Research On The Security Performance Of Several Kinds Of Smart Cards Against Side Channel Power Analysis

USIM card is an important component of the new generation mobile telecommunication networks.As the Universal Subscriber Identity Module,it takes great responsibility in the security field.Therefore,compared with SIM card of previous generation,USIM card has already effectively improved its authentication mechanism and corresponding algorithm,rather than one-way authentication in 2G,duplex authentication between USIM card and Authentication center has been implemented,and it uses MILENAGE algorithm which is based on AES-128.Improvements in these two aspects make a significant raise to the security of USIM card.Since the birth of Side Channel Attack,it has been deeply studied and broadly implemented in the related field.Correlation power analysis has gradually become one of the most effective and efficient means.Owing to that power consumption can hardly be avoided while hardware cryptographic device is operating encryption algorithm,power analysis is difficult to defend.USIM card inevitably becomes the target because it mostly exists in the form of a smart card.Because of the existence of operator parameter OPc,rotation parameter r,and algorithm parameter c in MILENAGE algorithm,launching correlation power analysis on USIM cards meets many obstacles.In this paper,the authentication process between cards and AuC,as well as MILENAGE algorithm,is focused.We also learn about related knowledge of COS to support our research.Side-channel Power Analysis is used as the main method to research on the security performance of dozens of USIM cards.And the main contributions of this paper lie in the following five points:(1)Correspondence and result verification platform is built,besides,power trace collection platform and correlation power analysis module dedicated to USIM cards have been built.(2)A general USIM card analysis scheme has been gradually made,with which we can succeed to recover K and OPc of a USIM card efficiently.(3)On the problems of solving customized parameters and the resynchronization parameter,we further propose a more complete strategy to achieve the solution of 11 unknown parameters.(4)We've performed experiments on dozens of USIM cards from domestic and overseas operators to research on their security performance against our analyzing scheme.As a result,it has been concluded that the latest generation USIM cards are vulnerable to correlation power analysis in most cases when implementing sensible methods.(5)Based on these,some countermeasures suitable for USIM cards against side-channel power analysis will also be referred in this paper,and it's believed that operators and card manufacturers will further improve the security of USIM cards according to the contents in this paper.