Java card architecture for autonomous yet secure evolution of smart cards applications

O. Gadyatskaya; F. Massacci; F. Paci; S. Stankevich

doi:10.1007/978-3-642-27937-9_13

Java card architecture for autonomous yet secure evolution of smart cards applications

O. Gadyatskaya, F. Massacci, F. Paci, S. Stankevich

Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

Abstract

Open multi-application smart cards that allow post-issuance evolution (i.e. loading of new applets) are very attractive for both smart card developers and card users. Since these applications contain sensitive data and can exchange information, a major concern is the assurance that these applications will not exchange data unless permitted by their respective policies. We suggest an approach for load time application certification on the card, that will enable the card to make autonomous decisions on application and policy updates while ensuring the compliance of every change of the platform with the security policy of each application's owner. © 2012 Springer-Verlag.

Original language	English
Title of host publication	Information Security Technology for Applications - 15th Nordic Conference on Secure IT Systems, NordSec 2010, Revised Selected Papers
Pages	187-192
DOIs	https://doi.org/10.1007/978-3-642-27937-9_13
Publication status	Published - 2012
Externally published	Yes
Event	15th Nordic Conference on Secure IT Systems, NordSec 2010 - , Finland Duration: 27 Oct 2010 → 29 Oct 2010

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	15th Nordic Conference on Secure IT Systems, NordSec 2010
Country/Territory	Finland
Period	27/10/10 → 29/10/10

Access to Document

10.1007/978-3-642-27937-9_13

Persistent URL (handle)

Copy link address

Cite this

Gadyatskaya, O., Massacci, F., Paci, F., & Stankevich, S. (2012). Java card architecture for autonomous yet secure evolution of smart cards applications. In Information Security Technology for Applications - 15th Nordic Conference on Secure IT Systems, NordSec 2010, Revised Selected Papers (pp. 187-192). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). https://doi.org/10.1007/978-3-642-27937-9_13

Gadyatskaya, O. ; Massacci, F. ; Paci, F. et al. / Java card architecture for autonomous yet secure evolution of smart cards applications. Information Security Technology for Applications - 15th Nordic Conference on Secure IT Systems, NordSec 2010, Revised Selected Papers. 2012. pp. 187-192 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{f6dbc3c2a4b04302a5d81fa34abbf84b,

title = "Java card architecture for autonomous yet secure evolution of smart cards applications",

abstract = "Open multi-application smart cards that allow post-issuance evolution (i.e. loading of new applets) are very attractive for both smart card developers and card users. Since these applications contain sensitive data and can exchange information, a major concern is the assurance that these applications will not exchange data unless permitted by their respective policies. We suggest an approach for load time application certification on the card, that will enable the card to make autonomous decisions on application and policy updates while ensuring the compliance of every change of the platform with the security policy of each application's owner. {\textcopyright} 2012 Springer-Verlag.",

author = "O. Gadyatskaya and F. Massacci and F. Paci and S. Stankevich",

year = "2012",

doi = "10.1007/978-3-642-27937-9_13",

language = "English",

isbn = "9783642279362",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

pages = "187--192",

booktitle = "Information Security Technology for Applications - 15th Nordic Conference on Secure IT Systems, NordSec 2010, Revised Selected Papers",

note = "15th Nordic Conference on Secure IT Systems, NordSec 2010 ; Conference date: 27-10-2010 Through 29-10-2010",

}

Gadyatskaya, O, Massacci, F, Paci, F & Stankevich, S 2012, Java card architecture for autonomous yet secure evolution of smart cards applications. in Information Security Technology for Applications - 15th Nordic Conference on Secure IT Systems, NordSec 2010, Revised Selected Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), pp. 187-192, 15th Nordic Conference on Secure IT Systems, NordSec 2010, Finland, 27/10/10. https://doi.org/10.1007/978-3-642-27937-9_13

Java card architecture for autonomous yet secure evolution of smart cards applications. / Gadyatskaya, O.; Massacci, F.; Paci, F. et al.
Information Security Technology for Applications - 15th Nordic Conference on Secure IT Systems, NordSec 2010, Revised Selected Papers. 2012. p. 187-192 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Java card architecture for autonomous yet secure evolution of smart cards applications

AU - Gadyatskaya, O.

AU - Massacci, F.

AU - Paci, F.

AU - Stankevich, S.

PY - 2012

Y1 - 2012

N2 - Open multi-application smart cards that allow post-issuance evolution (i.e. loading of new applets) are very attractive for both smart card developers and card users. Since these applications contain sensitive data and can exchange information, a major concern is the assurance that these applications will not exchange data unless permitted by their respective policies. We suggest an approach for load time application certification on the card, that will enable the card to make autonomous decisions on application and policy updates while ensuring the compliance of every change of the platform with the security policy of each application's owner. © 2012 Springer-Verlag.

AB - Open multi-application smart cards that allow post-issuance evolution (i.e. loading of new applets) are very attractive for both smart card developers and card users. Since these applications contain sensitive data and can exchange information, a major concern is the assurance that these applications will not exchange data unless permitted by their respective policies. We suggest an approach for load time application certification on the card, that will enable the card to make autonomous decisions on application and policy updates while ensuring the compliance of every change of the platform with the security policy of each application's owner. © 2012 Springer-Verlag.

U2 - 10.1007/978-3-642-27937-9_13

DO - 10.1007/978-3-642-27937-9_13

M3 - Conference contribution

SN - 9783642279362

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 187

EP - 192

BT - Information Security Technology for Applications - 15th Nordic Conference on Secure IT Systems, NordSec 2010, Revised Selected Papers

T2 - 15th Nordic Conference on Secure IT Systems, NordSec 2010

Y2 - 27 October 2010 through 29 October 2010

ER -

Gadyatskaya O, Massacci F, Paci F, Stankevich S. Java card architecture for autonomous yet secure evolution of smart cards applications. In Information Security Technology for Applications - 15th Nordic Conference on Secure IT Systems, NordSec 2010, Revised Selected Papers. 2012. p. 187-192. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-642-27937-9_13

Java card architecture for autonomous yet secure evolution of smart cards applications

Abstract

Publication series

Conference

Access to Document

Persistent URL (handle)

Fingerprint

Cite this