Smart Card Fundamentals
Total Page:16
File Type:pdf, Size:1020Kb
Module 1: Smart Card Fundamentals Smart Card Alliance Certified Smart Card Industry Professional Accreditation Program Smart Card Alliance © 2010 CSCIP Module 1- Fundamentals Final - Version 3 - October 8, 2010 1 For CSCIP Applicant Use Only About the Smart Card Alliance The Smart Card Alliance is a not-for-profit, multi-industry association working to stimulate the understanding, adoption, use and widespread application of smart card technology. Through specific projects such as education programs, market research, advocacy, industry relations and open forums, the Alliance keeps its members connected to industry leaders and innovative thought. The Alliance is the single industry voice for smart cards, leading industry discussion on the impact and value of smart cards in the U.S. and Latin America. For more information please visit http://www.smartcardalliance.org . Important note: The CSCIP training modules are only available to LEAP members who have applied and paid for CSCIP certification. The modules are for CSCIP applicants ONLY for use in preparing for the CSCIP exam. These documents may be downloaded and printed by the CSCIP applicant. Further reproduction or distribution of these modules in any form is forbidden. Copyright © 2010 Smart Card Alliance, Inc. All rights reserved. Reproduction or distribution of this publication in any form is forbidden without prior permission from the Smart Card Alliance. The Smart Card Alliance has used best efforts to ensure, but cannot guarantee, that the information described in this report is accurate as of the publication date. The Smart Card Alliance disclaims all warranties as to the accuracy, completeness or adequacy of information in this report. Smart Card Alliance © 2010 CSCIP Module 1- Fundamentals Final - Version 3 - October 8, 2010 2 For CSCIP Applicant Use Only TABLE OF CONTENTS 1 INTRODUCTION ................................................................................................................................. 6 2 SMART CARD OVERVIEW ............................................................................................................... 7 2.1 SMART CARD HISTORY AND MARKET ...............................................................................................7 2.2 TYPES OF SMART CARDS ....................................................................................................................9 2.3 SMART CARD FUNCTIONS AND APPLICATIONS ................................................................................ 10 3 INTEGRATED CIRCUIT TYPES .................................................................................................... 12 3.1 MEMORY AND SECURE MEMORY ..................................................................................................... 12 3.2 MICROCONTROLLER ......................................................................................................................... 13 4 FORM FACTORS FOR SMART CARD TECHNOLOGY ............................................................ 16 4.1 CARD FORM FACTOR ....................................................................................................................... 16 4.2 USB TOKENS ................................................................................................................................... 16 4.3 SUBSCRIBER IDENTITY MODULE FORM FACTOR .............................................................................. 17 4.4 OTHER FORM FACTORS .................................................................................................................... 17 5 COMMUNICATIONS INTERFACES ............................................................................................. 19 5.1 CONTACT INTERFACE ....................................................................................................................... 19 5.1.1 Contact Interface Standards ............................................................................................. 20 5.1.2 Data Transmission Protocols ............................................................................................ 20 5.2 CONTACTLESS INTERFACE ............................................................................................................... 22 5.2.1 Contactless Technology Standards ................................................................................... 23 5.3 DUAL INTERFACE ............................................................................................................................. 30 6 MEMORY SIZES AND TYPES ........................................................................................................ 32 6.1 MEMORY -BASED SMART CARDS ..................................................................................................... 32 6.2 SECURE MICROCONTROLLER -BASED SMART CARDS ....................................................................... 32 7 SMART CARD OPERATING SYSTEMS ....................................................................................... 34 7.1 NATIVE OPERATING SYSTEMS ......................................................................................................... 34 7.2 OBJECT -ORIENTED OPERATING SYSTEMS ........................................................................................ 35 7.2.1 MULTOS ........................................................................................................................... 37 7.2.2 Java Card: A Tool for Smart Card Applet Developers ..................................................... 38 7.2.3 Windows for Smart Cards: Designed for PC Application Developers ............................. 38 7.2.4 Basic Card: Proprietary Solution for Easy Card Development ........................................ 38 8 SMART CARD MANUFACTURING PROCESS ........................................................................... 39 8.1 CARD BODY MATERIAL AND PRODUCTION ...................................................................................... 40 8.2 SMART CHIP MICRO -MODULES ....................................................................................................... 40 8.3 SMART CARD MANUFACTURING ...................................................................................................... 42 8.4 SMART CARD PERSONALIZATION ..................................................................................................... 43 9 SMART CARD READERS ................................................................................................................ 44 9.1 SMART CARD READERS FOR SECURE COMPUTER ACCESS ............................................................... 44 9.2 SMART CARD READERS AT THE POINT -OF -SALE .............................................................................. 45 9.3 SMART CARD READERS AND PHYSICAL ACCESS CONTROL ............................................................. 46 10 RELEVANT STANDARDS AND SPECIFICATIONS ................................................................... 48 10.1 STANDARDS RELEVANT TO SMART CARD PHYSICAL CHARACTERISTICS ......................................... 48 10.1.1 ISO/IEC 7810 – Identification Cards – Physical Characteristics ..................................... 48 10.1.2 ISO/IEC 7816 – Identification Cards – Integrated Circuit Cards .................................... 49 Smart Card Alliance © 2010 CSCIP Module 1- Fundamentals Final - Version 3 - October 8, 2010 3 For CSCIP Applicant Use Only 10.1.3 ISO/IEC 10373 – Identification Cards – Test Methods..................................................... 49 10.1.4 ISO/IEC 24789 – Identification Cards – Card Service Life .............................................. 49 10.2 STANDARDS RELEVANT TO TECHNOLOGIES WHICH COULD BE FOUND ON A SMART CARD ............ 49 10.3 STANDARDS AND SPECIFICATIONS RELEVANT TO TECHNOLOGIES RELATED TO THE CARD INTERFACE ....................................................................................................................................... 49 10.3.1 ISO/IEC 7816 Series – Identification Cards – Integrated Circuit(s) Cards with Contacts ............................................................................................................................ 49 10.3.2 ISO/IEC 14443 Series – Identification Cards – Contactless Integrated Circuit(s) Cards – Proximity Cards .................................................................................................. 50 10.3.3 ISO/IEC 15693 – Contactless Integrated Circuit Cards – Vicinity Cards ........................ 50 10.3.4 ISO/IEC 18092 – Information technology – Telecommunications and Information Exchange between Systems – Near Field Communication – Interface and Protocol ....... 50 10.3.5 Personal Computer/Smart Card (PC/SC) Specifications .................................................. 50 10.4 STANDARDS AND SPECIFICATIONS RELEVANT TO THE CARD COMMANDS AND APPLICATION DATA STRUCTURES .................................................................................................................................... 51 10.4.1 ISO/IEC 7816 Series – Identification Cards – Integrated Circuit(s) Cards ..................... 51 10.4.2 GlobalPlatform ................................................................................................................. 51 10.4.3 Java Card .......................................................................................................................... 51 10.5 STANDARDS AND SPECIFICATIONS RELEVANT TO SECURITY OR CRYPTOGRAPHY ..........................