Secure Internet Connectivity with the Internet Smart Card

Size: px

Start display at page:

Download "Secure Internet Connectivity with the Internet Smart Card"

Ronald Wood
5 years ago
Views:

Secure Internet Connectivity with the Internet Smart Card 3 rd ETSI Security Workshop Dr.

2 Agenda Introduction Technical Aspects Self Configuration Applications Authentication Gateway Access Control / Closed User Groups Conclusion 3rd ETSI Security Workshop - Sophia-Antipolis, January

3 Introduction: Vision of an Internet Smart Card Status Quo Internet Smart Card Model IT- Infrastructure Networking TCP/IP, USB, HTTP, Bluetooth Operating System Windows, Linux, Palm Devices PCs, PDAs, Phones Applications Networking TCP/IP, USB, HTTP,.NET, Bluetooth Smart Card Devices PCs, PDAs, Phones Middleware Smart Card T=1 Proprietary JavaCard STARCOS Reader Telco, Payment Corporate ID Operating System Windows, Linux, Palm Applications 3rd ETSI Security Workshop - Sophia-Antipolis, January

4 Hardware Requirements USB full speed interface 5 V operation 48 MHz issue Multitasking OS High performance 32 bit CPU Memory protection unit RAM size 24 KB (or more) Program memory 400 KB (ROM/E²PROM) Crypto accelerator Successful candidate: AT91SC RCT 3rd ETSI Security Workshop - Sophia-Antipolis, January

5 CardToken Form Factor Manufacturing using chip card technology Easy to personalise optically and elektronically Extremely cost effective Parts shipped by mail to the end user Mechanical completion is done by the end user Plugs directly into a USB socket 3rd ETSI Security Workshop - Sophia-Antipolis, January

6 Communication architecture Servlets Data USB HTTPS-Server TCP/IP RNDIS USB OS Kernel OS Services RNDIS Driver Local TCP/IP network PC DHCP and WINS client 3rd ETSI Security Workshop - Sophia-Antipolis, January

Web Connectivity Internet Connection Sharing uses NAT (Win98SE, WinME, Win2k, WinXP, Linux, Mac OS X) Fixed IP Adress (Class C) 192.168.0.x LAN / WAN / Internet First IP address 192.168.0.1 Second IP address 10.

7 Web Connectivity Internet Connection Sharing uses NAT (Win98SE, WinME, Win2k, WinXP, Linux, Mac OS X) Fixed IP Adress (Class C) x LAN / WAN / Internet First IP address Second IP address for external Network The Internet Smart Card is connected with the PC through a local Network ( x)! 3rd ETSI Security Workshop - Sophia-Antipolis, January

inf) RNDIS driver is configured for ISC Internet Connection Sharing is made ready ISC Service is

8 Initial Self Configuration Insert Internet Smart Card Launched as USB CD-ROM device Start process is activated (autorun.inf) RNDIS driver is configured for ISC Internet Connection Sharing is made ready ISC Service is launched ISC Service switches the ISC into netwotk mode Adminstrative rights are only required for the initial configuration 3rd ETSI Security Workshop - Sophia-Antipolis, January

9 Applications Authentication Gateway The MyBank Demo Scenario Access Control / Closed User Groups The Lotto Application 3rd ETSI Security Workshop - Sophia-Antipolis, January

10 Authentication Gateway User Interface SSL/TLS Client SSL/TLS Server/ Client Certificates Keys Internet 3rd ETSI Security Workshop - Sophia-Antipolis, January

11 Demo Screenshots 3rd ETSI Security Workshop - Sophia-Antipolis, January

12 . Youth Protection in Online Lottery LOTTO Central Office 5. Send PIN Data by P I N 4. Activate Lotto Internet Stick 3. User Data Capture Customer 2. Handover of Lotto Internet Stick LOTTO LOTTO Betting Shop LOTTO Betting Shop Betting Shop 1. Identification (Face-to-Face) 3rd ETSI Security Workshop - Sophia-Antipolis, January

13 The Lotto Online Web Application 3rd ETSI Security Workshop - Sophia-Antipolis, January

14 Message Flow with Lotto Internet Stick Signature request PIN dialogue Signature response to server (SSL) User-Server interaction 3rd ETSI Security Workshop - Sophia-Antipolis, January

15 Lotto Application Demo 3rd ETSI Security Workshop - Sophia-Antipolis, January

16 Middleware Interface Standardisation Application This chip card middleware interface is considered Application Chip card middleware Chipkarten Driver Terminal Driver ISO Network Interface TCP/IP connectivity of the chip card Serial Interface T=0, T=1 protocol between terminal and computer Card Terminal T=0, T=1 protocol between terminal and chip card Middleware implementation within the chip card 3rd ETSI Security Workshop - Sophia-Antipolis, January

17 Thank you for your attention Dr. Walter Hinz Giesecke & Devrient GmbH Prinzregentenstraße 159 D München Tel rd ETSI Security Workshop - Sophia-Antipolis, January

Secure UHF Tags with Strong Cryptography Development of ISO/IEC Compatible Secure RFID Tags and Presentation of First Results

Secure UHF Tags with Strong Cryptography Development of ISO/IEC Compatible Secure RFID Tags and Presentation of First Results Development of ISO/IEC 18000-63 Compatible Secure RFID Tags and Presentation of First Results Walter Hinz, Klaus Finkenzeller, Martin Seysen Barcelona, February 19 th, 2013 Agenda Motivation for Secure