Java Card: Difference between revisions

Revision as of 16:21, 25 February 2022

Revision as of 02:24, 7 March 2022

Line 6:

[https://www.oracle.com/java/technologies/java-card-tech.html '''Oracle Java Card^TM''' '''technology'''] is a software platform technology that allows [[Java platform|Java]]-based applications ([[applet]]s) to be run securely on [[smart card]]s and more generally on similar secure small memory footprint devices<ref name="Chen 2000">{{cite book | last=Chen | first=Z. | title=Java Card Technology for Smart Cards: Architecture and Programmer's Guide | publisher=Addison-Wesley | series=Addison-Wesley Java Series | year=2000 | isbn=978-0-201-70329-0 | url=https://archive.org/details/javacardtmtechno00zhiq | url-access=registration | access-date=9 April 2019 }}</ref>which are called “secure elements” (SE). A Secure Element is a tamper-resistant hardware environment capable of securely hosting applications and their confidential and cryptographic data. The most common form of secure element is a one-chip secure microcontroller, found in smart cards and other removable cryptographic tokens. But new form factors have started to emerge though, from embedded SEs (a non-removable secure microcontroller soldered onto a device board) to new security designs embedded into general purpose chips. Java Card^TM addresses this hardware fragmentation and specificities while retaining the openness and code portability brought forward by Java. Java Card^TM is the tiniest of Java platforms targeted for embedded devices. Java Card^TM gives the user the ability to program the devices and make them application specific. It is widely used in different markets: wireless telecommunications within SIM cards and embedded SIM, payment within banking cards<ref>{{Citation|last=Oracle Learning Library|title=Developing Java Card Applications|date=2013-01-30|url=https://www.youtube.com/watch?v=khgT5dwKvOo |archive-url=https://ghostarchive.org/varchive/youtube/20211213/khgT5dwKvOo |archive-date=2021-12-13 |url-status=live|access-date=2019-04-18}}{{cbignore}}</ref> and NFC mobile payment and for Identity cards, healthcare cards, and passports. Several IoT products like gateways are also using Java Card^TM based products to secure communications with a cloud service for instance. End users of Java Card^TM technology include mobile operators, financial institutions, governments, mobile device makers, healthcare associations, enterprises and transportation authorities. Standards bodies such at [[ETSI]], [https://globalplatform.org/ GlobalPlatform], [[GSMA]] and others  leverage Java Card^TM as part of their specifications.

The first Java Card^TM was introduced in 1996 by [[Schlumberger Limited|Schlumberger]]'s card division which later merged with [[Gemplus]] to form [[Gemalto]]. Java Card^TM products are based on the specifications by [[Sun Microsystems]] and continued by [[Oracle Corporation]]. Many Java card^TM products also rely on the GlobalPlatform specifications for the secure management of applications on the card (download, installation, personalization, deletion).

The main design goals of the Java Card^TM technology are portability, security and backward compatibility.<ref>{{cite journal |author1=Ahmed Patel |author2=Kenan Kalajdzic |author3=Laleh Golafshan |author4=Mona Taghavi | year = 2011 | title = Design and Implementation of a Zero-Knowledge Authentication Framework for Java Card | journal = International Journal of Information Security and Privacy | pages = 1–18 | volume = 5 | issue = 3 |publisher = IGI | url = http://www.igi-global.com/article/international-journal-information-security-privacy/58979 }}</ref>

== Portability ==