Open Software for Smart Cards Threat, Opportunity and Challenge. - - PowerPoint PPT Presentation

▶
open software for smart cards threat opportunity and
SMART_READER_LITE
LIVE PREVIEW

Open Software for Smart Cards Threat, Opportunity and Challenge. - - PowerPoint PPT Presentation

Dec 11, 2022 334 likes •439 views

CASSIS-Round Table Open Software for Smart Cards Threat, Opportunity and Challenge. Pierre.Paradinas @ cnam.fr 1 Pierre Paradinas/CNAM/CEDRIC - Embedded and Distributed System Participants From industry : Jean-Claude Huot (OCS),

slide-1
SLIDE 1

Pierre Paradinas/CNAM/CEDRIC - Embedded and Distributed System

1

CASSIS-Round Table

Open Software for Smart Cards Threat, Opportunity and Challenge.

Pierre.Paradinas @ cnam.fr

slide-2
SLIDE 2

Pierre Paradinas/CNAM/CEDRIC - Embedded and Distributed System

2

Participants

From industry :

  • Jean-Claude Huot (OCS),
  • Ksheerabdhi Krishna (Axalto),
  • Alain Sigaud (Gemplus),

From public organization

  • Gilles Kahn (Inria),
  • Erik Poll (Nijmegen University),
  • Jean-Jacques Quisquater (UCL).
slide-3
SLIDE 3

Pierre Paradinas/CNAM/CEDRIC - Embedded and Distributed System

3

Some rules...

Few minutes to each participant and the discussion will be open with YOU! The industry and academic persons are not representing their respective organization but themselves.

slide-4
SLIDE 4

Pierre Paradinas/CNAM/CEDRIC - Embedded and Distributed System

4

Definition

During the discussion we want to differentiate the level of “open” :

  • Specification : definition (why / who / when),
  • Reference Implementation (RI, source code),
  • Conformance to the specification :
  • compatibility and interoperability,
  • Is there Intellectual Property on the different

part of the solution or when you implement the specification or use the RI?

slide-5
SLIDE 5

Pierre Paradinas/CNAM/CEDRIC - Embedded and Distributed System

5

Open s/w; Royalties... Free s/w

Keep in mind the MatriX

Java Card Technology ???? Spec Public and owned by SMI Source/RI Included in the license Test suite Included in the license Royalties Per cards

slide-6
SLIDE 6

Pierre Paradinas/CNAM/CEDRIC - Embedded and Distributed System

6

Other possible model

For Smart Cards based on :

  • “open technology”,
  • HAL, CardAPI, VM, s/w Bus, OS, ...
  • Open consortium,
  • Non profit company, ...
  • Room for open discussion...
slide-7
SLIDE 7

Pierre Paradinas/CNAM/CEDRIC - Embedded and Distributed System

7

Threats

New “open” platform will :

  • Introduce trouble on the market :
  • Java Card Technology is THE trend.
  • Migration cost.
  • Introduce new cost for company deeply

involved on Java Card :

  • New platform requires new tools, development

and expertise (Java Card ramp up take 5 years!).

Increase the attacker possibility and possibly decrease the security (?).

slide-8
SLIDE 8

Pierre Paradinas/CNAM/CEDRIC - Embedded and Distributed System

8

Opportunity

To take control of product road map. No more royalties to pay! Cut R&D cost! Increase the security (?). Stimulate the innovation. Open new business :

  • The s/w platform may be used in other form

factor as USB or secured token.

slide-9
SLIDE 9

Pierre Paradinas/CNAM/CEDRIC - Embedded and Distributed System

9

Challenge for industry and academic!

What is the platform?

  • Java Technology or not?
  • What is the “core technology”?
  • Keep place for differentiation?

Platform adoption?