The Design And Implementation Of A Key Distribution Method In A Multi-application Smart Card

With the development of microchip, the smart card has been widely applied to various aspects of people’s life. But the card type and quantity of surging bring a lot of inconvenience for carrying. The emergence of multi-application smart card technology application gradually solved this problem. At present, for "Bus IC Card" and "Campus Card" had spread to cities and schools, the "all-purpose card" technology has matured. However, Cross-industry Multi-application Smart Card development slowly. According the characteristics of Smart Card multi-application technology development in foreign countries, we find Java Card has many advantages, such as cross-platform, developed convenient, high safety performance, and it can be realized multi-application in the smart card of dynamic updating, etc. Domestic Java card also began to apply to financial, medical and mobile communication field.However, we found that the past single industry application key distribution management system existence mode access to shared logical flaws and illegal terminal in multi-application data access, which may not only lead to serious security problems, but also limit the application of Java Card to achieve general multi-application.First of all, this paper designed a framework of the Java Card Authorized Platform and designed a Key Management System based on Java Card Authorized Platform. It based on the analysis of the Java Card technology standards and on the Global Platform security mechanisms. It consists of the management structure, module function and the classification of the key aspects and so on. Secondly, this paper elaborated generation and distribution of the Java Card key in the key management system. The method based on the elliptic curve algorithm key certificates for key generation and distribution, etc. It can multiple industry key filling in the main security domain and the auxiliary safety domain of the Java Card. It can realize the key distribution and industry application of authorization and implement the safe loading in each industry data and effectively solve the card data access within the potential safety hazard and enhance the card reader and card security card to the security of the session. The key generation will be stored in a smart card key classification, using hash algorithm to generate a level key, namely the Java key Card, from decentralized algorithm for decentralized root key generation subordinate levels of key. In the paper, key distribution used SAM authentication mode is issued, the card reader and card security authentication method. Finally, the paper through constructing the Key Management System in the Java Card application verification platform to test verification implements, it can complete the key distribution functions, including key generation, filling and distributed, backup and update.