Questions tagged [smartcard]

A smartcard is a card with an embedded chip that may store cryptographic keys and/or perform cryptographic functions. Smartcards are often use as employee ID badges or in contactless credit/debit cards.

Smartcards used for cryptographic functions such as identity verification, signing, and decryption are usually designed so that the cards can generate their own cryptographic public/private key pairs, such that the private key cannot be removed or exported from the card. Using a smartcard to decrypt or sign a piece of data is usually protected by a PIN or passcode.

If you receive a message, whose signature can be validated using the public key, then you know that the message could only have been signed using the private key stored on the smartcard, which means that the message came from someone having physical possession of the smartcard and who knows the PIN or passcode required to use the smartcard. Having the decryption key on the card directly enforces, that without card and PIN knowledge just the encrypted message is available.

SIM cards used in mobile phones are also smart cards, proving an existing account towards network and storing phone numbers and text messages.

EMV cards (also known as "chip and pin") use smartcards to increase security and decrease fraud. The EMV standard, and its test cases, are governed by EMVCo.

Smartcards have a dedicated standard: ISO/IEC 7816 that describes what defines a smartcard from physical characteristics to cryptographic information application, including protocols and commands.

Contactless smart card (such as PayPass and payWave etc) are covered by ISO/IEC 14443; that describe the physical characteristics of the card, power and signal interfaces, transmission and collision detection, and transmission protocols.

EMV cards are also issued with "dual" interfaces that use the same chip on the card and two external interfaces.

1917 questions
0
votes
1 answer

Cheap DIY Desfire EV1 reader to identify students

I would like to build a (cheap) device to identify students at my university using their Student Card (called "ISIC"). My Phone (via its NFC reader on Android) tells me that these cards are : NXP MIFARE DESFire / NXP MIFARE DESFire EV1 So far, I've…
0
votes
1 answer

External signature on a smart card

I am using a smart card that is signing a SHA-1 hash of a document, and compute a 256 bytes digital signature. I am using the code posted on this question - iText signing PDF using external signature with smart card. My problem is that I get the…
GLC
  • 3
  • 3
0
votes
1 answer

C# - Windows Service EventMonitor function with parameters

I'm using PCSC library for SmartCard Readers events detection and trying to use it in Windows service. Readers search function: private void CheckPresentReaders() { using (var context = new SCardContext()) { …
Ivan Temchenko
  • 814
  • 1
  • 9
  • 12
0
votes
0 answers

C# Get username from identity if smart card is inserted

I have a MVC project that users currently can log into automatically via their identity. The users of this website can only log into their computers by using a smart card, therefor i simply use HttpContext.User.Identity.Name to get their username in…
Lord Vermillion
  • 5,264
  • 20
  • 69
  • 109
0
votes
1 answer

HSM via SunPKCS11 works on command line, fails in Tomcat-hosted webapp

I have an application running under Tomcat 9, using JDK 1.8.0_111 as the runtime, on Windows 7 x64, that's trying to use a NitroKey HSM through the SunPKCS11 CSP and the OpenSC driver. This works fine from the command line, including from a shell…
0
votes
1 answer

HOW TO PARSE ATR String in Android

Good day all, i am tasked to develop an application in android that basically functions by reading data from the chip of a smart caard. That is "easy enough" i initially thought. My workplace purchased some android devices with integrated card…
ewom2468
  • 821
  • 3
  • 14
  • 44
0
votes
1 answer

Why do we need multiple SAM slots?

A Security Access Module Chip can hold up to 128 keys. So what is the use of having multiple SAM slots in a device / POS terminal? Is it only for the purpose of separation of concerns?
San
  • 542
  • 6
  • 21
0
votes
0 answers

How to interact with a User's Smart Card from my Website?

I have a web server that is hosting my website. I would like to interact with a client's smart card. To communicate with a Java Smart Card, requires java libraries. So i have implemented a java program that scans the respective computer for a card…
Benji Weiss
  • 406
  • 2
  • 6
  • 19
0
votes
1 answer

Need to read certificate from smart card x509 oberthur c#

i've got some issue on reading certificates from a new smart card with a BluDrive II card reader. With old smart card no problem, but with the newest no certificate are discovered inside the card. With bit4id software i'm able to read all the cards…
0
votes
1 answer

getting extra bytes 82 00 in pc/sc response

I am trying to read data from sony felica card using pc/sc transparent session and transceive data object. The response I am getting is for a read without encryption command is c0 03 00 90 00 92 01 00 96 02 00 00 97 82 00 + Data But according to…
Aditya_Anand
  • 525
  • 7
  • 17
0
votes
1 answer

How to digitally sign Open Office XML document in client-server paradigm with ASP .NET webservices?

I want to create a web application that can access a smart card with a digital certificate, and then digitally sign an open office XML document on the server. I know a couple of open source frameworks that do this in Java, but the client requires me…
0
votes
1 answer

I can't select MF on credit card

I'm trying the following APDU: 00 A4 00 00 02 3F 00 00 Everything is according to ISO 7816-4 (7.1.1), but execution fails with SW 0x6A86 (Incorrect parameters P1-P2) Why? What I'm doing wrong? Standard states as follows: If P1 is set to '00',…
Sergey Stolyarov
  • 2,587
  • 3
  • 27
  • 40
0
votes
2 answers

Why am i receiving either input data length != Lc or SW1 SW2: 6700 when testing read and write APDU's in the console of the CREF JavaCard simulator?

I wonder if anyone can help me please as I am very new to Java?! I have a read/ write applet which i developed from the code here (basically the same, just the instruction codes and applet name changed)…
0
votes
2 answers

What's wrong with this Verify APDU command?

I've got the following Verify (PIN) APDU command, that we send to the Gemalto SafeNet Reader K1100: 00 20 00 81 08 26 12 34 56 ff ff ff ff I always get the response 67 00 (wrong length). As far as I know this means that either LC or LE is incorrect.
0
votes
0 answers

Make terminal wait for card to perform action

We have this code (probably based on something that is found on the net) which asks the card reader to connect and perform actions but we would like to change it into something which waits for the card to touch the reader to perform an action.…
Sandah Aung
  • 6,156
  • 15
  • 56
  • 98
1 2 3
99
100