Java Card Technology for Smart Cards

• Smart card basics
• Java Card virtual machine
• Persistent and transient objects
• Atomicity and transactions
• Handling APDUs
• Applet firewall and object sharing
• Java Card platform security
• A step-by-step applet development guide
• Applet optimization guidelines
• A comprehensive reference to Java Card APIs

With Java Card technology, smart card programming will finally enter the mainstream of application development. This book provides the authoritative and practical information you need to enter this rapidly growing arena.

Table of contents

Foreword

Preface

Part 1 Introduction

1 From the Beginning

1.1 Smart Cards

1.1.1 Brief History

1.1.2 Benefits

1.1.3 Applications

1.2 Challenges in the Development of Smart Card Applications

1.3 Applying Java to Smart Cards

1.3.1 Benefits of Java Card Technology

1.3.2 Brief History of Java Card Technology

2 Smart Card Basics

2.1 Overview of Smart Cards

2.2 Basic Card Types

2.2.1 Memory Cards versus Microprocessor Cards

2.2.2 Contact Cards versus Contactless Cards

2.3 Smart Card Hardware

2.3.1 Smart Card Contact Points

2.3.2 Smart Card Central Processing Unit

2.3.3 Smart Card Coprocessors

2.3.4 Smart Card Memory System

2.4 Smart Card Communication

2.4.1 Card Acceptance Device and Host Applications

2.4.2 Smart Card Communication Model

2.4.3 APDU Protocol

2.4.4 TPDU Protocol

2.4.5 ATR

2.5 Smart Card Operating Systems

2.5.1 Smart Card File Systems

2.5.2 Master File

2.5.3 Dedicated File

2.5.4 Elementary File

2.6 Smart Card Systems

2.7 Smart Card Standards and Specifications

2.7.1 ISO 7816 Standards

2.7.2 GSM

2.7.3 EMV

2.7.4 Open Platform

2.7.5 OpenCard Framework

2.7.6 PC/SC

Part 2 Java Card Technology

3 Java Card Technology Overview

3.1 Architecture Overview

3.2 Java Card Language Subset

3.3 Java Card Virtual Machine

3.3.1 CAP File and Export File

3.3.2 Java Card Converter

3.3.3 Java Card Interpreter

3.4 Java Card Installer and Off-Card Installation Program

3.5 Java Card Runtime Environment

3.5.1 JCRE Lifetime

3.5.2 How Does the JCRE Operate during a CAD Session?

3.5.3 Java Card Runtime Features

3.6 Java Card APIs

3.6.1 java.lang Package

3.6.2 javacard.framework Package

3.6.3 javacard.security Package

3.6.4 javacardx.crypto Package

3.7 Java Card Applets

3.8 Package and Applet Naming Convention

3.9 Applet Development Process

3.10 Applet Installation

3.10.1 ROM Applets

3.10.2 Preissuance or Postissuance Applets

3.10.3 Postissuance Applet Installation

3.10.4 Error Recovery during Applet Installation

3.10.5 Installation Constraints

4 Java Card Objects

4.1 Java Card Memory Model

4.2 Persistent Objects

4.3 Transient Objects

4.3.1 Properties of Transient Objects

4.3.2 Transient Object Types

4.3.3 Creating Transient Objects

4.3.4 Querying Transient Objects

4.4 A Few Words about Object Creation and Deletion

5 Atomicity and Transactions

5.1 Atomicity

5.2 Block Data Updates in an Array

5.3 Transactions

5.3.1 Commit Transaction

5.3.2 Abort Transaction

5.3.3 Nested Transaction

5.3.4 Commit Capacity

5.3.5 TransactionException

5.3.6 Local Variables and Transient Objects during a Transaction

6 Java Card Exceptions and Exception Handling

6.1 Exceptions in the java.lang Package

6.2 Java Card Exceptions

6.2.1 Java Card Exception Reason Code

6.2.2 Throwing an Exception in the Java Card Platform

6.2.3 ISOException

6.2.4 UserException

7 Java Card Applets

7.1 Applet Overview

7.1.1 Applet Installation and Execution

7.1.2 Applet Communication

7.2 Class javacard.framework.Applet

7.3 install Method

7.3.1 Creating Objects in the Applet's Constructor

7.3.2 Registering the Applet Instance with the JCRE

7.3.3 Processing the Installation Parameters

7.3.4 Further Applet Initialization

7.4 select Method

7.4.1 SELECT APDU Format and Processing

7.4.2 Default Applet

7.5 deselect Method

7.6 process Method

7.7 Other Methods in the Class javacard.framework.Applet

8 Working with APDUs

8.1 APDU Class

8.1.1 APDU Object

8.1.2 APDU Buffer Size

8.2 Interface ISO7816

8.3 Working with APDUs in Applets

8.3.1 Retrieve the APDU Buffer

8.3.2 Examine the Command APDU Header

8.3.3 Receive APDU Command Data

8.3.3.1 Receiving Long Command Data

8.3.4 Process the APDU Command and Generate the Response Data

8.3.5 Return APDU Response Data

8.3.5.1 Sending Data from Other Locations

8.3.5.2 Sending a Long Response

8.3.6 Return the Status Word

8.4 Protocol-Specific APDU Processing

8.4.1 Method getProtocol

8.4.2 Method getInBlockSize

8.4.3 Method getOutBlockSize

8.4.4 Method setOutgoingNoChaining

8.4.5 Method getNAD

8.4.6 Method waitExtension

8.5 Summary

9 Applet Firewall and Object Sharing

9.1 Applet Firewall

9.1.1 Contexts

9.1.2 Object Ownership

9.1.3 Object Access

9.1.4 Transient Array and Context

9.1.5 Static Fields and Methods

9.2 Object Sharing across Contexts

9.2.1 Context Switch

9.2.2 JCRE Privileges

9.2.3 JCRE Entry Point Objects

9.2.4 Global Arrays

9.2.5 Object Shareable Interface Mechanism

9.2.5.1 Shareable Interface

9.2.5.2 Shareable Interface Object

9.2.5.3 Thoughts behind the Shareable Interface Mechanism

9.2.5.4 An Example of Object Sharing between Applets

9.2.5.5 Create a Shareable Interface Object

9.2.5.6 Request a Shareable Interface Object

9.2.5.7 Use a Shareable Interface Object

9.2.5.8 Context Switches during Object Sharing

9.2.5.9 Parameter Types and Return Types in Shareable Interface Methods

9.2.5.10 Authenticate a Client Applet

9.2.5.11 getPreviousContextAID Method

9.2.5.12 Summary

10 Programming Cryptography

10.1 Quick Tour of Cryptography

10.1.1 Encryption and Decryption

10.1.2 Message Digest

10.1.3 Digital Signature

10.1.4 Random Data

10.2 Cryptographic Practice in Smart Card Applications

10.2.1 Ensuring Application Security

10.2.2 Functioning as a Secure Token

10.2.3 Summary

10.3 Java Card Cryptography APIs

10.3.1 Design Principles

10.3.2 Architecture

10.3.3 Package Structure

10.4 Code Examples

10.4.1 Compute a Message Digest

10.4.2 Build a Cryptographic Key

10.4.3 Sign and Verify a Signature

10.4.4 Encrypt and Decrypt Data

10.4.5 Generate Random Data

11 Java Card Platform Security

11.1 Java Card Platform Security Features

11.1.1 Java Language Security

11.1.2 Additional Security Features of the Java Card Platform

11.2 Java Card Platform Security Mechanisms

11.2.1 Compile-Time Checking

11.2.2 Class File Verification and Subset Checking

11.2.3 CAP File and Export File Verification

11.2.4 Installation Checking

11.2.5 Cryptographically Enforced Chain Trust

11.2.6 Runtime Security Enforcement

11.2.7 Java Card Cryptographic Support

11.3 Applet Security

Part 3 Programming Guide and Tips

12 Step-by-Step Applet Development Guide

12.1 Design the Applet

12.1.1 Specify the Functions of the Applet

12.1.2 Specify AIDs for the Applet

12.1.3 Define the Class Structure and Method Functions of the Applet

12.1.4 Define the Interface between the Applet and Its Host Application

12.1.4.1 SELECT APDU

12.1.4.2 VERIFY APDU

12.1.4.3 CREDIT APDU

12.1.4.4 DEBIT APDU

12.1.4.5 GET BALANCE APDU

12.2 Construct the Applet Code

12.2.1 Wallet Applet Code

12.2.2 Implement Error Checking

12.3 What's the Next Step?

13 Applet Optimization

13.1 Optimizing an Applet's Overall Design

13.2 On-Card Execution Time

13.3 Method Invocations

13.4 Creating Objects in Applets

13.5 Reusing Objects

13.6 Eliminating Redundant Code

13.7 Accessing Arrays

13.8 The switch Statement versus the if-else Statement

13.9 Arithmetic Statements

13.10 Optimizing Variables in Applets

14 Working with int Data Type

14.1 32-Bit Arithmetic Operations

14.2 Array Size and Array Index

14.3 Storing and Computing int Values

14.4 Summary

Part 4 Appendices

A Java Card Language Subset

B Java Card 2.1 Application Programming Interface

Glossary

Bibliography

Index