Vous êtes sur la page 1sur 54

Introduction to Smart cards

August 2001 - 1 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Smart card basics

August 2001 - 2 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Introduction Outline

Role of smart cards Types of Smart cards


Contact Smart cards Memory Cards Microprocessor Cards Contactless Smart cards

What is an application How to communicate with a smart card

August 2001 - 3 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Smart Cards Are Used in Daily Life


Which smart cards do you have in

your pocket?

August 2001 - 4 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Application Field
Identity Portable File Healthcare Access Control Banking
OPEN SESAME

Vending Machine GSM

Computer Security

Service Payment
August 2001 - 5 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Payphone

Loyalty

What is a Smart Card?

Chip

August 2001 - 6 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Smart Card Features


n Basic features Size of an ID card Unique and permanent serial number Protected data memory Electronic component on board Memory and processor on one chip n Optional features Password protection in the card Cryptographic capabilities Programming capabilities

August 2001 - 7 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Access Control

n Some information in smart cards cannot

be accessed by anyone, these internal secrets can be used by the card itself for ciphering and authentication purposes

n Some information is freely accessible

August 2001 - 8 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Access Control
n Access to information can be limited

to the card holder by the use of a PIN (Personal Identification Number) Open n A PIN is a specific sort of password Sesame n A smart card can control many passwords, allowing different people customized access to information

3rd

n A password may be concealed in

another card or in software

August 2001 - 9 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Access Control

n Information held in different areas or

file in smart cards can be used in different ways


Read Only Add Information Only Erase and Update

August 2001 - 10 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Several types of Smart Cards...


n The smart card stores data and programs Protection by advanced security features n Several types of smart cards Contact Memory Microprocessor Contactless

August 2001 - 11 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Contact Smart Cards


(PVC, ABS, PET)

ROM (1 to 3 mm2) RAM (0.3 to 1 mm2)

P CORE (1 to 2 mm2) EEPROM (1 to 10 mm2)

Card Body Size: 85 * 54 * 0.76 mm - defined by ISO7816-1


August 2001 - 12 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Memory Cards
The first generation of smart cards
August 2001 - 13 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

What are Memory Cards ?


n Memory cards simply store data and can be viewed as a small

floppy disk with optional security.


n What for ?

Data storage Counter management


n EPROM or EEPROM components n NO microprocessor n What type of application ?

phone cards others...


August 2001 - 14 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Why Memory Cards ?


n An Economic (no processor) solution to Replace coins no vandalism, lower running costs, advertising... Replace MagStripe cards higher security, cheaper readers globally cheaper solution
4Allows off-line transactions

SAVINGS

August 2001 - 15 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Memory Chips
n Memory chips are dedicated to data storage: Phonecards and Multi-service smart cards n The chip design will use either EPROM or

EEPROM technologies:
Reserved area to store users data

n Memory chips have no microprocessor inside n A single silicon wafer is used to produce many

chips
From 6,000 to 8,000 chips per wafer Memory chips are very small

~ 2 mm
Introduction to Smart Cards Nicolas SMAYRA

August 2001 - 16 Bull & Innovatron Patents

Memory cards - Pros & Cons

n Pros: Pros low cost built-in counter

n Cons: Cons small data storage

management higher production throughput

capacity no real "intelligence" ! lower security no possible postcustomization

August 2001 - 17 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Memory Card Applications


n Phonecards n Private electronic
Payphone Portable File

n n n n

purse Loyalty Vending Identity ...

Loyalty

Vending machine Service Payment


August 2001 - 18 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

ISO Standard for Memory Card...


n Standards: Memory (& Microprocessor) cards ISO 7816-1 : Physical characteristics ISO 7816-2 : Dimensions and location of contacts

1- Vcc 2- RST 3-CLK 4-RFU

Gnd-5 Vpp-6 I/O-7 RFU-8

August 2001 - 19 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Memory Card Communication

n Each Card has a specific Protocol n Readers need drivers developing for each card

Drivers
Commands Card Protocol

Gemplus Readers include Drivers for each Memory Card


August 2001 - 20 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

How Data Access may be Protected

n Secret code n Fuse n Key (Authentication) n Applicative mechanisms

Read / Update may be protected by Manufacturer or Issuer Different memory areas may have different protection
August 2001 - 21 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Memory Card Range


Gemplus Memory Cards
GFM Range GPM Range GemClub-Memo GAM Range

GFM2k GFM4k GFM32k

GPM271 GPM276

GPM2k GPM8k

GAM326 GAM275

GFM : Gemplus Free-Access Memory GPM : Gemplus Protected Memory GAM : Gemplus Authenticated Memory GemClub-Memo : New generation of memory cards
August 2001 - 22 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

GFM Main Applications


n Any application where the security is

not crucial
u Non

protected portable file u German Healthcare card


n Can be used to replace a

magstripe application

80 435 12345 1620369149124 09

Portable File

Mrs. PATIENT
August 2001 - 23 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

GPM Applications
n These cards were originally designed as payphone

cards n They are now used as disposable prepaid cards for:


Parking applications Gift cards...

Card counter is decremented as units are used until empty


August 2001 - 24 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

GAM Applications

n Prepaid cards:
Payphone

Payphone

Parking Photocopier Vending...

Vending Machine
August 2001 - 25 Bull & Innovatron Patents

Parking
Introduction to Smart Cards Nicolas SMAYRA

Example of Phonecard Application

Phonecard

Identification code : CSN Max. Nb. of Units Key

n Payphone knows cards

contents n Payphone Authenticates card


n Payphone uses up units n Card is useable until it runs

Payphone

Units Balance

out of units

August 2001 - 26 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Gemplus Memory Card Markets

Petrol Industry
Smart Oil Company

Large Scale Distribution


"AllUneed" AllUneed" Hypermarket

Department Stores
Grandes Galleries "Around Corner" shop

Small Retailers

Travel & Entertainment


Smart Dreamland Resort

Ministry Of Smart IDs


August 2001 - 27 Bull & Innovatron Patents

National ID...

Introduction to Smart Cards Nicolas SMAYRA

Main Competitors
n Several competitors using off-the-shelf chips Schlumberger G&D Oberthur Bull Orga Incard...

August 2001 - 28 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Microprocessor Cards Basics

August 2001 - 29 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Microprocessor cards
A microprocessor card can: add / delete manipulate information in its memory on the card. Similar to a miniature computer with a microprocessor an input/output port operating system hard disk built-in security features.

August 2001 - 30 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Microprocessor cards
n What for ? Advanced data storage Data processing (Intelligent card) High security needs n Chip organisation:

ROM COS

CPU

R A M

SECURITY
n What type of application ? Any !
August 2001 - 31 Bull & Innovatron Patents

E E P R O M

Introduction to Smart Cards Nicolas SMAYRA

Microprocessor Chips
n Microprocessor chips are dedicated to data

processing:
Electronic purse, Banking, GSM, Loyalty and Electronic commerce applications For advance data storage and security needs

August 2001 - 32 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Main Features of Microprocessors


n Microprocessors implement EEPROM, ROM and

RAM technologies
Reserved area to store user data and an Operating System
n All microprocessors have a special processing

unit (CPU: Central Processing Unit) n A single silicon wafer is used to produce many chips
From 500 to 1,500 chips per wafer Microprocessor chips are larger than memory chips From 6 to 20 mm
August 2001 - 33 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Microprocessor cards - Pros & Cons

n Pros: Pros

n Cons:

high processing power programmable and customizable large data storage capacity high security

price ! long manufacturing cycle

August 2001 - 34 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

An Operating System Inside the Chip !


n What is an OS? A software specific to each smart card manufacturer Loaded and protected in the chip ROM by the chip manufacturer a MASK is created

Chip Organization ROM CPU


R A M E E E P P R RO OM M

SECURITY

OS

Designed by Gemplus Loaded by chip manufacturers


August 2001 - 35 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

OS Role
n The role of the Chip Operating System is to Enable an easy Memory access Give the Card a pre-defined behavior Contains the set of commands Manage Security Contains the cryptographic algorithms Checks the access conditions

August 2001 - 36 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

OS, Gemplus Know-How

n An OS is ALWAYS proprietary to the smart card

manufacturer
BUT ... There are ISO standards to provide interoperability between card manufacturers ALL Gemplus Microprocessor cards follow international standards

August 2001 - 37 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Contactless Smart Cards

Communication over the air


August 2001 - 38 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Some benefits...

n allow the card to communicate with an antenna

/ coupler unit without an physical contact.

n Contactless cards are the ideal solution when

transactions must be processed very quickly, as in mass-transit or toll collection activities.

August 2001 - 39 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Contactless Cards
ISO 7816-1 dimension (86x54x 0.8)mm Proximity Transaction (8 to 10cm)

Antenna Read / Write operations Security features Data memory

Access control or Tele-ticketing applications


August 2001 - 40 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Contactless Card Structure


Bonding wires Antenna

Transparent PVC Micromodule White PVC Card body

ISO dimensions

August 2001 - 41 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Transportation & Smart Card

Electronic Toll Collection Public Transport Parking

SmartAir
Mr.Smith
12394983-00

Vehicle Card

Airline Ticketing

And any application on the move...


August 2001 - 42 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

A Smart Card is part of an

August 2001 - 43 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

What is the point of using a card in an application?


n Security n Easy to use n Capability to support more than one application n Portable information n Marketing tool

August 2001 - 44 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Application Players

HOST

READERS

CARDS

August 2001 - 45 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

How to communicate with a smart card ?

August 2001 - 46 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Application Software
n Application software developed for

customers needs
Design to communicate with users card

Application software

August 2001 - 47 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Reader

n Link between: the host the cards

August 2001 - 48 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Role of the Reader


n The reader is the interface between the card and

the application
It serves as a translator It accepts the messages

from the card and from the application software

Reader Application Software

Card

August 2001 - 49 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Role of a Transparent Reader


n Reader = interface between the card and the application

Terminal Reader
Host
Host drives the card through the reader Reader transmits to/from card

Card

Application Software

August 2001 - 50 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Role of a stand-Alone Reader


n Application downloaded onto the reader n Reader = Application Manager and Card Interface

Host

Reader drives the card Reader communicates with card

Card

Reader or Terminal
August 2001 - 51 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Messages
n The card communicates with the reader by

exchanging messages n A message is either


a Command : From the reader to the card a Response : From the card to the reader

Command

Response

August 2001 - 52 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Example

Read Name

Gemplus Id: Gemplus

August 2001 - 53 Bull & Innovatron Patents

Introduction to Smart Cards Nicolas SMAYRA

Q&A

Thank you

August 2001 - 54 Bull & Innovatron Patents

Bull CP8 Patents Introduction to Smart Cards Nicolas SMAYRA

Vous aimerez peut-être aussi