Questions tagged [smartcard]

A smartcard is a card with an embedded chip that may store cryptographic keys and/or perform cryptographic functions. Smartcards are often use as employee ID badges or in contactless credit/debit cards.

Smartcards used for cryptographic functions such as identity verification, signing, and decryption are usually designed so that the cards can generate their own cryptographic public/private key pairs, such that the private key cannot be removed or exported from the card. Using a smartcard to decrypt or sign a piece of data is usually protected by a PIN or passcode.

If you receive a message, whose signature can be validated using the public key, then you know that the message could only have been signed using the private key stored on the smartcard, which means that the message came from someone having physical possession of the smartcard and who knows the PIN or passcode required to use the smartcard. Having the decryption key on the card directly enforces, that without card and PIN knowledge just the encrypted message is available.

SIM cards used in mobile phones are also smart cards, proving an existing account towards network and storing phone numbers and text messages.

EMV cards (also known as "chip and pin") use smartcards to increase security and decrease fraud. The EMV standard, and its test cases, are governed by EMVCo.

Smartcards have a dedicated standard: ISO/IEC 7816 that describes what defines a smartcard from physical characteristics to cryptographic information application, including protocols and commands.

Contactless smart card (such as PayPass and payWave etc) are covered by ISO/IEC 14443; that describe the physical characteristics of the card, power and signal interfaces, transmission and collision detection, and transmission protocols.

EMV cards are also issued with "dual" interfaces that use the same chip on the card and two external interfaces.

1917 questions
6
votes
3 answers

Determine card type from ATR

Is it possible using ATR to determine whether I have ISO14443A or ISO14443B type card? If yes, how?
user2793162
6
votes
1 answer

Read DIN (Driver Identification Number) from a smart card (drivercard)

I'd like to know how to get a DIN (Driver Identification Number) from a smartcard. The card is a driver card, used to store tachograph data. I can already communicate with the smartcard reader but I don't have a clue about how to read that…
Not Important
  • 762
  • 6
  • 22
6
votes
1 answer

Secure Com SCP02 Session : What is the role of "Key Diversification data" returned in response of Initialized Update command

In response field of Initialized Update command, Key Diversification data (which contains manufacture ID and last two bytes of security domain AID) is returned to Off Card entity. I would like to know for what purpose this data is used ? I read…
Bhanu
  • 663
  • 5
  • 13
6
votes
2 answers

How to provide PIN to access smartcard programmatically?

I'm using certificates to secure my communications between client and server (no code, just endpoint configuration). Certificates are currently stored in ACOS5 smart cards. Everything works very well except that every time when WCF creates a new…
Andrii Shvydkyi
  • 2,236
  • 1
  • 14
  • 19
6
votes
2 answers

How to send response APDU containing return data AND status word other than 0x9000?

I would like to send a response APDU containing a response data field as well as a status word that is not 0x9000. Considering my understanding of ISO 7816-4 this should be possible in general. However, whenever I specify return data and try to send…
Thomas Lieven
  • 371
  • 4
  • 14
6
votes
3 answers

How to send APDU commands to a smartcard using Windows Phone 8 NFC application

I need to build a Windows Phone 8 application that can communicate with a smartcard using simple APDU commands. The smartcard contains data which my application needs to present on the phones UI. We currently have Android and IOS apps doing this,…
Nick Wright
  • 1,403
  • 13
  • 19
6
votes
2 answers

BER-TLV open source library for Objective-C

I intend to parse BER-TLV format from smart card response to interpret the data. it similar like JACCAL, but in Objective-C or C++ Can anyone give reference any open source project or any reference to do this?
HelmiB
  • 12,303
  • 5
  • 41
  • 68
6
votes
1 answer

How to read credentials from a SmartCard in c#

In my organization, users must use SmartCard for interactive login to a Windows stations (95,Vista and 7). almost daily, we need to read the credentials stored in the SmartCard and compaire them with the ActiveDirectory, without implementing a…
Hamed Salameh
  • 223
  • 1
  • 5
  • 13
6
votes
1 answer

android - java.lang.SecurityException: Connection refused

Im new to UICC and Secure Elements and I tried to do a simple android application using this tutorial (http://code.google.com/p/seek-for- android/wiki/UsingSmartCardAPI) to connect the Secure Elements. When I run the application it throw an…
chinna_82
  • 6,353
  • 17
  • 79
  • 134
5
votes
3 answers

Android SSL with a Smart Card through PKCS#11

The reason that this question was born is that I am totally lost, so please forgive the trivial and senseless parts. I have an Android app, a web-service, a MicroSD smart card (mobile security card). I need to know how can I use the card with ssl to…
Vincent
  • 1,027
  • 1
  • 11
  • 20
5
votes
1 answer

How to install applet on smart card using java

Is there any way to load .cap(converted applet) design in java card in to java and then install applet from that .cap(converted applet) file into smart card? I am having .cap file that is converted applet file and i want to install applet present in…
Sachin D
  • 1,370
  • 7
  • 29
  • 42
5
votes
3 answers

What is the meaning of 6E 00 when I send a command to a SmartCard

I try to access a SmartCard via C++. I got already the Connection and the CardHandle. But when I send an APDU Command via SCardTransmit, i'll get 6E 00 as the answer from the card. No matter which APDU Command i send. Everytime 6E 00. For…
Pusher
  • 53
  • 1
  • 4
5
votes
2 answers

Go: HTTPS Request using a Client Certificate stored on a SmartCard (Windows)

To perform client certificate authentication (mutual authentication) all examples I've found assume that a private key is accessible (e.g. from a file). A certificate containing private and public key is generated like this: cert, err :=…
Knack
  • 1,044
  • 2
  • 12
  • 25
5
votes
2 answers

Certificates from SmartCard in C#

How can I ensure to I am accesing the Certificates from my SmartCard and not form my personal certificate store in c#? and How can I make my RSACryptoProvider to utilize my smart card certificate private key? thanks Wally
Walther
5
votes
1 answer

Can I program eSIM/eUICC devices with Java Applets

From my research on embedded SIM (eSIM) technology, it's a SIM card that the consumer owns and is capable of downloading and switching between 3rd party subscriptions. I've also read it's expected that most eSIMs will run a Java Runtime and support…
Conor Patrick
  • 2,879
  • 5
  • 22
  • 33