Questions tagged [smartcard]

A smartcard is a card with an embedded chip that may store cryptographic keys and/or perform cryptographic functions. Smartcards are often use as employee ID badges or in contactless credit/debit cards.

Smartcards used for cryptographic functions such as identity verification, signing, and decryption are usually designed so that the cards can generate their own cryptographic public/private key pairs, such that the private key cannot be removed or exported from the card. Using a smartcard to decrypt or sign a piece of data is usually protected by a PIN or passcode.

If you receive a message, whose signature can be validated using the public key, then you know that the message could only have been signed using the private key stored on the smartcard, which means that the message came from someone having physical possession of the smartcard and who knows the PIN or passcode required to use the smartcard. Having the decryption key on the card directly enforces, that without card and PIN knowledge just the encrypted message is available.

SIM cards used in mobile phones are also smart cards, proving an existing account towards network and storing phone numbers and text messages.

EMV cards (also known as "chip and pin") use smartcards to increase security and decrease fraud. The EMV standard, and its test cases, are governed by EMVCo.

Smartcards have a dedicated standard: ISO/IEC 7816 that describes what defines a smartcard from physical characteristics to cryptographic information application, including protocols and commands.

Contactless smart card (such as PayPass and payWave etc) are covered by ISO/IEC 14443; that describe the physical characteristics of the card, power and signal interfaces, transmission and collision detection, and transmission protocols.

EMV cards are also issued with "dual" interfaces that use the same chip on the card and two external interfaces.

1917 questions
16
votes
2 answers

NFC card emulation Android

the Nexus S device NXP PN544 NFC controller supports not only SWP for UICC based SE, but also the S2C (aka NFC-WI) for the external, e.g. micro SD card SE. Does anybody know how this can be enabled and what it means for the SD card? That is not…
STeN
  • 6,262
  • 22
  • 80
  • 125
16
votes
3 answers

How do you write / read to a smartcard?

Is there an Open Source library for writing and reading data in C# from a smartcard using a smartcard reader? My smartcard model is mifare1k and my reader is ucr122u.
xyrus the virus
  • 219
  • 1
  • 3
  • 7
16
votes
3 answers

find certificate on smartcard currently on reader

I am using Visual Studio 2013 (C#) to digitally sign document using certificate from smartcard. I cannot identify certificate currently inserted in the card reader :( Windows copy certificates from all card inserted in the reader and keep it in the…
Nebojsa Susic
  • 1,220
  • 1
  • 9
  • 12
15
votes
2 answers

Integrating POS application with VeriFone terminal

Currently I'm working in a team creating a custom POS solution. We came to a point were we'd like to integrate with a IC/Credit Card terminal (like VeriFone which we have, i.e. Vx510). I think the simplest mode is to allow Cashier to manually enter…
SOReader
  • 5,697
  • 5
  • 31
  • 53
14
votes
6 answers

Access the SIM Card with an Android Application?

I wonder if it's possible to access to the SIM card with an Android Application
Adrien
  • 149
  • 1
  • 1
  • 3
13
votes
3 answers

java keytool with opensc pkcs#11 provider only works with debug option enabled

I have the latest opensc 0.12.2 running on ubuntu 11.10 with OpenJDK ( java version "1.6.0_22") I can read my smartcard (a Feitian ePass PKI) with pkcs15-tool --dump Now i try to use my smartcard with keytool: keytool -providerClass…
Janning Vygen
  • 8,877
  • 9
  • 71
  • 102
13
votes
1 answer

PGP data encryption for use with Yubico OpenPGP Smart Card

I'm trying to implement PGP encryption based on Yubikey NEO OpenPGP Smart Card applet in a Java application. It seems to be a dark art and is not easy to google this stuff but here is where I got so far: The card is initialized, keys are generated…
atok
  • 5,880
  • 3
  • 33
  • 62
13
votes
2 answers

Digital signature from electronic smartcard in Chrome

For an electronic prescription system, that runs on the browser and that requieres personal signature by the professional, we are using a Java applet to sign the XML request, that then is sended to a WS, using a smartcard. But since version 42,…
lujop
  • 13,504
  • 9
  • 62
  • 95
12
votes
3 answers

How to store android application data on sim card using NFC?

I am developing a NFC application. My application will process secret information and I want to store that data on the SIM card. Is it possible, and if it is possible, how can I do this? My phone's android version is Android 2.3.5.
Savas Adar
  • 4,083
  • 3
  • 46
  • 54
12
votes
2 answers

Communicate with smartcard reader through Android USB host

I'm trying to send a command to a smart card. I use a Gemalto IDBridge CT30 (PC TWIN reader) and a IDBridge K30 connected to the Android device over USB. I try to send a SELECT APDU command over USB: boolean claim =…
user997777
  • 569
  • 1
  • 7
  • 19
12
votes
2 answers

Load MSCAPI Java Keystore without loading private keys (hard token)

I would like to load a MSCAPI keystore within Java and examine available certificates in the MY store. However some keys for those certificates reside on hardware tokens and a popup asks for the token during load. Is there a way to defer loading…
emsworth
  • 1,149
  • 10
  • 21
11
votes
0 answers

How to Access Smart Card from a Chrome browser using WebUSB API and PC/SC?

I'm trying to write a web application which needs to exchange messages with a local Smart Card. Currently I'm trying to use WebUSB API to connect the Chrome with the smart card reader, but I'm struggling to use the PC/SC specification. In my…
Cauê Aruã
  • 111
  • 1
  • 4
11
votes
2 answers

How do I distinguish different ISO 14443-4 cards?

There are different smart cards supporting ISO 14443-4. For example, Mifare Plus with its native command set. Or other cards with different command sets (i.e. 7816-4 APDUs). I develop some software for a card reader and I need to identify which…
11
votes
6 answers

How do I read the PAN from an EMV SmartCard from Java

I need to read account number from Maestro/Mastercard with smart card reader. I am using Java 1.6 and its javax.smartcardio package. I need to send APDU command which will ask EMV application stored on card's chip for PAN number. Problem is, I…
asabo
11
votes
1 answer

Getting error: The smart card requires drivers that are not present on this system

All, I am getting an error when trying to login with my smart card to a hyper-v guest: "The smart card requires drivers that are not present on this system." Any Ideas? I am trying to use my smart card on a Hyper-V guest -Running Windows…
Cameron
  • 1,218
  • 2
  • 13
  • 19