Java Card: Difference between revisions

Revision as of 20:56, 11 December 2020

Revision as of 21:27, 31 December 2020

Line 14:

Java Card technology was originally developed for the purpose of securing sensitive information stored on [[smart card]]s. Security is determined by various aspects of this technology:

; Data encapsulation: Data is stored within the application, and Java Card applications are executed in an isolated environment (the Java Card VM), separate from the underlying [[operating system]] and hardware.

; Applet Firewallfirewall: Unlike other Java VMs, a Java Card VM usually manages several applications, each one controlling sensitive data. Different applications are therefore separated from each other by an applet firewall which restricts and checks access of data elements of one applet to another.

; Cryptography: Commonly used symmetric key algorithms like [[Data Encryption Standard|DES]], [[Triple DES]], [[Advanced Encryption Standard|AES]], and asymmetric key algorithms such as [[RSA (algorithm)|RSA]], [[elliptic curve cryptography]] are supported as well as other cryptographic services like signing, key generation and key exchange.

; Applet: The applet is a state machine which processes only incoming command requests and responds by sending data or response status words back to the interface device.