Smart Card Applications: Design Models for Using and Programming Smart Cards

Smart Card Applications: Design Models for Using and Programming Smart Cards

Volumn , Issue , 2007, Pages 1-217

  Rankl, Wolfgang ^a  

^a GIESECKE AND DEVRIENT GMBH   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

CELLULAR TELEPHONE SYSTEMS; CELLULAR TELEPHONES; CURRICULA; ELECTRONIC COMMERCE; MOBILE PHONES; MOBILE SECURITY; SMART CARDS; TELEPHONE SETS;

CARD MICROCONTROLLERS; CHIP-AND-PIN CARDS; CREDIT CARD SECURITIES; INDIVIDUAL COMPONENTS; POSTGRADUATE STUDENTS; PROGRAMMING SMART CARDS; SMART-CARD APPLICATION; SMART-CARD TECHNOLOGY;

COMPUTER SYSTEMS PROGRAMMING;

EID: 70349867027     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1002/9780470511954     Document Type: Book

References (80)

1. Abelson H, Anderson R, Bellovin SM, Benaloh J, Blaze M, Diffei W, Gilmore J, Neumann PG, Rivest RL, Schiller JI, and Schneier B 1997 The Risks of Key Recovery, Key Escrow, and Trusted Third-Party Encryption. www.crypto.com.
2. Anderson RJ 2001 Security Engineering. John Wiley & Sons.
3. Anderson RJ and Needham RM 1995 Programming satan's computer, Computer Science Today. www.computersciencetoday.com.
4. Ausfuhrliste (Export Control List) 2004 Ausfuhrliste: Anlage AL zur Außenwirtschaftsverordnung, 25 May 2004. Bundesamt für Wirtschaft und Ausfuhrkontrolle.
5. AWG 2004 Außenwirtschaftsgesetz (Foreign Trade Act), 23 December 2004.
6. AWV 2001 Außenwirtschaftsverordnung (Foreign Trade Ordinance), 2 July 2001.
7. BAFA - Bundesamt für Wirtschaft und Ausfuhrkontrolle (Federal Office of Economics and Export Control). www.bafa.de.
8. BDSG 2001 Bundesdatenschutzgesetz (Federal Data Protection Act), 11 May 2001.
9. BfD - Bundesbeauftragte für den Datenschutz (Federal Commissioner for Data Protection). www.bfd.bund.de.
10. BNA - Bundesnetzagentur (Federal Network Agency). www.bundesnetzagentur.de.
11. Boehm BW 1981 Software Engineering Economics. Prentice Hall.
12. Bono S, Green M, Stubblefield A, Juels A, Rubin A, and Szydlo M 2005 Security Analysis of a Cryptographically-Enabled RFID Device. The Johns Hopkins University Information Security Institute, Baltimore.
13. BSI - Bundesamt für Sicherheit in der Informationstechnik (Federal Office for Information Security). www.bsi.de.
14. Chen Z 2000 Java Card Technology for Smart Cards. Addison Wesley.
15. CLUSIF 2002 An Overview of Cyber-Crime in 2001. Club de la Sécurité des Systémes d'Information Français, Paris.
16. Criteria 2005 Bekanntmachung zur elektronischen Signatur nach dem Signaturgesetz und der Signaturverordnung ('Notice Regarding Electronic Signatures Compliant with the Signature Act and the Signature Ordinance') (summary of suitable algorithms). Bundesnetzagentur (Federal Network Agency)
17. Crypto 2002 Cryptography and Liberty: An International Survey of Encryption Policy. Electronic Privacy Information Center, Washington, DC.
18. CWA 2004 Application Interface for Smart Cards used as Secure Signature Creation Devices. CWA 14890.
19. Datenschutz (Data Protection) 1996 Anforderungen zur informationstechnischen Sicherheit bei Chipkarten ('Requirements for Information Security with Regard to Chip Cards'). The Data Protection Commissioner of Hamburg, Hamburg.
20. ECR 2000 Council Regulation (EC) No 1334/2000 of 22 June 2000 setting up a Community regime for the control of exports of dual-use items and technology.
21. EMV Book 1 2004 EMV Integrated Circuit Card Specification for Payment Systems, Book 1: Application Independent ICC to Terminal Interface Requirements, Version 4.1. www.emvco.com.
22. EMV Book 2 2004 EMV Integrated Circuit Card Specification for Payment Systems, Book 2: Security and Key Management, Version 4.1. www.emvco.com.
23. EMV Book 3 2004 EMV Integrated Circuit Card Specification for Payment Systems, Book 3: Application Specification, Version 4.1. www.emvco.com.
24. EMV Book 4 2004 EMV Integrated Circuit Card Specification for Payment Systems, Book 4: Cardholder, Attendant and Acquirer Interface Requirements, Version 4.1. www.emvco.com.
25. EN 1546:2000 Identification Card Systems: Inter-Sector Electronic Purse.
26. ETSI - European Telecommunications Standards Institute. www.etsi.org.
27. EU 1995 Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the Protection of Individuals with Regard to the Processing of Personal Data and on the Free Movement of Such Data. Official Journal of the European Communities, L. 281, 23 November.
28. Finkenzeller F 1999 RFID Handbook. John Wiley & Sons.
29. Gamma E, Helm R, and Johnson RE 1994 Design Patterns Elements of Reusable Object-Oriented Software. Addison-Wesley.
30. Garstka H 2003 Informationelle Selbstbestimmung und Datenschutz, in Schulzki-Haddouti C Bürgerrechte im Netz. Bundeszentrale für politische Bildung, Bonn.
31. Global Platform 2003 Open Platform: Card Specification, Version 2.1.1. www.globalplatform.org.
32. Haghiri Y and Tarantino T 2002 Smart Card Manufacturing: A Practical Guide. John Wiley & Sons.
33. Hassler V, Manninger M, Gordeev M, and Muller M 2002 Java Card for E-Payment Applications. Artech House, London.
34. Hunt A and Thomas D 1999 The Pragmatic Programmer: From Journeyman to Master. Addison-Wesley.
35. Horster P and Fox D (ed.) 1999 Datenschutz und Datensicherheit. Vieweg Verlag, Braunschweig.
36. ICAO 2002 ICAO Machine Readable Travel Documents, Part 3: Size 1 and Size 2 Machine Readable Official Travel Documents, 2nd edn, Doc 9303. www.icao.int.
37. ISO/IEC 7810:2003 Identification Cards: Physical Characteristics.
38. ISO/IEC 7811-1:2002 Identification Cards: Recording Technique: Part 1 Embossing.
39. ISO/IEC 7811-2:2001 Identification Cards: Recording Technique: Part 2 Magnetic Stripe: Low Coercivity.
40. ISO/IEC 7813:2001 Identification Cards: Financial Transaction Cards.
41. ISO/IEC 7816-3:1997 Identification Cards: Integrated Circuit(s) Cards: Part 3 Cards with Contacts: Electrical Interface and Transmission Protocols.
42. ISO/IEC 7816-4:2005 Identification Cards: Integrated Circuit Cards: Part 4 Organization, Security and Commands for Interchange.
43. ISO/IEC 7816-6:2004 Identification Cards: Integrated Circuit Cards: Part 6 Interindustry Data Elements for Interchange.
44. ISO/IEC 7816-8:2004 Identification Cards: Integrated Circuit Cards: Part 8 Commands for Security Operations.
45. ISO/IEC 7816-9:2004 Identification Cards: Integrated Circuit Cards: Part 9 Commands for Card Management.
46. ISO/IEC 7816-12:2005 Identification Cards: Integrated Circuit Cards: Part 12 Cards with Contacts: USB Electrical Interface and Operating Procedures.
47. ISO/IEC 7816-15:2004 Identification Cards: Integrated Circuit Cards: Part 15 Cryptographic Information Application.
48. ISO 8402: 1994 Quality Management and Quality Assurance: Vocabulary.
49. ISO/IEC 8824: 2002 Information Technology: Abstract Syntax Notation One (ASN.1).
50. ISO/IEC 8825: 2002 Information Technology: ASN.1 Encoding Rules Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER).
51. ISO/IEC 14443-4:2001 Identification Cards: Contactless Integrated Circuit(s) Cards:Proximity Cards.
52. ITGH 2004 IT-Grundschutzhandbuch. Bundesanzeiger-Verlag, Cologne.
53. ITU X.509:2000 Information Technology: Open Systems Interconnection: The Directory Authentication Framework. www.itu.int.
54. JCAPN 2003 Java Card Platform: Application Programming Notes, Version 2.2.1, Sun Microsystems, Santa Clara, CA.
55. JCAPI 2003 Java Card Platform: Application Programming Interface, Version 2.2.1, Sun Microsystems, Santa Clara, CA.
56. JCRES 2003 Java Card Platform: Runtime Environment Specification, Version 2.2.1, Sun Microsystems, Santa Clara, CA.
57. JCVMS 2003 Java Card Platform: Virtual Machine Specification, Version 2.2.1, Sun Microsystems, Santa Clara, CA.
58. Lamport L 1981 Password authentication with insecure communication, Communications of the ACM 24, 11. ACM (Association for Computing Machinery), San Diego, CA.
59. Liggesmeyer P 2002 Software-Qualität. Spektrum Verlag, Heidelberg.
60. McConnell S 2002 Code Complete, 2nd edn. Barnes & Noble.
61. Menezes AJ, van Oorschot PC, and Vanstone SA 1997 Handbook of Applied Cryptography. CRC Press, Boca Raton, FL.
62. Open Card 2001 Open Platform Card Specification, Version 2.1, Open Card Foundation.
63. PCSC 2004 PC/SC Interoperability Specification for ICCs and Personal Computer Systems, V 2.00.11. www.smartcardsys.com.
64. PKCS #15 2000 Cryptographic Token Information Format Standard, V 1.1. www.rsa.com.
65. Rankl W and Effing W 2002 Smart Card Handbook, 3rd edn. John Wiley & Sons.
66. RFC 2289 1998 A One-Time Password System.
67. SATSA 2004 Security and Trust Services API for Java 2 Platform Micro Edition Java Community Process (JCP), Version 1.0. jcp.org.
68. Schaar P 2002 Datenschutz im Internet. C.H. Beck, Munich.
69. Schneier B 1996 Angewandte Kryptographie. John Wiley & Sons.
70. Spillner A and Linz T 2003 Basiswissen Softwaretest. Dpunkt Verlag, Heidelberg.
71. TS 101 476:2002 Digital cellular telecommunications system (Phase 2+): Subscriber Identity Module Application Programming Interface (SIM API): SIM API for Java CardTM:; Stage 2, V8.5.0. ETSI.
72. TS 102 221:2005 Smart cards: UICC-Terminal interface: Physical and logical characteristics, Release 6, V6.8.0. ETSI.
73. TS 102 222:2005 Integrated Circuit Cards (ICC): Administrative commands for telecommunications applications, Release 6, V6.8.0. ETSI.
74. TS 31.102:2003 3rd Generation Partnership Project: Technical Specification Group Terminals: Characteristics of the USIM application, Release 6, V6.4.0. 3GPP.
75. TS 51.011:2003 3rd Generation Partnership Project; Technical Specification Group Terminals; Specification of the Subscriber Identity Module - Mobile Equipment (SIM-ME) interface, Release 4, V4.2.0. 3GPP.
76. TS 51.014:2003 3rd Generation Partnership Project: Technical Specification Group Terminals: Specification of the SIM Application Toolkit for the Subscriber Identity Module - Mobile Equipment (SIM-ME) interface, Release 4, V4.3.0. 3GPP.
77. V Model XT 2004 V-Modell XT. Federal Republic of Germany, www.v-modell-xt.de.
78. Wassenaar Arrangement: List of Dual Use Goods and Technologies And Munitions List. Vienna. 2004. www.wassenaar.org.
79. Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies. www.wassenaar.org.
80. X.509:2000 Information Technology: Open Systems Interconnection: The Directory Authentication Framework. ITU.