Research on Java card security

Xue-lian ZHANG; Zhen WU; Zhi-bo DU; Min WANG; Chun-ling XIANG

doi:10.11959/j.issn.2096-109x.2017.00173

您当前的位置：

首页 >

文章列表页 >

Research on Java card security

Papers | 更新时间：2024-06-03

- Research on Java card security
- Chinese Journal of Network and Information Security Vol. 3, Issue 6, Pages: 58-64(2017)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2017.00173
  CLC： TP39
- Online First：2017-06，
  
  Published：15 June 2017
- 稿件说明：
移动端阅览
Xue-lian ZHANG, Zhen WU, Zhi-bo DU, et al. Research on Java card security[J]. Chinese Journal of Network and Information Security, 2017, 3(6): 58-64.
DOI：

Xue-lian ZHANG, Zhen WU, Zhi-bo DU, et al. Research on Java card security[J]. Chinese Journal of Network and Information Security, 2017, 3(6): 58-64. DOI： 10.11959/j.issn.2096-109x.2017.00173.

摘要

为了保护个人隐私以及财产的安全性，提出了Java卡安全性研究。在系统论述Java卡基本组成结构的基础上，对逻辑攻击、故障注入、联合攻击等攻击方式的研究工作进行了总结，探讨了其中存在的一些问题，进一步对各种攻击方式提出了相应的防御措施并分析其存在的不足。最后对未来的研究方向进行了展望。

Abstract

To protect privacy and the safety of property

the security research of Java card was proposed.On the basis of systematically discussing the basic composition of Java card

the key of attacking methods were summarized

including logical attack

fault injection and combined attack.At the same time

some problems with the attack process were presented.Moreover

some corresponding countermeasures were put forward and their shortages were analyzed.Finally

the future research direction was prospected.

关键词

Keywords

references

党彦峰 . Java 智能卡软件平台的设计与实现 [D ] . 上海:上海交通大学 , 2008 .

DANG Y F . The design and implementation of Java smart card software platform [D ] . Shanghai:Shanghai Jiao Tong University , 2008 .

SÉRÉ A A K , JULIEN I C , JLANET J L . Evaluation of countermeasures against fault attacks on smart cards [J ] . International Journal of Security and Its Applications , 2011 , 5 ( 2 ): 49 - 60 .

于晖 . 基于混合攻击的 Java 卡 3.0 安全性研究 [J ] . 信息安全与通信保密 , 2014 ( 9 ): 125 - 128 .

YU H . Security study on Java card 3.0 based on hybrid attack [J ] . Information Security and Communications Privacy , 2014 ( 9 ): 125 - 128 .

AUMÜLLER C , BIER P , FISCHER W . Fault attacks on RSA with CRT:concrete results and practical countermeasures [C ] // The International Workshop on Cryptographic Hardware and Embedded Systems . 2002 : 260 - 275 .

GIRAUD C , THIEBEAULD H . A survey on fault attacks [M ] // Smart Card Research and Advanced Applications . Berlin : SpringerPress , 2004 : 159 - 176 .

BARBU G , THIEBEAULD H , GUERIN V . Attacks on Java card 3.0 combining fault and logical attacks [C ] // The International Conference on Smart Card Research and Advanced Application,IFIP Wg 8.8/11.2 . 2010 : 148 - 163 .

WU Y C , SUN Y Q . Analysis and research of securing from attack for java card [C ] // The International Conference on E-Business and E-Government . 2010 : 1296 - 1298 .

CHAUMETTE S , SAUVERON D . An efficient and SIMPLE way to test the security of Java cards TM [C ] // The International Workshop on Security in Information Systems . 2006 : 331 - 341 .

WITTEMAN M . Java card security [J ] . Information Security Bulletin , 2003 , 8 ( 10 ): 291 - 298 .

MOSTOWSKI W , POLL E . Malicious code on Java card smartcards:attacks and countermeasures [C ] // The International Conference on Smart Card Research and Advanced Applications,IFIP Wg 8.8/11.2 . 2008 : 1 - 16 .

BARBU G , DUC G , HOOGVORST P . Java card operand stack:fault attacks,combined attacks and countermeasures [M ] // Smart Card Research and Advanced Applications . Berlin Heidelberg : SpringerPress , 2011 : 297 - 313 .

PAUL C . Timing attacks on implementations of Diffie-Hellman,RSA,DSS,and other systems [M ] // Advances in Cryptology —CRYPTO’96 . Berlin : SpringerPress , 1996 : 104 - 113 .

VERMOEN D , WITTEMAN M , GAYDADJIEV G N . Reverse engineering Java card applets using power analysis [C ] // The International Workshop on Information Security Theory and Practices.Smart Cards,Mobile and Ubiquitous Computing Systems,First IFIP TC6 / WG 8.8 / WG 11.2 . 2007 : 138 - 149 .

Views

2959

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Design and detection of hardware Trojan based on satisfiability don't cares

Related Author

Lingjuan WU

Jiacheng ZHU

Shibo TANG

Jing TAN

Wei HU

Related Institution

School of Cybersecurity, Northwestern Polytechnical University

College of Informatics, Huazhong Agricultural University

⁰