The Research On Java Card Development And Application Technique

Information security incorporates a wide range including authentication, identification, authorization, message integrity, confidentiality and non-repudiation. Cryptography provides the foundation for information security. The security program builds largely upon sound cryptogram arithmetic and secure key management. Smart card has this rich cryptogram arithmetic and secure key management and along with its portability, it has won the favor of information security field and becomes widely applied in PKI, electronic business and administration.A security system is actualized by using smart card programming interface. In the narrow sense, smart card programming interface has two standards, PKCS#11 framed by RSA in America and CryptoAPI set down by Microsoft Company. Actually, these two standards only provide the framework of interface and their realization rests on the developer. In this thesis a method to realize these two standards is carry out which is beneficial to quickly develop cryptographic token.Detailed information of the two standards is presented and the system is designed in accordance with the structure of Java Card. Associating Java Card Applet with DLL, PKCS#11 standard interface is realized. The real functions of CryptoAPI standard interface is in a CSP(Cryptographic Service Provider). Also, CSP is materialized using Java Card Applet, DLL and digital signature file.Security is a critical index of Java Card application system. So in the thesis, analyses are given on the potential attacks Java Card may encounter in its lifecycle and protection methods are suggested on this basis. In the design of Java Card Applet code and DLL code, techniques such as adding shell, disordering and digital signature are applied to disassemble , thus to protect the security and copyright of these codes.Java card programming interface in the broad sense can employ any interface function of Java Card Applet application program. In the thesis, fingerprint identification application and electric purse application are developed and multiple identification means are provided for information security system,...