Questions tagged [smartcard]

A smartcard is a card with an embedded chip that may store cryptographic keys and/or perform cryptographic functions. Smartcards are often use as employee ID badges or in contactless credit/debit cards.

Smartcards used for cryptographic functions such as identity verification, signing, and decryption are usually designed so that the cards can generate their own cryptographic public/private key pairs, such that the private key cannot be removed or exported from the card. Using a smartcard to decrypt or sign a piece of data is usually protected by a PIN or passcode.

If you receive a message, whose signature can be validated using the public key, then you know that the message could only have been signed using the private key stored on the smartcard, which means that the message came from someone having physical possession of the smartcard and who knows the PIN or passcode required to use the smartcard. Having the decryption key on the card directly enforces, that without card and PIN knowledge just the encrypted message is available.

SIM cards used in mobile phones are also smart cards, proving an existing account towards network and storing phone numbers and text messages.

EMV cards (also known as "chip and pin") use smartcards to increase security and decrease fraud. The EMV standard, and its test cases, are governed by EMVCo.

Smartcards have a dedicated standard: ISO/IEC 7816 that describes what defines a smartcard from physical characteristics to cryptographic information application, including protocols and commands.

Contactless smart card (such as PayPass and payWave etc) are covered by ISO/IEC 14443; that describe the physical characteristics of the card, power and signal interfaces, transmission and collision detection, and transmission protocols.

EMV cards are also issued with "dual" interfaces that use the same chip on the card and two external interfaces.

1917 questions
9
votes
1 answer

phonegap app with Smart Card integration

I have a phonegap/cordova app that I want to secure with Precise Biometric's Smart Card Tactivo reader. I am very new to Smart card integration, and Precise Biometrics does not seem to have a very informative documentation. However I have found that…
now_world
  • 940
  • 7
  • 21
  • 56
8
votes
1 answer

how to simulate java card applet with Netbeans?

I am new to Java Card Programming (with netbeans). I did everything in the Java Card Development Quick Start page page and I created a classic card applet and tried simulate it. But when I try to simulate and send a command on device console, it…
Savas Adar
  • 4,083
  • 3
  • 46
  • 54
8
votes
2 answers

Required Things to start Smartcard Programming Using Javacard

I wanted to start with the smartcard programming soon. Please help me the things required for starting the learning using javacard. Which IDE (If any IDE Supports), Software and Hardware related? Like Mobile phone simulator is there any smartcard…
Dungeon Hunter
  • 19,827
  • 13
  • 59
  • 82
8
votes
2 answers

ATR command when programming PC/SC reader

I have checked the programming interface for the MIFARE Ultralight and TOPAZ/Jewel IC tags. The API quite nicely describes how the bytes are saved on the card, how to address the memory blocks, how to make all operations like read, read-all, use of…
STeN
  • 6,262
  • 22
  • 80
  • 125
8
votes
0 answers

How to create a SSL context using the certificates residing on a smartcard with non-exportable private keys?

I'm attempting to use the requests library to connect to a server that requires a client certificate be provided. I can get the certificates, but not the private key. I'm able to extract certificates from the smartcard (using the cryptography…
8
votes
4 answers

Django development server smart card authentication

I would like to use smart card based authentication on the Django development server, as it is the universally accepted means of authentication where I live. With Apache i can enable it by creating a .htaccess file in the directory that requires…
Uku Loskit
  • 40,868
  • 9
  • 92
  • 93
8
votes
3 answers

Installing applet in javacard

I made a .cap file of the popular "Hello World" javacard code via Eclipse And now I want to load it in a real javacard via GPShell and ACR38 smart card reader. question: Am I need any key to load the .cap file in the card? I mean, should I…
Ebrahim Ghasemi
  • 5,850
  • 10
  • 52
  • 113
8
votes
2 answers

Standards for smartcard communication

What is the difference between ISO 14443-3 and ISO 7816-4 APDUs? I'm asking this because seems some cards use former to communicate with reader, some latter. I'm confused with this, would like to get a good understanding about this. For example, I…
user2568508
8
votes
1 answer

ACR 122u NFC reader doesn't connect via USB: return error

Im developing a NFC reading system with C#, according to given sample codes with SDK I cannot connect the device with the application. Sometimes it return unknown error code (-2146434967) which is not handled in the sample application codes. But…
iJay
  • 4,205
  • 5
  • 35
  • 63
8
votes
3 answers

Smart Card Authentication with ASP.NET

What are the steps required to get smart-cards authentication working in ASP.net? Smart-card reader is installed and works properly on the client's machine user navigates to Login.aspx page and is prompted to swipe his access card how do i…
Charles Okwuagwu
  • 10,538
  • 16
  • 87
  • 157
7
votes
2 answers

Strange Invalid CLA command (6E 00) on Java SmartCard IO

I am writing a smart card application and after a successful selection of the application with its AID, when it gets to sending Get Processing Options I get 6E 00 as response - Invalid CLA command. This is part of the code that sends the command and…
Olantobi
  • 869
  • 1
  • 8
  • 16
7
votes
1 answer

Is it possible to implement a token queue in NFC cards?

This question is specifically about MIFARE Ultralight C/EV1, or MIFARE DESFire EV1, or even NTAG cards. I want to implement a system of tokens, so that each time a normal user reads one of those cards they'll get one available token; that token will…
softzer0
  • 445
  • 2
  • 7
  • 25
7
votes
2 answers

Java Card Object Instance in Transient Memory

I am working on a Java Card applet (for Java Card 2.2.1) which requires some temporary objects for processing APDU commands. I have questions about correct memory management. I have spent plenty of time on researching on the issues, but no where I…
M.Mahdipour
  • 592
  • 1
  • 7
  • 21
7
votes
0 answers

CCID RDR_to_PC_DataBlock Error Problem 0xFE ICC_MUTE - Java Smart Card Reading

I am a beginner programmer and have problem about sending CCID Command to the Smart Card via Usb Host on Android mobile device. This time I sent PC_to_RDR_IccPowerOn CCID command PC_to_RDR_IccPowerOn to activate the card and received ATR response…
Bank Bill
  • 71
  • 1
7
votes
2 answers

Which objects are persistent in Java Card, and when?

This question is twofold, but hopefully shouldn't be unreasonably long to answer, despite its own length. Feel free to answer only part of it, though, and sorry for making it so exhaustive! Which objects are persisted? Which objects are…
Ekleog
  • 1,054
  • 7
  • 19