Design And Implement Of Java Card Application Key Management System

With the development of Internet, mobile communication and information security technology, Java card has been widely recognized and applied in the current network era because of its good security features, object-oriented programming environment and many other advantages. Java card has also become the hotspot of smart card technology. Traditional smart card only support card issuers to install applications before the card is issued, the emergence of the Java card allows the user to independently download and install the applications according to their own needs after the card is issued, which not only improves the flexibility of the smart card, and also expand the scope of smart card business applications. But the application download and installation process is switched from the enclosed card making environment to a more open network environment, which makes the Java card face more safety problems, and puts forward higher requirements to the smart card technology.This paper focuses on the security issues caused by dynamic download and installation of Java card application. Based on the in-depth study of the Java card technology, GP specification and cryptography technology, firstly this paper analyzes the Java card system structure, GP specification, Java card application download process, then investigates the safety problems of Java card application download process and their root causes; Secondly, using cryptography theory and technology, this paper solves the certification problem and the data transmission problem between internal and external entity in the Java card application download process, proposes a security domain-distinctive key distribution model and a message sequence related MAC algorithm; Thirdly this paper designs a Java card application key management system using the above research results, designs the system related module, such as key information management, key service, system management, and HSM configuration. This system provides key service interfaces such as security domain key update, MAC value calculation, the generation of session key. This system also includes some key information management functions such as the key query, key statistics, key backup, key restore; Finally, this paper implements a safe and reliable key management system using Java programming technology and runs this system on ChinaUnicom USIM card application management platform to verify its security role in the process of download applications on the Java card.After the verification of the actual project, the Java card key management system designed in this paper can provide services such as safety certification and secure transmission of data between internal and external entity and it really improves the security in the Java card application download and management process.