Smart Cards .

17
• Smart Cards https://store.theartofservice.com/the-smart-cards- toolkit.html

Transcript of Smart Cards .

Page 1: Smart Cards .

• Smart Cards

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 2: Smart Cards .

Security token - Smart cards

1 Many connected tokens use smart card technology. Smart cards can be very cheap (around ten cents) and contain proven security mechanisms (as used

by financial institutions, like cash cards). However, computational

performance of smart cards is often rather limited because of extreme low

power consumption and ultra thin form-factor requirements.

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 3: Smart Cards .

Security token - Smart cards

1 Smart-card-based USB tokens which contain a smart card chip inside provide the

functionality of both USB tokens and smart cards. They enable a broad range of security

solutions and provide the abilities and security of a traditional smart card without requiring a unique input device. From the

computer operating system's point of view such a token is a USB-connected smart card reader with one non-removable smart card

present.

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 4: Smart Cards .

Reverse engineering - Reverse engineering of integrated circuits/smart cards

1 Welz: [http://www.crypto.rub.de/its_semina

r_ws0708.html Smart cards as methods for payment] (2008),

Seminar ITS-Security Ruhr-Universität Bochum

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 5: Smart Cards .

Smart card - Contact smart cards

1 Contact smart cards have a contact area of approximately , comprising several gold-plated contact pads. These pads provide

electrical connectivity when inserted into a Card reader|reader, which is used as a communications medium between the

smart card and a host (e.g., a computer, a point of sale terminal) or a mobile

telephone. Cards do not contain Battery (electricity)|batteries; power is supplied by

the card reader.https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 6: Smart Cards .

Smart card - Contact smart cards

1 Communication protocols for contact smart cards include T=0 (character-level transmission protocol, defined in ISO/IEC 7816-3) and T=1 (block-level transmission protocol, defined

in ISO/IEC 7816-3).

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 7: Smart Cards .

Smart card - Contactless smart cards

1 Like smart cards with contacts, contactless cards do not have an

internal power source. Instead, they use an inductor to capture some of

the incident radio-frequency interrogation signal, rectifier|rectify

it, and use it to power the card's electronics.

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 8: Smart Cards .

List of smart cards

1 Example of widely used contactless smart cards are London's Oyster card, Hong Kong's Octopus card,

Stockholm's SL Access|Access card, Japan's Suica and Pasmo cards,

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 9: Smart Cards .

List of smart cards

1 Nigeria's [http://www.lagbus.com.ng/index.html/

ETC Card], Paris' Calypso (electronic ticketing system)|Calypso/Navigo pass|

Navigo, the Dutch OV-Chipkaart and Lisbon's LisboaViva card, which predate

the ISO/IEC 14443 standard. The following tables list smart cards used for public transportation and other electronic

money|electronic purse applications.

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 10: Smart Cards .

Hardware token - Smart cards

1 Smart-card-based USB tokens which contain a smart card chip inside

provide the functionality of both USB tokens and smart cards

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 11: Smart Cards .

Wireless security - Smart cards, USB tokens, and software tokens

1 Companies in this area make USB tokens,

software tokens, and smart cards

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 12: Smart Cards .

Wireless security - Smart cards, USB tokens, and software tokens

1 Currently the safest security measures are the smart cards / USB

tokens. However, these are expensive. The next safest methods

are WPA2 or WPA with a RADIUS server. Any one of the three will

provide a good base foundation for security.

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 13: Smart Cards .

Multifactor authentication - Smart cards

1 Some vendors offer smart cards that perform both the function of a

proximity card physical access device and network authentication

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 14: Smart Cards .

Multifactor authentication - Smart cards

1 Alternatively, USB smart card readers are available which are no more

expensive than many display tokens, in fact, some smart cards have an

interface which is electrically (but not mechanically) USB, so that the reader needs no intelligence

whatsoever and consequently can be very cheap

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 15: Smart Cards .

Multifactor authentication - Smart cards

1 Another concern when deploying smart cards, USB tokens, or other TFA systems is the security of the

software loaded on to users' computers. A token may store a

user's credentials securely, but the potential for breaking the system is

then shifted to the software interface between the hardware token and the OS, potentially rendering the added security of the TFA system useless.

https://store.theartofservice.com/the-smart-cards-toolkit.html

Page 16: Smart Cards .

Multifactor authentication - Smart cards

1 The downsides of smart cards include that they are not the smallest form factor

(although they do fit conveniently in a wallet) and that the card reader is an extra

expense. Another disadvantage is that they are less robust than most other forms

of token. Repeated flexing can damage both contact and contactless smart cards,

and adverse climatic conditions can reduce the reliability of contact smart cards.

https://store.theartofservice.com/the-smart-cards-toolkit.html