Smart Card Technologies and Applications

328 Pages·2004·7.6 MB·English

by  Jean-Jacques Quisquater

SMART CARD RESEARCH AND
ADVANCED APPLICATIONS VI
IFIP – The International Federation for Information Processing
IFIP was founded in 1960 under the auspices of UNESCO, following the First World Computer
Congress held in Paris the previous year. An umbrella organization for societies working in
information processing, IFIP’s aim is two-fold: to support information processing within its
member countries and to encourage technology transfer to developing nations. As its mission
statement clearly states,
IFIP’s mission is to be the leading, truly international, apolitical organization
which encourages and assists in the development, exploitation and application
of information technology for the benefit of all people.
IFIP is a non-profit making organization, run almost solely by 2500 volunteers. It operates
through a number of technical committees, which organize events and publications. IFIP’s
events range from an internationalcongress to local seminars, but the most importantare:
The IFIP World Computer Congress, heldevery second year;
Open conferences;
Workingconferences.
The flagship event is the IFIP World Computer Congress, at whichboth invited and contributed
papers are presented. Contributed papers are rigorously refereed and the rejection rate is high.
As with the Congress, participation in the open conferences is open to all and papers may be
invited or submitted. Again, submitted papers are stringently refereed.
The working conferences are structured differently. They are usually run by a working group and
attendance is small and by invitation only. Their purpose is to create an atmosphere conducive
to innovation and development. Refereeing is less rigorous and papers are subjected to
extensive group discussion.
Publications arising from IFIP events vary. The papers presented at the IFIP World Computer
Congress and at open conferences are published as conference proceedings, while the results of
the working conferences are often published as collections of selected and edited papers.
Any national society whose primary activity is in information may apply to become a full
member of IFIP, although full membership is restricted to one society per country. Full
members are entitled to vote at the annual General Assembly, National societies preferring a
less committed involvement may apply for associate or corresponding membership. Associate
members enjoy the same benefits as full members, but without voting rights. Corresponding
members are not represented in IFIP bodies. Affiliated membership is open to non-national
societies, and individual and honorary membership schemes are also offered.
SMART CARD RESEARCH
AND ADVANCED
APPLICATIONS VI
IFIP 18th World Computer Congress
TC8/WG8.8 & TC11/WG11.2 Sixth International Conference on
Smart Card Research and Advanced Applications (CARDIS)
22–27 August 2004
Toulouse, France
Edited by
Jean-Jacques Quisquater
UCL, Louvain-la-Neuve, Belgium
Pierre Paradinas
CNAM, Paris, France
Yves Deswarte
LAAS-CNRS, Toulouse, France
Anas Abou El Kalam
LAAS-CNRS, Toulouse, France
KLUWER ACADEMIC PUBLISHERS
NEW YORK,BOSTON, DORDRECHT, LONDON, MOSCOW
eBookISBN: 1-4020-8147-2
Print ISBN: 1-4020-8146-4
©2004 Springer Science + Business Media, Inc.
Print ©2004by International Federation for Information Processing.
Boston
All rights reserved
No part of this eBook maybe reproducedortransmitted inanyform or byanymeans,electronic,
mechanical, recording, or otherwise,withoutwritten consent from the Publisher
Createdin the United States of America
Visit Springer's eBookstore at: http://www.ebooks.kluweronline.com
and the Springer Global Website Online at: http://www.springeronline.com
Contents
Preface vii
Acknowledgements ix
Part I. Java Cards
Enforcing High-Level Security Properties for Applets 1
Mariela Pavlova, Gilles Barthe, Lilian Burdy, Marieke Huisman,
Jean-Louis Lanet
On-the-Fly Metadata Stripping for Embedded Java Operating
Systems 17
Christophe Rippert, Damien Deville
Part II. Privacy
Privacy Issues in RFID Banknotes Protection Schemes 33
Gildas Avoine
Smartcard-based Anonymization 49
Anas Abou El Kalam, Yves Deswarte, Gilles Trouessin,
Emmanuel Cordonnier
Privacy Protecting Protocols for Revocable Digital Signatures 67
István Zsolt Berta, Levente Buttyán, István Vajda
Anonymous Services using Smart Cards and Cryptography 83
Sébastien Canard, Jacques Traoré
Part III. Side Attacks
EfficientCountermeasures against Power Analysis for Elliptic
Curve Cryptosystems 99
Kouichi Itoh, Tetsuya Izu, Masahiko Takenaka
Smart-Card Implementation of Elliptic Curve Cryptography and
DPA-type Attacks 115
Marc Joye
vi Smart Card Research and Advanced Applications VI
Differential Power Analysis Model and Some Results 127
Sylvain Guilley, Philippe Hoogvorst, Renaud Pacalet
Part IV. Fault Injection Attacks
Place and Route for Secure Standard Cell Design 143
Kris Tiri, Ingrid Verbauwhede
A Survey on Fault Attacks 159
Christophe Giraud, Hugues Thiebeauld
Differential Fault Analysis Attack Resistant Architectures for
the Advanced Encryption Standard 177
Mark Karpovsky, Konrad J. Kulikowski, Alexander Taubin
Part V. Middleware 1
Secure Network Card. Implementation of a Standard Network
Stack in a Smart Card 193
Michael Montgomery, Asad Ali, Karen Lu
A Pattern Oriented Lightweight Middleware for Smartcards 209
Jean-Michel Douin, Jean-Marie Gilliot
Card-Centric Framework - Providing I/O Resources for Smart Cards 225
Pak-Kee Chan, Chiu-Sing Choy, Cheong-Fat Chan, Kong-Pang Pun
Part VI. Cryptographic Protocols
On the Security of the DeKaRT Primitive 241
Gilles Piret, François-Xavier Standaert, Gael Rouvroy,
Jean-Jacques Quisquater
An Optimistic Fair Exchange Protocol for Trading Electronic Rights 255
Masayuki Terada, Makoto Iguchi, Masayuki Hanadate, Ko Fujimura
Accountable Ring Signatures: A Smart Card Approach 271
Shouhuai Xu, Moti Yung
Part VII. Middleware 2
Checking and Signing XML Documents on Java Smart Cards 287
Nils Gruschka, Florian Reuter, Norbert Luttenberger
XML Agent on Smart Cards 303
Sunil Sayyaparaju, Deepak B. Phatak
Index of contributors 317
Preface
This CARDIS is special in the list of all CARDIS conferences,
nevertheless it follows the tradition where every 2 years the scientific
smart card world from academic research organizations meet together
with technologists from industries.
This year, CARDIS is celebrating its 10th anniversary, and the
pioneers are less isolated now. More universities, more research and
industrialcenters have set up or launchedresearch activities.
For this edition we received 45 papers and we selected 20 papers,
with 20% from Asia or America and 60% from Europe. In contrast with
the first editions where we received “marketing product presentation” –
of course rejected – the quality across the years is more and more
valuable, and CARDIS is renewed as “The conference” in smart card
technology.
CARDIS’1994 was in Lille (France), CARDIS’1996 in Louvain-La-
neuve (Belgium), CARDIS’1998 in Amsterdam (The Netherlands),
CARDIS’2000 Bristol (UK), CARDIS’2002 San Jose (California) and
now it returns to France and takes place within the IFIP World
Computer Congress. This may be also viewed as progress in the
visibility of smart card technology and research.
The program committee was very accurate and fair during the review
process, and the papers from the program committee members were
reviewed more severely by more reviewers. The PC meeting hosted by
CNAM (Paris) was very productive and at the end of the day the
program main stream was set up.
We hope you will enjoy the conference as much as we liked to review
and prepare the program of CARDIS’2004.
Jean-Jacques Quisquater (General Chair)
Pierre Paradinas (Program Chair)
Yves Deswarte (Local Chair)
This page intentionally left blank
Acknowledgements
Conference General Chair:
Jean-Jacques Quisquater, UCL, Louvain-la-Neuve, Belgium
Local Organization Chair:
Yves Deswarte, LAAS-CNRS, Toulouse, France
Program Committee Chair:
Pierre Paradinas, CNAM, Paris, France
Program Committee:
Boris Balacheff, Hewlett-Packard Labs, UK
Edouard de Jong, Sun Microsystems, USA
Yves Dewarte, LAAS-CNRS, France
Josep Domingo-Ferrer, Universitat Rovira i Virgili, Spain
Jean-Bernard Fischer, OCS, France
Gilles Grimaud, RD2P, France
Pieter Hartel, University ofTwente, Netherlands
Peter Honeymann, University of Michigan, USA
Dirk Husemann, IBM Research, Switzerland
Jean-Louis Lanet, INRIA-DirDRI, France
Xavier Leroy, INRIA & Trusted Logic, France
Mike Montgomery, Schlumberger, USA
Erik Poll, Nijmegen University, Netherlands
Joachim Posegga, SAP-Corporate Research, Germany
Jean-Jacques Quisquater, UCL, Belgium
Jean-Jacques Vandewalle, Gemplus Labs, France
Serge Vaudenay, EPFL, Switzerland
J. Verschuren, TNO-EIB, The Netherlands
Tim Wilkinson, Hive Minded, USA