Are Smart Cards the Ideal Domain for Applying Formal Methods

RFID technology smart card has a wider user used in diverse area and application. Usually smart card system works by install a smart card reader at the entrance and connects through network which consist database and system application. Because the system required bigger database that stored staff information, cost of investment will be increase towards the system requirement. This is because usually the staff access can validate through authentication process that compare serial number and data on the card with a serial number stored on database. Embedded system by using rabbit microprocessor can reduce cost of system installation and easy to maintaining. By combining the rabbit 2000 microprocessor as controller the hardware and dynamic C as a software, both hardware and software design are easy to develop with the rabbit 2000 development kit. The development kit contain powerful single board computer called ldquothe jackrabbit boardrdquo that can help developer to write and test complex software and also will be able to prototype circuits that interface to a rabbit 2000 microcontroller. For this development kit we can built a embedded system that optimize their function by compare to conventional microcontroller that only doing specific task ,because several module of smart card application such as smart card module, lcd module, keypad module, buzzer module and electromagnetic lock module are easy to integrate. This paper proposes rapid embedded smart card system development by using rabbit 2000 microprocessor with dynamic C software. Verification and validation process will be study how the communication protocol layer handle the communication between rabbit 2000 and smart card reader.

This is the report of a five month study, undertaken by Sundridge Park Training Technologies in association with Guildford Educational Services to assess the potential of smart card technology to support learning and the management of learning. The study had two strands—the state of the art of the technology and its potential for supporting, delivering and managing learning. In addition to a study of the literature and extensive discussions with people using smart cards, potential users of smart card and visionaries, the project team developed two illustrative systems using cards to store personal data relating to education and training. The term ‘smart card’ is often used loosely to describe three different types of card, each of which is similar in general shape and size to a traditional credit card. These are: memory cards, laser cards—and true smart cards incorporating a processor and memory. This study has been concerned with memory cards and smart cards. The focus for smart card applications has been predominantly financial: there are relatively few applications in education or training. A notable exception is the large scale project at the University of Bologna which uses smart cards to manage the progress and achievements of a large number of students in the Department of Electronics. The two illustrative systems provided valuable experience of using memory cards and smart cards in quasi‐real education and training applications. They highlighted the problems of limited memory capacities and confirmed the high level of user acceptance reported by other trials. We can expect considerable advances in the technology of both memory cards and smart cards over the next months and years. The memory capacities of both types of cards will increase many‐fold and the unit costs will fall as large quantities of cards are produced for financial applications. Education and training applications will benefit from this expanding market. The major surprise from the study was the level of interest in the work and the enthusiasm expressed by almost all of those who came to hear of it. The general level of awareness of smart card technology was found to be low. However, the requirement for a system which will enable individuals to manage and own their learning on an extended timescale was generally recognised. Some of the possible applications for smart cards and memory cards in education and training had emerged before the official start of the study and it is clear that the technology is potentially pervasive. The project team and those consulted identified a wide range of possible applications both in education and in training. These focussed on assessment, personal course planning and management, identification of relevant learning opportunities, and the ownership of learning. It was felt that, over the next few years, smart cards are very likely to be in common use as credit cards for financial applications. Therefore, their use for education and training should be planned now. The recommendations from the study are that: More detailed studies are needed to find out how smart cards and memory cards could be used by different organisations in a fully operational system; Standards should be established for smart card applications in education and training, similar to those governing financial applications; Applications should be developed after the standards have been established. To be convincing, these should take a case study approach with small pilot studies in a variety of contexts and must follow real needs rather than attempt to drive them; The case studies would then form the basis for a campaign to increase awareness of smart cards and their potential for education and training, together with a programme for building an infrastructure to support the proposed systems. The public sector should fund the task of developing standards and providing interfaces with existing educational systems and projects to demonstrate the feasibility of various applications. Since educational standards have a European dimension, the European Community may be a source of support for work in the area of standards. At the same time, private sector funding should be sought for skill development and career development systems in industry and in education. The Training Agency itself should consider the application of smart card technology to the control and management of the Youth Training Scheme (YTS).

Starting from the Java Card Virtual Machine (JCVM) specification and the picoJava-II architecture, a pipelined Java card processor has been designed. It implements all of JCVM bytecodes with 16-bit operands in three different ways according to the complexity of their functions. It utilizes a one-read one-write dual-port RAM as Java stack in order to reduce the consumption of limited memory footprint on a smart card. It also includes a Smart Card extension instruction set, which is used to support the low-level hardware operations required by Smart Card Operating System (SCOS). An assembler for this processor is developed, and a simple SCOS with 10 APDU commands is written. The SCOS is simulated in a simulation environment based on the HDL model of this processor. Then the processor with an ISO standard serial I/O port is implemented and verified on a hardware verification system based on FPGA. The results of real interactions with card reader show that this processor can meet the requirements of smart card applications.

E-commerce is becoming more popular on the Internet, smart cards have been used for safe transfers and transactions. Especially, business models using smart cards are actively being developed and the expense transaction method using smart card is becoming diverse since these various business models such as payment agent. So, in this paper, we propose the efficient mileage agent on the Internet, using smart card. This agent offers security for data and the simplicity of application development. Also, It is an independent program saved on Java Card and can calculate and save mileage, although the characteristic of the mileage is different from others through the calculating process of the Card.

The smart card is widely used in E-commerce. We describe the building of a smart card system with embedded biometrics data to strengthen security. First of all, we would like to make the in-card processor do the entire authentication and verification steps so that the card can encapsulate all the critical information, including the biometric data, and performs all the comparison securely inside the card without any data leaking out. However, knowing that the in-card processor has a limited computational power and storage, we would like to seek for a compromise in the time complexity and space complexity for conducting the biometrics comparison and storage entirely by smart card. A domain-specific fixed-point non-integral arithmetic for the card processor is derived as the smart card processor supports only integer arithmetic.

Smart card systems have become the predominant method of collecting public transport fares in Japan. Transaction data obtained through smart cards have resulted in a large amount of archived information on how passengers use public transportation. The data have the potential to be used for modeling passenger behavior and demand for public transportation. This study focused on train choices made by railway passengers. If each passenger’s train choice can be identified over a long period of time, this information would be useful for improving the customer relationship management of the railway company and for improving train timetables. The aim of this study was to develop a methodology for estimating which train is boarded by each smart card holder. This paper presents a methodology and an algorithm for estimation using long-term transaction data. To validate the computation time and accuracy of the estimation, an empirical analysis is carried out using actual transaction data provided by a railway company in Japan. The results show that the proposed method is capable of estimating passenger usage patterns from smart card transaction data collected over a long time period.

In this paper we explore the possibility of using external secure elements, namely smart cards, to enhance the off-line security of commercial off- the-shelf (COTS) Android smartphones. The idea of using smart cards with smartphones is not completely new, but they are usually employed in solutions that need to be approved for RESTRICTED classification and above, and leverage customized devices in dedicated infrastructures. This approach defeats in part the purpose of using COTS products, and may be unnecessary for situations where budget is limited and data is mission sensitive, but not necessary classified, as in the use-case motivating this work. Here we present our findings on how different types of smart cards as Mifare NFC cards and Java Cards in both microSD and Dual format may interact with standard Android devices to enhance their security when not on-line. We conclude that smart cards can be a cost-effective way to mitigate some weaknesses of smartphones which can constitute a risk in tactical military scenarios, but compatibility challenges and device ownership models can limit their effective security.

A new smart card system, Vitesse, is outlined in design detail to meet many needs stemming from the current ability to manipulate information over the network medium. A new smart card operating system, object oriented in nature, is described in terms of a client/server architecture where clients (desktop computers) run front end applications and interact with information servers running in the background. Vitesse servers, designed to be portable – ranging in size from a credit card to a small computer – perform dedicated information processing with typical applications such as telecommunications, stockbroking and interactive entertainment. A design simulator is used to model the abstract design of Vitesse, allowing for prototyping of ideas and demonstration of design models.

We evaluated the performance of an electronic smart-card based school absenteeism surveillance system which was initiated in 2008 in Hong Kong. The result demonstrated the feasibility and potential benefit of employing electronic school absenteeism data as captured automatically by a smart card system as an alternative data stream for monitoring influenza activities, and flexibility in establishing surveillance for emerging diseases. The increasing popularity of usage of smart card technology in various community settings might also represent potentially timely and cost-effective opportunities for innovative surveillance systems.

RF-powered smart cards are widely used in different application areas today. For smart cards not only performance is an important attribute, but also the power consumed by a given application. The power consumed is heavily depending on the software executed on the system. The power profile, especially the power peaks, of an executed application influence the system stability and security. Flattening the power profile can thus increase the stability and security of a system. In this paper we present an optimization system that allows a reduction of power peaks based on a compiler optimization. The optimizations are done on different levels of the compiler. In the backend of the compiler we present new instruction scheduling algorithms. On the intermediate language level we propose the use of iterative compiling for reducing critical peaks.

Smart card technologies offer public transit agencies unprecedented opportunity to price services flexibly by time, distance, and mode and in conjunction with neighboring transit operators. They also can simplify boarding, streamline accounting, and provide better passenger data. Some transit systems have moved quickly to adopt smart card fare media, others are moving more cautiously, and still others eschew smart cards—at least for now. Why such differences? U.S. transit agencies were surveyed to gauge current levels of interest in smart card technologies as next-generation fare media; examine knowledge and perceptions of costs, benefits, and risks of smart card adoption; and determine the status of system implementation, the degree of planning toward implementation, and the levels of participation in interagency collaboration to realize interoperability. Factors common to agencies that have and have not adopted smart card technology also were examined. Results indicate that the consideration and adoption of smart card technologies and interoperable systems vary by funding availability and partnerships with other operators in joint projects for intelligent transportation systems. Perceptions of benefits, costs, and risks of such technologies also vary by status of smart card system planning and implementation. Managers often are uncertain about the costs in general and the benefits in particular of such a move, especially regarding interoperable systems. History predicts the future: technologically sophisticated operators tend to embrace smart cards, whereas those working collaboratively with other transit agencies are most likely to adopt interoperable systems.

In this paper, we present development of a customised smart-card based system to transfer information securely from central server to identified client sites with information tamper protection. One of the primary aims of our system for secure information exchange is to make client reliably robust and inexpensive. We describe key-based generic but customisable encryption system that also incorporates tamper-proofing feature enhancing reliability. In the proposed process, both server and client can check if information has been tampered with and under such circumstances smart card is rendered useless. One area of application of such a system is pre-payment card based metering utilities as used in gas/water/electricity supply. These applications desire high reliability tamper proofing at low cost. To reduce installation cost, such meters need to be inexpensive and reusable. Smart card is used for reliable information exchange to/from client(meter) to server(company). Smart card can transfer information about consumption as well as time-varying tariff rates.

Elliptic curve cryptography (ECC) is based in one of the hardest arithmetic problems, the elliptic curve discrete logarithm problem, making ECC a reliable cryptographic technique. In addition to this advantage, ECC requires shorter keys compared to other public key algorithms, which suggests its use in low-end systems such as smart cards because of its efficiency and limited hardware requirements. Currently the leading smart card technology is Java card. Though both Java 2 standard edition (J2SE) 5.0 and Java card (JC) 2.2.1 include classes and interfaces making ECC available to Java programs, they are not complete, making it necessary to use additional, non-standard packages if the programmer wants to use ECC for different operations (digital signature, data encryption and decryption, etc.). In the present work, we provide a complete review of the state of the art of ECC in J2SE and Java card, with a complete list of operations available in both standard implementations and proprietary packages.

Smart cards are one of the smallest computing platforms in use today. Due to their limited resources applications are often simple and less complex. High performance 32-bit smart cards, which were introduced by several vendors in the last years, allow the implementation of complex applications on smart cards. Additional to the high performance processor cores these smart cards contain coprocessors to reach the performance and power consumption goals. The interface between the processor and the coprocessor influences the performance and power consumption and should be evaluated early in the design process. We propose a hierarchical bus model for system-level smart card design which supports accurate energy dissipation estimation. The bus models have been implemented in systemC 2.0 at transaction level layer one (cycle accurate) and layer two (timing estimation). We evaluate accuracy and simulation performance of the models and show their usage as bus functional models for a smart card application.

The Java Card specification extends Java technology into smart cards. The FISC (Financial Information Service Co., Ltd.) IC card specification is the only financial smart card standard in Taiwan. In the Peng-Hu Health Care IC Card Project, we adopted FISC-compatible IC cards. In this paper, we describe an approach to develop a FISC-compatible application, based on the health care file system, using the Java Card specification. A shareable interface is defined to share the FISC file system with applets on the same card.