Smart Card Programming and Security: International Conference on Research in Smart Cards, E-smart 2001, Cannes, France, September 19-21, 2001. Proceedings (Lecture Notes in Computer Science, 2140)

This book constitutes the refereed proceedings of the Second International Conference on Research in Smart Cards, E-smart 2001, held in Cannes, France, in September 2001. The 20 revised full papers presented were carefully reviewed and selected from 38 submissions. Among the topics addressed are biometrics, cryptography and electronic signatures on smart card security, formal methods for smart card evaluation and certification, architectures for multi-applications and secure open platforms, and middleware for smart cards and novel applications of smart cards. The E-smart 2001 International Conference On Research In Smart Cards Was Held In Cannes, France On 19–21 September. The Conference Was Jointlyorganized Bythe Java Card Forum, Eurosmart And Inria, And Received Helpful ?nancial Support From The Conseil R ́egional Provence-alpes-cˆote D’azur. The Intention With E-smart Is To Provide A Forum For Discussion And Exchange Of Results On Smart Card Development, Security, And Applications. This Year’s P- Gram Was Established Byan International Program Committee That Examined 38 Papers Submitted And Selected 20 Of These For Presentation. The List Of Topics Of This Year’s Presentations Includes Biometrics, Cryptography And Electronic Sig- Tures On Smart Cards, Hardware And Software Solution For Smart Card Security, Formal Methods For Smart Card Evaluation And Certi?cation, Architectures For Multi-applications And Secure Open Platforms, Middleware For Smart Cards And Novel Applications Of Smart Cards. The Conference Also Featured An Invited Talk Bysimon Moore From The Universityof Cambridge. Isabelle Attali Thomas Jensen E-smart 2001 Program Committee Co-chairs. Organization Program Committee Isabelle Attali, Inria Dominique Bolignano, Trusted Logic Bertrand Du Castel, Schlumberger Wolfgang E?ng, Giesecke & Devrient Christian Goire, Bull Cp8 Pieter Hartel, Universityof Twente Peter Honeyman, University Of Michigan Thomas Jensen, Irisa / Cnrs Pierre Paradinas, Gemplus Joachim Posegga, Sap Ag Peter Ryan, Cert Jean-paul Thomasson, St Microelectronics Yasuyoshi Uemura, Ecsec Thanks Are Due To The Following People For Their Help With The Refereeing Of Papers: Thomas Genet, Valerie Viet Triem Tong, Stefan Friedich, Harald Vogt, Jaap-henk Hoepman, Neil Henderson, Adam Field, And Jordan Chong. Invited Talk -- Protecting Consumer Security Devices -- Contributed Papers -- Jakarta: A Toolset For Reasoning About Javacard -- Mechanising A Protocol For Smart Cards -- Jccm: Flexible Certificates For Smartcards With Java Card -- Context Inference For Static Analysis Of Java Card Object Sharing -- Automated Test And Oracle Generation For Smart-card Applications -- An Internet Authorization Scheme Using Smart-card-based Security Kernels -- Turning Multi-applications Smart Cards Services Available From Anywhere At Anytime: A Soap/mom Approach In The Context Of Java Cards -- An Operational Semantics Of The Java Card Firewall -- Cards4: Modal Theorem Proving On Java Smartcards -- Ibutton Enrolment And Verification Requirements For The Pressure Sequence Smartcard Biometric -- Simspeak - Towards An Open And Secure Application Platform For Gsm Sims -- On-card Bytecode Verification For Java Card -- Towards A Full Formal Specification Of The Javacard Api -- Protection Profiles And Generic Security Targets For Smart Cards As Secure Signature Creation Devices-existing Solutions For The Payment Sector -- A Flexible Invocation Framework For Java Card -- Electromagnetic Analysis (ema): Measures And Counter-measures For Smart Cards -- Information Leakage Attacks Against Smart Card Implementations Of The Elliptic Curve Digital Signature Algorithm -- Use Of Biometrics For User Verification In Electronic Signature Smartcards -- Programming Internet Smartcard With Xml Scripts -- Public-key-based High-speed Payment (electronic Money) System Using Contact-less Smart Cards. Isabelle Attali, Thomas Jensen (eds.). Includes Bibliographical References And Index. Protecting Consumer Security Devices....Pages 1-1 Jakarta: A Toolset for Reasoning about JavaCard....Pages 2-18 Mechanising a Protocol for Smart Cards....Pages 19-33 JCCM: Flexible Certificates for smartcards with Java Card....Pages 34-42 Context Inference for Static Analysis of Java Card Object Sharing....Pages 43-57 Automated Test and Oracle Generation for Smart-Card Applications....Pages 58-70 An Internet Authorization Scheme Using Smart-Card-Based Security Kernels....Pages 71-82 Turning Multi-applications Smart Cards Services Available from Anywhere at Anytime: A SOAP/MOM Approach in the Context of Java Cards....Pages 83-94 An Operational Semantics of the Java Card Firewall....Pages 95-110 CardS4: Modal Theorem Proving on Java Smartcards....Pages 111-123 iButton Enrolment and Verification Requirements for the Pressure Sequence Smartcard Biometric....Pages 124-134 SIMspeak - Towards an Open and Secure Application Platform for GSM SIMs....Pages 135-149 On-Card Bytecode Verification for Java Card....Pages 150-164 Towards a Full Formal Specification of the JavaCard API....Pages 165-178 Protection Profiles and Generic Security Targets for Smart Cards as Secure Signature Creation Devices-Existing Solutions for the Payment Sector....Pages 179-187 A Flexible Invocation Framework for Java Card....Pages 188-199 ElectroMagnetic Analysis (EMA): Measures and Counter-measures for Smart Cards....Pages 200-210 Information Leakage Attacks against Smart Card Implementations of the Elliptic Curve Digital Signature Algorithm....Pages 211-219 Use of Biometrics for User Verification in Electronic Signature Smartcards....Pages 220-227 Programming Internet Smartcard with XML Scripts....Pages 228-241 Public-Key-Based High-Speed Payment (Electronic Money) System Using Contact-Less Smart Cards....Pages 242-254