Questions tagged [smartcard]

A smartcard is a card with an embedded chip that may store cryptographic keys and/or perform cryptographic functions. Smartcards are often use as employee ID badges or in contactless credit/debit cards.

Smartcards used for cryptographic functions such as identity verification, signing, and decryption are usually designed so that the cards can generate their own cryptographic public/private key pairs, such that the private key cannot be removed or exported from the card. Using a smartcard to decrypt or sign a piece of data is usually protected by a PIN or passcode.

If you receive a message, whose signature can be validated using the public key, then you know that the message could only have been signed using the private key stored on the smartcard, which means that the message came from someone having physical possession of the smartcard and who knows the PIN or passcode required to use the smartcard. Having the decryption key on the card directly enforces, that without card and PIN knowledge just the encrypted message is available.

SIM cards used in mobile phones are also smart cards, proving an existing account towards network and storing phone numbers and text messages.

EMV cards (also known as "chip and pin") use smartcards to increase security and decrease fraud. The EMV standard, and its test cases, are governed by EMVCo.

Smartcards have a dedicated standard: ISO/IEC 7816 that describes what defines a smartcard from physical characteristics to cryptographic information application, including protocols and commands.

Contactless smart card (such as PayPass and payWave etc) are covered by ISO/IEC 14443; that describe the physical characteristics of the card, power and signal interfaces, transmission and collision detection, and transmission protocols.

EMV cards are also issued with "dual" interfaces that use the same chip on the card and two external interfaces.

1917 questions
7
votes
2 answers

Smart card reader development with .Net technologies

Does anyone know how to monitor the presence of smart card and read the UID value of the card? Yes I tried lot of examples in web like A Smart Card Framework for .NET pcsc-sharp Monitoring a Smartcard Reader But No idea how to do it. I can detect…
iJay
  • 4,205
  • 5
  • 35
  • 63
7
votes
0 answers

How to Configure the PCSCD for SmartCard

i am newbee in the PCSC driver development and i have a Mac OSX 10.8.4 (mountain lion) which has PCSC Framework version 1.4.0. I have a smart card and i have library or c code using which i am able to read and write to card (i.e get ATR etc.) I…
7
votes
1 answer

SSL Client Authentication with smart card works in Java 6 but fails in Java 7

the following code creates a client authenticated SSL context using PKCS#11 device (smart card). It all works great with Java 6: // Configure the SunPkcs11 provider String pkcs11config; pkcs11config = "name = Cryptoki"; pkcs11config += "\nlibrary =…
FrizzTheSnail
  • 1,048
  • 11
  • 21
7
votes
2 answers

Need advice on cryptographic algorithm

Apologies for the essay-like nature of this question. I have been struggling to get to grips with this and have tried to sum up my understanding of what is needed, with the specific questions I have. In this question relating to reading data from a…
Steve Crane
  • 4,340
  • 5
  • 40
  • 63
6
votes
1 answer

Access certificate and private key from pkcs#11 token or smart-card

I am making an application, in C#4, that has to sign a XML file. I'd no great problems, until I bumped into this: accessing a smart-card/token to get its certificates and private keys. Nothing really out of the box, just get the certificate and key,…
marcelo-ferraz
  • 3,147
  • 4
  • 38
  • 55
6
votes
2 answers

Establish resource manager context to use smart card reader

I'm developing a c++ application, using Visual Studio 2017. I'm using the windows library winscard. I'm starting with a simple project where i'm calling the function SCardEstablishContext as the first step needed to read a smart card. The snippet…
S.Orioli
  • 443
  • 6
  • 21
6
votes
2 answers

Why real POS-terminals don't using PSE (2PAY or 1PAY)?

I experimented with two real terminals, via EMV contact (not contactless) way, and no one using PSE or PPSE to obtain a AID, as defined in EMV specification. Both terminals just directly trying a set of AIDs with SELECT command until ICC will answer…
6
votes
1 answer

Windows will not pass smart card information to browsers

I'm having an issue where when trying to connect to my employer's website from my home computers I'm not getting prompted for my smart card credentials whenever I'm using my laptop, however when I'm using my desktop the prompts appear and smart card…
6
votes
3 answers

How to preserve data when updating Java Card / GlobalPlatform applet?

How can I update a Java Card applet that contains data that need to be preserved across versions? As best as I can tell updating an applet is done by deleting it and then installing the new version, which seems like it would also delete any…
scott
  • 1,127
  • 1
  • 12
  • 21
6
votes
1 answer

What is the IP address of the web server in Java Card 3.0 connected version?

When we run a web server in a java card 3.0 compatible card, how can we request that server or rather at which IP address do we request that server. Further more can an android app request and get a response from the server if so how can we do it ?
6
votes
1 answer

Reading EMV card's serial number

I am trying to read an EMV card. As specified for EMV cards, a tag called "9F1E", holds a permanent serial number specified by the issuer (see https://www.eftlab.co.uk/index.php/site-map/knowledge-base/145-emv-nfc-tags). However, I could not…
bafla
  • 1,029
  • 1
  • 10
  • 14
6
votes
2 answers

How to read file from smart card using java

I am new in smart card technology. I want to read file from smart card. I am using javax.smartcardio to read value. I developed some code to connecting system to card (That's work fine). I have card ATR and other detail also. But not getting proper…
Krunal Indrodiya
  • 782
  • 2
  • 7
  • 19
6
votes
5 answers

Accessing smart card with Java

I'm trying to learn about how does Java access smart cards, due to a project analysis. I wonder if there is any kind of virtual smart card which I could use to make some tests with Java? By the way, I've read about Java Card, and looks like it is…
The Student
  • 27,520
  • 68
  • 161
  • 264
6
votes
1 answer

Javacard - power loss during garbage collection

I noticed some very strange behaviour on my smartcards (NXP J2E145, J3A081, J3C145 with an Omnikey 5121 reader): A power loss right after calling JavaCard method JCSystem.requestObjectDeletion() can damage the card: after about 10% of such power…
vojta
  • 5,591
  • 2
  • 24
  • 64
6
votes
1 answer

Getting started with SIM card

I want to start working with cell-phones and SIM cards. I searched a lot in the internet but still I have some problem! I want to know : 1. What is the difference between (U)SIM cards and Smart Cards? As I know, SIM and USIM, both are a kind of…
TheGoodUser
  • 1,188
  • 4
  • 26
  • 52