Table Of Content

Smart Card Handbook Third Edition Wolfgang Rankl and Wolfgang Effing Giesecke&DevrientGmbH,Munich,Germany Translated by Kenneth Cox KennethCoxTechnicalTranslations,Wassenaar,TheNetherlands Smart Card Handbook Third Edition Smart Card Handbook Third Edition Wolfgang Rankl and Wolfgang Effing Giesecke&DevrientGmbH,Munich,Germany Translated by Kenneth Cox KennethCoxTechnicalTranslations,Wassenaar,TheNetherlands FirstpublishedunderthetitleHandbuchderChipkartenbyCarlHanserVerlag (cid:1)C CarlHanserVerlag,Munich/FRG,2002 Allrightsreserved. Authorizedtranslationfromthe4theditionintheoriginalGermanlanguage publishedbyCarlHanserVerlag,Munich/FRG. Copyright(cid:1)C 2003 JohnWiley&SonsLtd,BaffinsLane,Chichester WestSussex,PO191UD,England National 01243779777 International (+44)1243779777 Email(forordersandcustomerserviceenquiries):[email protected] VisitourHomePageonwww.wileyeurope.comorwww.wiley.com AllRightsReserved.Nopartofthispublicationmaybereproduced,storedinaretrievalsystemortransmittedinanyformorbyany means,electronic,mechanical,photocopying,recording,scanningorotherwise,exceptunderthetermsoftheCopyright,Designs andPatentsAct1988orunderthetermsofalicenceissuedbytheCopyrightLicensingAgencyLtd,90TottenhamCourtRoad, LondonW1T4LP,UK,withoutthepermissioninwritingofthePublisher.RequeststothePublishershouldbeaddressedtothe PermissionsDepartment, JohnWiley&SonsLtd,TheAtrium,SouthernGate,Chichester,WestSussexPO198SQ,England,oremailedto [email protected],orfaxedto(+44)1243770571. Thispublicationisdesignedtoprovideaccurateandauthoritativeinformationinregardtothesubjectmattercovered.Itissoldonthe understandingthatthePublisherisnotengagedinrenderingprofessionalservices.Ifprofessionaladviceorotherexpertassistanceis required,theservicesofacompetentprofessionalshouldbesought. OtherWileyEditorialOffices JohnWiley&SonsInc.,111RiverStreet,Hoboken,NJ07030,USA Jossey-Bass,989MarketStreet,SanFrancisco,CA94103-1741,USA Wiley-VCHVerlagGmbH,Boschstr.12,D-69469Weinheim,Germany JohnWiley&SonsAustraliaLtd,33ParkRoad,Milton,Queensland4064,Australia JohnWiley&Sons(Asia)PteLtd,2ClementiLoop#02-01,JinXingDistripark,Singapore129809 JohnWiley&SonsCanadaLtd,22WorcesterRoad,Etobicoke,Ontario,CanadaM9W1L1 Wileyalsopublishesitsbooksinavarietyofelectronicformats.Somecontentthatappearsinprintmaynotbeavailableinelectronic books. LibraryofCongressCataloging-in-PublicationData Rankl,W.(Wolfgang) [HandbuchderChipkarten.English] Smartcardhandbook/WolfgangRanklandWolfgangEffing.–3rded. p. cm. Includesbibliographicalreferencesandindex. ISBN0-470-85668-8(alk.paper) 1.Smartcards–Handbooks,manuals,etc. I.Effing,W.(Wolfgang) II.Title. TK7895.S62R36132003 006–dc22 2003062750 BritishLibraryCataloguinginPublicationData AcataloguerecordforthisbookisavailablefromtheBritishLibrary ISBN0-470-85668-8 Typesetin10/12ptTimesbyTechBooks,NewDelhi,India PrintedandboundinGreatBritainbyAntonyRoweLtd,ChippenhamWiltshire Thisbookisprintedonacid-freepaperresponsiblymanufacturedfromsustainableforestry inwhichatleasttwotreesareplantedforeachoneusedforpaperproduction. Contents PrefacetotheThirdEdition xiii SymbolsandNotation xv ProgramCodeConventions xvii Abbreviations xix 1 Introduction 1 1.1 TheHistoryofSmartCards 2 1.2 ApplicationAreas 5 1.2.1 Memorycards 6 1.2.2 Microprocessorcards 6 1.2.3 Contactlesscards 8 1.3 Standardization 9 2 TypesofCards 15 2.1 EmbossedCards 15 2.2 Magnetic-stripeCards 16 2.3 SmartCards 18 2.3.1 Memorycards 19 2.3.2 Microprocessorcards 20 2.3.3 Contactlesssmartcards 21 2.4 OpticalMemoryCards 23 3 PhysicalandElectricalProperties 27 3.1 PhysicalProperties 27 3.1.1 Cardformats 28 3.1.2 Cardcomponentsandsecurityfeatures 31 3.2 TheCardBody 38 3.2.1 Cardmaterials 40 3.2.2 Chipmodules 42 3.3 ElectricalProperties 52 3.3.1 Electricalconnections 53 3.3.2 Supplyvoltage 55 vi Contents 3.3.3 Supplycurrent 58 3.3.4 Externalclock 60 3.3.5 Datatransmission 60 3.3.6 Activationanddeactivationsequences 61 3.4 SmartCardMicrocontrollers 62 3.4.1 Processortypes 66 3.4.2 Memorytypes 70 3.4.3 Supplementaryhardware 80 3.5 Contact-typeCards 91 3.6 ContactlessCards 93 3.6.1 Close-couplingcards:ISO/IEC10536 101 3.6.2 Remote-couplingcards 107 3.6.3 Proximityintegratedcircuit(s)cards:ISO/IEC14443 108 3.6.4 Vicinityintegratedcircuitscards(ISO/IEC15693) 153 3.6.5 Testmethodsforcontactlesssmartcards 153 4 InformaticFoundations 155 4.1 StructuringData 156 4.2 CodingAlphanumericData 161 4.2.1 7-bitcode 161 4.2.2 8-bitcode 161 4.2.3 16-bitcode(Unicode) 163 4.2.4 32-bitcode(UCS) 163 4.3 SDLNotation 164 4.4 StateMachines 165 4.4.1 Basictheoryofstatemachines 166 4.4.2 Practicalapplications 166 4.5 ErrorDetectionandCorrectionCodes 169 4.5.1 XORchecksums 171 4.5.2 CRCchecksums 172 4.5.3 Reed–Solomoncodes 174 4.5.4 Errorcorrection 174 4.6 DataCompression 176 4.7 Cryptology 177 4.7.1 Symmetriccryptographicalgorithms 182 4.7.2 Asymmetriccryptographicalgorithms 189 4.7.3 Padding 199 4.7.4 Messageauthenticationcodeandcryptographicchecksum 201 4.8 KeyManagement 202 4.8.1 Derivedkeys 202 4.8.2 Keydiversification 203 4.8.3 Keyversions 203 4.8.4 Dynamickeys 203 4.8.5 Keyparameters 204 4.8.6 Keymanagementexample 206 4.9 HashFunctions 208 Contents vii 4.10 RandomNumbers 210 4.10.1 Generatingrandomnumbers 211 4.10.2 Testingrandomnumbers 213 4.11 Authentication 216 4.11.1 Symmetricunilateralauthentication 218 4.11.2 Symmetricmutualauthentication 219 4.11.3 Staticasymmetricauthentication 222 4.11.4 Dynamicasymmetricauthentication 223 4.12 DigitalSignatures 225 4.13 Certificates 229 5 SmartCardOperatingSystems 233 5.1 HistoricalEvolutionofSmartCard OperatingSystems 234 5.2 Fundamentals 237 5.3 DesignandImplementationPrinciples 242 5.4 Completion 245 5.5 MemoryOrganization 249 5.6 SmartCardFiles 252 5.6.1 Filetypes 254 5.6.2 Filenames 257 5.6.3 Fileselection 261 5.6.4 EFfilestructures 263 5.6.5 Fileaccessconditions 267 5.6.6 Fileattributes 270 5.7 FileManagement 271 5.8 SequentialControl 279 5.9 AccesstoResourcesinAccordancewith ISO/IEC7816-9 280 5.10 AtomicOperations 288 5.11 OpenPlatform 290 5.12 DownloadableProgramCode 293 5.13 ExecutableNativeCode 296 5.14 OpenPlatforms 302 5.14.1 JavaCard 303 5.14.2 Multos 322 5.14.3 BasicCard 323 5.14.4 WindowsforSmartCards 323 5.14.5 Linux 324 5.15 TheSmall-OSSmartCardOperatingSystem 326 6 SmartCardDataTransmission 371 6.1 ThePhysicalTransmissionLayer 373 6.2 AnswertoReset(ATR) 377 6.2.1 ATRcharacters 379 6.2.2 PracticalexamplesofATRs 389