Checking secure interactions of smart card applets: extended version¹

Issue title: Special Issue on ESORICS 2000

Article type: Research Article

Authors: Bieber, P.^a | Cazin, J.^a | Girard, P.^b | Lanet, J.-L.^b | Wiels, V.^a | Zanon, G.^a

Affiliations: [a] ONERA-CERT/DTIM, BP 4025, 2 avenue E. Belin, F-31055 Toulouse Cedex 4, France. E-mail: bieber@cert.fr, cazin@cert.fr, wiels@cert.fr, zanon@cert.fr | [b] GEMPLUS, avenue du pic de Bertagne, 13881 Gémenos cedex, France E-mail: Pierre.GIRARD@gemplus.com, Jean-Louis.LANET@gemplus.com

Note: [1] The Pacap project was partially funded by MENRT décision d’aide 98.B.0251.

Abstract: This paper presents an approach enabling a smart card issuer to verify that a new applet securely interacts with already downloaded applets. A security policy has been defined that associates levels to applet attributes and methods and defines authorized flows between levels. We propose a technique based on model checking to verify that actual information flows between applets are authorized. We illustrate our approach on applets involved in an electronic purse running on Java enabled smart cards.

DOI: 10.3233/JCS-2002-10404

Journal: Journal of Computer Security, vol. 10, no. 4, pp. 369-398, 2002