Java Card Technology: The Foundations of NFC
-
Upload
eric-vetillard -
Category
Technology
-
view
272 -
download
2
Transcript of Java Card Technology: The Foundations of NFC
Introduction
Presentation agenda
● Introduction to the Java Card Forum
● The Java Card 3 platform
● Java Card 3 Technology in the NFC ecosystem
● Conclusion
Secure element interoperability is key to the quality of services
Source: Observatoire du NFC et du sans-contact
Java Card Forum at a glance
o Mission: Develop and promote Java as the preferred
programming language for multiple-application smart cards
• 1999: Java Card 2.1 Interoperable File Format
• 2006: Java Card 2.2.2 ETSI
• 2008: Java Card 3.0 first spec
• 2011: First deployments of Java Card 3.01 classic
• 2013: Java Card 3 is in its maturity phase
SmartCard Vendors Silicon Industry + + Oracle
Java Card Market Footprint is expanding
● over 2.1B Java cards shipped in 2012
● 100% of all known NFC Card Emulation chips run Java
Card.
● Huge growth in Java Card contactless payment cards
hitting in 2013
● forecast is that Java Card payment cards will increase at a
minimum of 50% over current 2012 volumes.
The initial rationale for Java Cards
Overcoming the drawbacks of proprietary systems:
● Proliferation of non-compatible operating systems and
applications
● Higher costs to launch, change or upgrade applications
● Need for specialized skills to develop applications
● More difficult to handle multi-sourcing
● Extended time to market due to integration issues
Applet Applet
Java Card API
Java Card Run Time
Environment
Java Virtual Machine
OS and Hardware
Applet
Java Card in NFC
• Java Card available on all form factors
• Industry-wide binary compatibility
Foundation for interoperability
• Starting from Java Card APIs
• Adding GlobalPlatform APIs (incl. Amdt C)
• Adding vertical APIs (ETSI, 3GPP, Mifare, …)
Full range of APIs
• A complete testing offer available
• Development and consulting offer
• Security labs and certification authorities
Complete ecosystem
Java Card Certification
● Developed special tool for Java Card
● “Java Card Test Vehicle” to evaluate ITSEFs
● Focusing uniquely on Java Card security
2011 2012 2013
Total 34 28 2
Java Card 30 14 2
JC Platforms 6 6 1
Certified Smart Card Products
Java Card Security Interoperability
Java Card Platform
Sensitive
Applet
Basic
Applet
Certification by composition
● Limited security portability
● Depends on platform guidelines
One-time certification
● Based on platform properties
● Based on common guidelines
Java Card platform ongoing work
● Better security properties of APIs
● Promotion of basic guidelines
Java Card targets
● Any contactless card
- From a specific app
● Making any card a tag
- Add a NDEF app
- Use as trigger
- Include security
SE Access API
● Mandatory for wallets
● Made available in some
contexts
● Useful for all NFC apps
- Card emulation
- NFC reading
The Other Sides of Java Card in NFC
Conclusion
● The Java Card 3 Platform comes with integrated support of
NFC and enhancements in applications support
• Java Card is present in 100% of NFC platforms, in all form factors
● NFC applications require:
• A stable and secure platform
• Interoperability across many platforms
• Certified platforms and application
• Remote manageability
● Java Card 3 is the platform of choice to make NFC grow
• Be ambitious with Java Card
• Think about Java Card outside of the box
• Let us know about any bottleneck you encounter
Eric Vétillard Java Card Product Manager
JCF Representative
Oracle
Thank you !