Smart card

Dharmendra singh
Deepanshu gupta
 Plastic card
• A plastic card having a magnetic strip, issued
by a bank or business authorizing the holder
to buy goods or services on credit.

• Size of plastic card 3.6’’wide*2.1” high

 Smart Cards
• Smart cards are credit card-sized plastic cards with
embedded memory, widely used for applications
such
• as access control, authentication, and security key
storage.
• Cards have an operating system too.
• The OS provides
– A standard way of interchanging information
– An interpretation of the commands and data.
• Cards must interface to a computer or terminal
 History
History of
of Smart
Smart Cards
Cards
• Smart Card has its origin in 1970s by inventors from
• Germany, Japan and France.
• Until mid 80s most of the work on Smart Cards was at
the research and development level.
• First mass use was for payment in French payphones.
• The current world population of Smart Cards is nearly
3billion.
• The manufacturers of Smart Cards are Gemplus, IBM,
Siemens, Telesec and many more//////
 What is SMART about the
Smart Card ??
• Smart Cards are capable of not just storing data but
also have processing power.
• They have larger storage capacity when compared
to magnetic swipe cards.
• The data stored can be protected against
unauthorized access …
• They are appropriate for secure and convenient
data storage.
• Smart cards have the property of multifunctionality
 Types
Types of
of Smart
Smart Cards
Cards
• Based on the way the smart card interacts
with the Reader, smart cards are of two types
• Contact Smart Cards: These require insertion
into the Card reader.
• Contact less Smart Cards: These require close
Continued..
Continued..
 Continued
Continued
• the contact smart card consists of small contact plate
on the face, which is ½’’ in Diameter.
• The transmission of data takes place when this contact
plate comes in contact with the connector of the
reader.
• in contactless……
• This card consists of an IC Chip and an antenna coil
embedded into it.
• These cards are mainly used when transactions must
be processed quickly.
 Categories of Smart Cards
• Based on the type of IC chip embedded on the
Smart Card,
• they are categorized into three types
• ** IC Micro Processor Cards
• **IC Memory Cards
• ** Optical Memory Cards
Smart Cards devices
 What’s in a Card?

CLK RST
Vcc
RFU

GND

RFU
Vpp
I/O
 Typical Configurations
• 256 bytes to 4KB RAM.
• 8KB to 32KB ROM.
• 1KB to 32KB EEPROM.
• Crypto-coprocessors (implementing
3DES, RSA etc., in hardware) are
optional.
• 8-bit to 16-bit CPU. 8051 based designs
are common.
 Smart Card Readers

 Computer based readers

Connect through USB or COM (Serial)
ports

• Dedicated terminals
Usually with a small screen,
keypad, printer, often also
have biometric devices such as
thumb print scanner.
 Smart Card Standards

oISO7816 is the international standard for Smart Cards that

use electrical contacts.
With this standard, Smart Cards could communicate with the
Reader using the same protocol.
oThe ISO7816 standards are separated in 3 different parts.
on ISO7816-1: defines the physical characteristics of the
card.
on ISO7816-2: defines the dimension and contact position of
othe card.
on ISO7816-3: defines the electrical signals and transmission
oprotocols.
 SLE-4442
• the SLE-4442 Secure Memory Card is one of
the most popular "Smart Memory Cards" in
the world.
 Intelligent 256 Byte EEPROM with Write
Protect Function and Programmable Security
Code (PSC)
 FEATURES:
• Byte wise addressing
• 32 bit protection memory
• ISO standard compliant
• 3-Byte PSC
 OPERATING PROCEDURE
• the communication between the smart card and the
interfacing devices involves the following steps:
• Insertion of the smart card in the slot.
• Detection of the smart card insertion by the interfacing
device (i.e., microcontroller).
• Cold reset of the smart card by the interfacing device.
• Answer to Reset (ATR) response by the card to the
microcontroller.
• Protocol and Parameter Selection (PPS) exchange between
the smart card and the microcontroller (if the smart card
supports PPS).
 Continue..
• Execution of the command(s) between the smart card and the interfacing device.
• Removal of the smart card from the slot.
• Detection of the smart card removal by the microcontroller.
• Deactivation of the smart card contacts by the microcontroller.
• After the detection of a smart card in the appropriate slot through a mechanical
contact, the interfacing
• device has to perform a Cold Reset of the smart card using the following steps:
• 1. Pull the RST line to low state.
• 2. Pull the VCC line to high state.
• 3. The UART module in the interfacing device should be in the Reception mode in
the software.
• 4. Provide the clock signal at CLK line of the smartcard.
• 5. The RST line has to be in the low state for at least 400 clock cycles after the
clock signal is
• applied at CLK pin. Therefore, give a delay for at least 400 clock cycles after
providing the clock at CLK pin of the smart card.
• 6. Pull the RST line to high state
Reset and ATR
Memory Overview
Operating Mode
Operating Mode
Command Format
 Programmable Security Code

Reference data PSC is 3-bytes of Reference data used along

Reference data with 1-byte of error counter
Reference data
Error counter
Verification Procedure
Verification Procedure
Program Execution (Smart_Card.exe)
continue
continue
continue
Continue
Continue
 Data storage
Data is stored in smart cards in E2PROM
– Card OS provides a file structure
mechanism

MF File types
Binary file (unstructured)
DF DF EF EF
Fixed size record file
DF EF Variable size record file

EF EF
 File Naming and Selection
• Each files has a 2 byte file ID and an optional 5-bit SFID (both
unique within a DF). DFs may optionally have (globally unique) 16
byte name.
• OS keeps tack of a current DF and a current EF.
• Current DF or EF can be changed using SELECT FILE command.
Target file specified as either:
– DF name
– File ID
– SFID
– Relative or absolute path (sequence of File IDs).
– Parent DF
 Basic File Related Commands
• Commands for file creation, deletion etc., File size and
security attributes specified at creation time.
• Commands for reading, writing, appending records,
updating etc.
– Commands work on the current EF.
– Execution only if security conditions are met.
• Each file has a life cycle status indicator (LCSI), one of:
created, initialized, activated, deactivated, terminated.
 Access control on the files
• Applications may specify the access controls
– A password (PIN) on the MF selection
• For example SIM password in mobiles
– Multiple passwords can be used and levels of
security access may be given
• Applications may also use cryptographic
authentication
 An example scenario (institute ID card)
Ef(each file)
What happensRead:if Free
the user forgets
Select: P2 hisSecurity requirements:
Write: upon
password? verification
verification EF1 (personal data) by K1, K2 or K3
EF1:
Solution1: Add supervisor
Name: Rajat Moona
PF/Roll: 2345 password
Should be modified only by
MF the DOSA/DOFA/Registrar
Solution2: AllowFree
Read:
EF2 (Address) DOSA/DOFA/Registrar
Write:
Readable Password to modify
to all
#320, CSE (off) EF3 Verification (P1)
EF2:
475, IIT (Res) Solution3: Allow both to happen
Card holder should be able to
modify
EF3 (password) EF4 (keys)
EF3 (password) K1 (DOSA’s key)
P1 (User password) Read: Never
P1 (User password) K2 (DOFA’s key)
P2 (sys password) Write: Once
K3 (Registrar’s key)

Read: Never
Write: Password
Verification (P1)
 Applications of Smart Cards
• In Banks: They are used as credit/debit bank cards
• Medical applications: they can be used as Health
insurance card or Medical File Access Card.
• In Transportation Services: for urban parking,
Airline Application and Electronic Toll Collection.
• In Telecommunications: The smart cards contain
the phone number on the network, billing
information and call numbers.
• used as identification cards
 Future Aspects
• Soon it will be possible to access the data in Smart cards by
the use of Biometrics.
• Smart card Readers can be built into future computers or
peripherals
• which will enable the users to pay for goods purchased on the
internet.
• In the near future, the multifunctional smart card will replace
the traditional magnetic swipe card.
• Smart Card is not only a data store, but also a programmable,
portable,
• tamper resistant memory storage.
 References
• 1.http://www.ewh.ieee.org/r10/bombay/news5/SmartCards.htm
• 2.http://www.smartcardbasics.com/overview.html
• 3.http://www.smartcardsupply.com/Content/Cards/7816standard.
htm
• 4.http://www.mobilein.com/smart_cards.htm
• 5.http://www.cardwerk.com/smartcards/smartcard_technology.asx
• 6.Data sheet of SLE4442 chip
• 7.http://www.smartcardindia.org
• 8.Smart Card Hand book
• 9.www.hitachi.co.jp/.../ service/2004034_12381.html
• 10.www.itsdocs.fhwa.dot.gov/.../ REPTS_TE/13769.html