Research And Implementation Of A Secure Applet Downloading Mechanism On Java Smart Card

Java smart card technology has become a popular technology in the field of smart card research and development, with its feature of platform-independent, multi-purpose card and dynamic downloading. Using Applet to implement industry applications, has become a preferred way to the cross-industry and multi-application smart card.But Java Card specification does not provide security support about Applet downloading. Therefore, Java smart card platform will face significant security risks and malicious code attacks. In order to prevent applications to be maliciously tampered before downloading,or malicious applications to be downloaded into the card without authorization, developers should design and implement a secure downloading mechanism, which has very import practical significance.Firstly, this paper investigates the research status of secure Applet downloading on Java smart card. Secondly, we do some research on Global Platform technology, and design a Java smart card operating system model, which accords with the Global Platform card specifications. Thirdly, according to Global Platform specifications, the paper puts forward a secure Applet downloading mechanism on Java smart card. Besides, we analyze and improve the mutual authentication protocol of Global Platform card specification, and prove the security of improved protocol with BAN logic. Finally, we implement and test the secure Applet downloading mechanism on Java smart card, which based on Global Platform technology, management and use of secret keys, and secure channel protocol.