented in an RFID environment. This paper describes a near-field, bit-exchange channel design that minimizes latency and allows for more secure distance-bounding measurements, while still allowing for a resource-constrained prover. Results from a proof-of-concept implementation is also presented, which illustrates that a channel that is resistant to both relay attacks and distance fraud is feasible in current RFID systems.

This study developed a digital security device which power is on/off by the RFID card. This device is based on the wireless data transmit/receive circuits, built in RS-232C chip and applied to computer and other digital devices. We can check whether this device is operated or not by connecting the LED. In this system, 13.56MHz frequency circuit supplies power with ID card, and DC inputs check the proximity operating distance of the card field for verifying the existence of a card. The security level of this system is much stronger than that of a compared system[13]. Anyone cannot use the system without RFID card. All illegal access is prevented except for authorized path.

In the face of the expanding Internet and an ever-growing number of threats, today's society is becoming more geared towards greater security and protection of privacy and personal information. Smart cards provide protection for information at the hardware level, however, smart cards are designed for use with a single specific application. In this paper we introduce the concept of utilising a single smart card with multiple applications. Such a scheme would, however, increase the reward of an attack on the smart card due to the amount of information stored on a smart card. This paper proposes an architecture to allow a single smart card to be used in a dynamic multiple application environment. In conjunction with the architecture, a protocol messaging scheme is provided to protect all information communicated between the smart card and an application through the use of one-time passwords, whilst maintaining the privacy of one's personal information.

AMR(Automatic Meter Reading), which means that it reads the meter of electricity, gas, or water, etc at a remote place automatically through wired or wireless communication, has been studied in terms of Power Line Communication method and Local Area Wireless Communication method, etc. In this paper, we designed and implemented JCA(Java Card for AMR) capable of AMR, which is based on java Card technology indispensable to the ubiquitous world. In this paper, JCA follows standard transactional procedures offered by power supply company and manages power usage log and billing data, and is designed in order to satisfy EMV multi-functional specifications. Because JCA is a multi-functional smart card capable of post-issuance applets as an open platform, it is installed into other applications of affiliated concerns as well as credit card and traffic card applications. Not only the proposed JCA is a low cost system, compared to other AMR systems, but is capable of paying rates in advance or later by applying authentication and security function of java Card. In addition the proposed JCA system can create value added services such as affiliated services with corporate alliance.

This article gives brief introduction to the security mechanisms used in smart card technology. Firstly we introduce the properties of contact and contactless smart cards; then we give the anatomy of smart card hardware and the popular security features implemented. These security features are arranged in the attack and countermeasure pairs, so it is easier for the readers to understand the security issues in the smart card technology.

Smart card technology has evolved over the last few years following notable improvements in the underlying hardware and software platforms. Advanced smart card microprocessors, along with robust smart card operating systems and platforms, contribute towards a broader acceptance of the technology. These improvements have eliminated some of the traditional smart card security concerns. However, researchers and hackers are constantly looking for new issues and vulnerabilities. In this article we provide a brief overview of the main smart card attack categories and their corresponding countermeasures. We also provide examples of well-documented attacks on systems that use smart card technology (e.g. satellite TV, EMV, proximity identification) in an attempt to highlight the importance of the security of the overall system rather than just the smart card.

In this paper, a prototype of an electronic patient record management system using smart cards is described. An application using visual basic was developed, a database using Microsoft access was built, the visual-basic-based application was then interfaced to the database. An interface module that allows any person with no programming knowledge to store easily, required information on a smart card was also developed. The application was then interfaced to a smartcard reader. With this system, relevant patient information including, but not limited to allergies, blood-group, and past operations can be retrieved from the smart card.

Following the introduction of ICAO-compliant electronic passports, electronic national identity cards are now being planned and deployed on a large scale in Europe as well as worldwide. Whereas electronic passports contain a contactless chip in the booklet, electronic ID cards are usually plastic cards the size of a regular ATM card, using a chip with a contactless and/or contact interface. Like the data page of a passport, an ID card is personalised with at least a serial number, a photo and the owner's name and date of birth. Some EU countries, including Austria, Belgium, Estonia, Finland, Italy, the Netherlands, Spain, and Sweden have already started issuing electronic ID cards. Others, for example, Germany, France, and the UK, are currently drafting technical specifications for their future ID card schemes. Besides national ID cards, there are many other government and commercial eID card schemes, such as electronic health cards or chip and signature cards.

A smart card looks and feels like a simple credit card but it is actually a minicomputer without a display screen or keyboard. And due to their proliferation in corporate environments, smart cards represent a major security risk. How can you reduce that risk while still reaping their benefits? © 2008 Wiley Periodicals, Inc.

In this paper, a highly reliable embedded biometric smart card system with cryptography engine is proposed. We explain the system architecture of portable embedded biometric smart card reader to strengthen security for various consumer applications such as mobile cash card. Proposed biometric smart card system is embedded with 75 MHz 32-bit RISC, 6 channel smart card controller and advanced encryption system (AES) cryptography accelerator. It is devised to communicate with smart card with encrypted biometric data using international standard ISO-7816 and provides system peripherals such as LCD display controller and USB host interface. The proposed implementation shows a 70% performance improvement for decryption of protected biometric data compared to the software based smart card chipset and it is verified using 0.35 um CMOS process.

A multi-application smart card system consists of an issuer, service vendors and cardholders, where cardholders are recipients of smart cards (from the issuer) to be used in connection with applications offered by service vendors. Authentic post-issuance program modification is necessary for a multi-application smart card system because applications in the system are realized after the issuance of a smart card. In this paper, we propose a system where only authentic modification is possible. In the proposed system, the smart card issuer stores a unique long bitstring called PID in a smart card. The smart card is then given to the cardholder. A unique substring of the PID (subPID) is shared between the cardholder and a corresponding service vendor. Another subPID is shared between the issuer and the cardholder. During program modification, a protocol using the subPIDs, a one-way hash function and a pseudorandom number generator function verifies the identity of the parties and the authenticity of the program.

This short paper gives a combined technical-historical account of the fate of the world's most-used contactless smart card, the MIFARE Classic. The account concentrates on the years 2008 and 2009 when serious security flaws in the MIFARE Classic were unveiled. The story covers, besides the relevant technicalities, the risks of proprietary security mechanisms, the rights and morals wrt. publishing security vulnerabilities, and eventually the legal confrontation in court.

With the rapid development of Internet technology, E-commerce is increasingly accepted by the people. E-commerce transactions via the Internet to achieve a convenient, with ubiquitous business features. But such business model by the trading range of restrictions, has the de ficiency of movement flexibility. It needs to break the traditional business model, and establish a new service model to provide their own value, and to provide users more comfortable and convenient service. According to the principles of system design and system architecture, we put forward a set of electronic payment channel for mobile services, architecture design, implementation and applications in this paper. The full technical program integrated application SWP patch card, dual SIM card interface chip, dual-core dual-interface SIM card, chip card, to achieve a set of efficient, safe, support multiple devices at the same time, to pay more than a new wireless with no physical card-based payment system.

This work proposes a methodology for the rigorous development of Java Card smart card applications, using the B Method. Its main feature is to abstract the particularities of Java Card and smart card aware applications from the specifier as much as possible. In the proposed approach, the specification of the aplication logic needs not be preoccupied with the specific aspects of the Java Card platform (in particular, communication between the card acceptance device and the smart card itself). Platform-specific code can then be automatically generated during the refinement and code generation process. An interesting side-effect of this approach is that the specification may be reused with any other platform of implementation.

Since the turn of the century, smart card technology has pushed its borders both on the high end to integrate new functionalities (e.g., networking) and on the low end to adapt to new constrained environments (e.g., radio-frequency identification). This has required changes in the hardware, software and cryptography underpinning smart cards. This special issue covers some of these developments in depth. © 2007 Elsevier B.V. All rights reserved.

This paper is based on the analysis for theory and key technologies of contact communication, contactless communication card and STK menu, and proposes complete software and hardware solution for achieving convenience and secure mobile payment system on SIM card.

EMV chip based payments cards have been used to combat fraudulent transactions such as counterfeit, lost and stolen cards. Despite of improved security measures payment cards are still not immune to some known threats and vulnerabilities such as card cloning, eavesdropping at POS and shoulder sniffing. A comprehensive study of the all possible threats and present security measures in payments cards is presented. This paper describes how fingerprint can be used for securing payment cards and further enhance the security of EMV environment. Comparison with presently practiced and implemented CHIP and PIN methods is shown elaborating the enhancing security and transaction time reduction by biometric cardholder authentication. Different methods of implementing fingerprint security in payment cards are provided. Major attacks on fingerprinting authentication are discussed and mitigation strategy is presented.

Side-channel analysis is becoming a major threat to the security chips of smart cards, including power analysis, electromagnetic analysis and fault injection. Based on software hardware co-design, we implemented a side-channel analysis platform covering CPA/DPA/TA/CA methods, which could effectively reveal the secret keys on security chips. Our work integrates power analysis, electromagnetic analysis and fault injection into single platform, which contains regular international cryptographic algorithm of AES/3DES/ RSA/ECC and China standard cryptographic algorithm of SM2/SM3/SM4. And a novel UML model for software implementation is proposed. Six smart card products with countermeasures have been analyzed on our platform, and all keys have been revealed successfully. Particularly, the key of a contactless smart card product was revealed by 350,000 power traces, and compared to the foreign report out of 1,000,000 power traces, we have about 65% increase on efficiency of revealing keys.

Existing magnetic cards adopt plain text to store confidential information, thus being vulnerable to an untrusted credit card reader or a skimming device. To tackle the problem, researchers have proposed several new techniques such as integrated circuit card (IC card) and mobile wallet applications [1]; however, none of them can support existing magnetic card readers thereby facing backwards compatibility issue.

E-ticketing system based on contactless smart card like RFID tags which are excellent alternative to paper ticketing system makes public transportation system easy to handle both in terms of accuracy and efficiency. This system is capable of solving three major issues of the existing system: Mutual authentication of E-ticket with the bus terminal and creation of travel record without any digital trace of user called Privacy preservation of user, bus needs to maintain the permanent internet connection to the backend which is practically difficult in real-world transportation system because of network unavailability in most of the rural area, blacklisting the users without contacting the backend database. Existing systems are not considering these issues which directly influence the efficiency and security of transportation system. RFID tag is vulnerable because anyone can read it without authorization. We have implemented certification-based mutual authentication algorithm and establishing the security channel before transmitting the confidential data between RFID tag and bus terminal for solving these issues. This system also gives travel history view option, even though it handles user in terms of pseudonym. We implemented an advanced e-ticketing system for the next generation public transportation using the low cost device like Raspberry pie and a RFID module, which make the system affordable for both transportation agent and user. The system gives prior importance on security and preserving privacy of the user.

Radio Frequency IDentification (RFID) technology has emerged strongly lately, and has entered our daily activities. As public transportation ticketing, ID card identifying (as driving licenses, passports and credit cards). All these applications and many others are all employing the electromagnetic characteristics to rapidly expand the exchange of data between any of the above items and the concerned server. There are two types of RFID devices, the smartcards, which are contactless cards that are wireless with inductive interface that is compliant with the International Organization for Standardization (as ISO 14443 or ISO 15693) standards, and the RFID tags which are compatible with high frequency (HF) or ultrahigh frequency (UHF) interface which is compliant to the ISO 18000 standard which now includes the Electronic Product Code (EPC) Global impact. RFID tags store valuable information and can simply be subjected to an illegal reading, tempering with its contents and possible other uses, which can lead to many unknown activities. RFID tags are similarly vulnerable to many different types of relay attacks. In this article, we present a probabilistic approach to check and verify the flexibility of the RFID protocols against possible relay attacks and its countermeasure, channels and application specific parameters are also considered in the analysis.

Near Field Communication (NFC) is a technology widely used for security-critical applications like access control or payment systems. Many of these systems rely on the security assumption that the card has to be in close proximity to communicate with the reader. We developed NFCGate, an Android application capable of relaying NFC communication between card and reader using two rooted but otherwise unmodified Android phones. This enables us to increase the distance between card and reader, eavesdrop on, and even modify the exchanged data. The application should work for any system built on top of ISO 14443-3 that is not hardened against relay attacks, and was successfully tested with a popular contactless card payment system and an electronic passport document.

Pay Wave in this paper refers to technology which provides contactless payment between the Pay Wave card and the Point of Sale (POS) Terminals. Pay Wave uses Radio Frequency Identification (RFID) Chip which is embedded in the cards for contactless payment. It can also be embedded in Smart phones, watches, key rings for the advanced use. The customer just needs to wave the card in front of the POS Terminal and the transaction will be done in less than 1/2 second. This paper analyses the requirements of Pay Wave and focuses on the advantages of this new mode of payment.

With the introduction of Host Card Emulation (HCE) in Android 4.4 KitKat the Near Field Communication (NFC) card emulation mode took a twist. On one side, HCE allows for easier development and a shorter deployment path for contactless card services on the mobile phone (e.g. payment, ticketing, loyalty cards etc.). On the other side, it introduces new security issues since it does not intrinsically involve a secure element on the mobile phone. As an example, the Cipurse open ticketing standard for public transportation, published by OSPT, implies usage of a secure element for the authentication mechanism and key storage. How can Cipurse benefit from the advantages of HCE and still provide secure authentication and encryption of transferred data? We have designed a two-factor authentication mechanism that involves usage of the Universal Integrated Circuit Card (also known as the SIM card) as the secure second-factor that allows for the implementation of the Cipurse specification as a secure HCE application. The benefit is faster execution of the Cipurse emulated card but still with feasible security for many application areas.

Smart cards are used in information technologies as portable integrated devices with data storage and data processing capabilities. As in other fields, smart card use in health systems became popular due to their increased capacity and performance. Their efficient use with easy and fast data access facilities leads to implementation particularly widespread in security systems. In this paper, a smart card based healthcare information system is developed. The system uses smart card for personal identification and transfer of health data and provides data communication via a distributed protocol which is particularly developed for this study. Two smart card software modules are implemented that run on patient and healthcare professional smart cards, respectively. In addition to personal information, general health information about the patient is also loaded to patient smart card. Health care providers use their own smart cards to be authenticated on the system and to access data on patient cards. Encryption keys and digital signature keys stored on smart cards of the system are used for secure and authenticated data communication between clients and database servers over distributed object protocol. System is developed on Java platform by using object oriented architecture and design patterns.

Near Field Communication (NFC) is opening-up completely new perspectives for the mobile communication industry. It enables contactless peer-to-peer communication, reading/writing of contactless cards and, when combined with a smart card IC, emulation of a contactless card. NFC has taken major steps towards market acceptance: ISO standards are in place for the interface and communication protocols, many leading companies in the field are promoting it within the NFC Forum, and numerous field trials are being deployed around the world. Different architectures are being considered for NFC and security mobile phone architectures. The first Philips cellular system solution integrating NFC hardware and software illustrates a successful implementation of one of these architectures.

The communications industry has spawned so many flavours of wireless - each accompanied by its own standard - that many in the sector, never mind consumers, are getting confused. The article examines the chances of success of yet another wireless networking protocol: near field communications (NFC). This very-short-range wireless standard is being talked of as a ubiquitous method of wirelessly accessing digital content and services. The technology operates over distances of a few centimetres, while combining the functions of a contactless reader, a contactless card and peer-to-peer functionality on a single chip. Unlike other wireless technologies, it relies on the device reader to provide power to the NFC chip through inductive RF coupling, thereby reducing the chip's standby power to zero, a major advantage for power-sensitive mobile devices. While compatible with currently deployed contactless card technologies, NFC complies with different standards and operates in the globally compatible and unregulated 13.56 MHz frequency range. Standardisation is a done deal, with bodies, such as the ISO (18092), the ECMA (340) and ETSI, having already ratified NFC. Its enthusiastic proponents foresee a huge potential for NFC.

Researchers at the University of Surrey have shown that the much-vaunted near-field communications systems being rolled out for contactless card transactions could possibly be hacked at the point-of-sale using inexpensive, rudimentary technology.

ISO 10202 standards have been established for the security architecture of financial transaction systems using integrated circuit cards (IC cards or smart cards). A smart card originates from an IC memory card used in the industry about 10 years ago. The main characteristics of a smart card are small size and low-power consumption. The smart card plays an important role in our proposed scheme. In this paper, we will present a smart card-based remote log-in authentication scheme for multi-server Internet environments, which can verify a single password for logging-in multiple authorized servers without using any password verification table at all. Using a smart card together with a user's preferred password, the log-in request message is transmitted securely and the verification can be performed easily. The objective of the new scheme emphasizes that any client can get service granted from multiple servers without repeating registration to every single server. Moreover, security analyses about the impersonation, replay, and off-line guessing attacks on the proposed scheme consolidate the feasibility of the scheme.

The paper presents an application developed for Java Card smart cards, with multiapplication support. Although the multiapplication support was not exemplified, the use of smart card for personal identification has some advantages, the most important beeing its security. In this paper are shown the structure of the application, various security systems, which ensure the access to a robot mainframe to only the designated people, who have rights to control the specified robot.

Product traceability during its development phases was a preoccupation of engineers and people who made researches in robotics domain. Today, with the help of integrated technology, chips can be attached to units from their starting phases. Therefore, big assembly lines can be decentralized; therefore they do not need to communicate in every moment with a central database. In this paper it is presented a potential integrated system, based on programmable chips and reader in every important point of an assembly line. It is also proposed a simulation model, based on contactless smart cards, based on the fact that a smart card chip can be assimilated with a programmable chip.

In recent, as a typical example of RFID, the contactless IC card is widely used in traffic, access control system and so forth. And its use becomes a general tendency more and more because of the development of RF technology and improvement of requirement for user convenience. This paper describes the hardware module to process embedded contactless protocol for implementation contactless IC card. And the hardware module consists of analog circuits and specific digital logic circuits. This paper also describes more effective design method of contactless IC card, which method separates into analog circuit parts, digital logic circuit part, and software parts according to the role of the design parts.

This paper is on research of the Smart IC Card, stressing the research on problems of information security technology. The paper is mainly about the components of the chip SLE4442 storage and the function of each component. It provides a brief introduction to the working mode of SLE4442, describes the components of operation directions, and lists the introductions. In securing analysis, the paper seeks to detail the security measures adopted by SLE4442, indicating the possible forms of attack to enable the determination of the security technologies to be utilized.

The security technology of smart cards applied in an information system is addressed in this paper. Smart card integrated circuit (IC) security profiles are expounded upon in detail, in which digital signature and cryptographic protection are properly used. Smart card data security and application security are analyzed.