Research And Development Of Dynamic Multi-application Management In Smart Card

The smart card technology is applied widely to such fields as the finance, communication, social security, etc. Dynamic multi-application card (DMAC) leads the trend of the development in smart card. Dynamic multi-application card can hold a lot of applications, and the users can use different applications in different occasions. On the premise of ensuring the security of the applications on the smart card, the key problems include dynamic downloading, updating and deletion of applications. The research on multi-application management has been done in this thesis from two aspects of on-card and off-card according to the concrete demand of dynamic multi-application smart card in China on the basis of studying dynamic multi-application card technology at present. (1) The key technology of the off-card multi-application management is discussed. The function and inter reaction of four pairs of key encryption key in the platform are shown in detail. This thesis designs a new key procedure of multi-application management: making ALU (Application Load Unit) and AOC (Application Operation Certificate), loading ALU and AOC. Then the design of the ALU and AOC is also given in detail. The security mechanism of dynamic downloading, updating and deletion of applications is analyzed. And the multi-application management platform is built. (2) The key technology of the on-card multi-application management is discussed. The structure of application memory and application REGEDIT is given. The mechanism of application's selection and application firewall is analyzed. The process and security of dynamic downloading, updating and deletion of applications are discussed in detail. The concise ALU and AOC are designed in terms of Public Key Infrastructure, then the dynamics and security of dynamic downloading, updating and deletion of applications are assured. Finally, the concrete course is described in detail with the instance of an electronic purse (E-purse). Thus, DMAC's dynamics and security have been verified.