Java Card Application Management System Based On Globalplatform

With the rapid development of smart cards, people have higher requirements for the smart card portability, versatility, and security, etc. The use of ordinary smart cards require users to have multiple cards, all smart card manufacturers have their own set of instructions (API), and have different security mechanisms, the developers and users will be very inconvenient. Java Card supports multi-applications, good security features, dynamic download applications, the advantages of a unified API, and they solve the problems. The GP just to provide a unified security framework, through this framework, cross-sectoral and multi-application cardscan be managed security.In this paper, based on the requirement analysis of Java card technology and secure channel, encryption and decryption algorithms, APDU protocol and other related technologies in GP specification, and the combination of smart card application management system features, considering the portability, security, and other factors. The paper designs and implementation of Java card application management system based on GP specification, it enables the applications are transfered from the third party application providers to the server platform, and then Java card. The management system is divided into business management and support paltform, system also can be divided into the card management, application management, business management and strategic management module, business management platform manages the card,applications,users and other related informations, business support platform achieve the application transmission security and downloading by a secure channel, security domain decryption algorithms and so on, the paper obtaines SCP and data transmission channel through analysis and comparison The paper is implementation the business support platform, including the format conversion of application files, APDU communication protocol and applications downloading, etc., and the system completes the transmission of data parameters using the BIP channel and POS machines channel through comparative analysis of three kinds of data transmission channels. This paper is also analysising security of system, and achieving the establishment of a secure channel, data encryption and decryption, secure domain creation and key management systems and so on.