Design And Implementation Of Java Multi-Application Card Issuing System

With the continuous development of science and technology, the conventional "single-application" smart card has been subjected to more and more defects, causing lots of problems such as resource wasting and low portability. With its growing popularity today, smartphone has provided us a good platform. The USIM card in smartphone can be used as a portable carrier, in which the Applet program in the conventional smart card can be mounted to make it "a multi-application card",so as to successfully solve the problem of resource wasting and low portability.This topic is designed to develop a multi-application Java card issuing system, so that third-party business application software could be downloaded and installed in a USIM card offered by some operator, with various pieces of application software to be isolated from each other, and a multi-application pattern to be realized in the USIM card.Based on a research and analysis of function requirement, overall architecture, module partitioning, management system and hardware structure, this paper designed a high-security multi-application Java card issuing system. A three-level key dispersion model with card interoperability is proposed for its key management module. A parallel MAC algorithm based on block cipher is proposed for the security of system communication, and Designed the interface between the card issuer and the portal. Apart from basic functions, such as application downloading and management essential for Java card management and Java card service deployment, as well as Java card service access and service provider management, this system provides functions required for the downloading and management of financial applications for near field communication, and expansion of Java card business processing channels,such as business lobby and short message service station. Also, it can help extend Java card services.For the multi-application Java card issuing system designed in this paper, major modules were implemented on the Web platform, with card issuing enabled in two channels: POS and downloading in the air. Then,some critical functions of this implemented system were tested. Finally,the security of this card issuing system was studied, and a discussion was made on the internal and external entity authentication of Java card and the security of data communication links, pointing out the security risks possibly existing in this system and developing corresponding solutions.Also, security testing was conducted on the card issuing procedure in the improved multi-application Java card issuing system, thus achieving the design objective of this topic.