Distribution portal for applications for cryptographic smartcards

Hitesh Lilhare

Master's thesis

Abstract:

Smartcards are the computing platform which is capable of performing some operations. It owns microprocessor, limited memory and some time special purpose microprocessor. In the same line, cryptographic smartcards are those, who support cryptographic operations like encryption, decryption, hashing, signing and so on. Distribution portal refers to an ecosystem which enables cryptographic smartcard user to manage the application in an easy yet secure way. The Thesis focuses on design and implementation of the portal for distribution of applications for cryptographic smartcards with Java Card Technology & Global Platform, and a client application for secure management of Java Card applications, i.e., install, update, deletion of already installed Applications and listing of newly available applications from the trustworthy application store.

Abstract:

Smartcards are the computing platform which is capable of performing some operations. It owns microprocessor, limited memory and some time special purpose microprocessor. In the same line, cryptographic smartcards are those, who support cryptographic operations like encryption, decryption, hashing, signing and so on. Distribution portal refers to an ecosystem which enables cryptographic smartcard user to manage the application in an easy yet secure way. The Thesis focuses on design and implementation of the portal for distribution of applications for cryptographic smartcards with Java Card Technology & Global Platform, and a client application for secure management of Java Card applications, i.e., install, update, deletion of already installed Applications and listing of newly available applications from the trustworthy application store.

Keywords

AID (Application Identifier), CAP (Converted Apple), PLC (Card Production Lifecycle), EAL (Evaluation Assurance Level), PCR (Platform Configuration Register), Java Card, JCRE (Java Card Run-time Environment), Java Card Virtual Machine (JCVM), VM (Virtual Machine), Webhook

Language used: English

Date on which the thesis was submitted / produced: 20. 5. 2019

Thesis defence

• Date of defence: 20. 6. 2019
• Supervisor: RNDr. Petr Švenda, Ph.D.
• Reader: Ing. Mgr. et Mgr. Zdeněk Říha, Ph.D.

Masaryk University

Faculty of Informatics

Master programme / field:
Informatics / Information Technology Security (eng.)