Introduction to Smart cards
August 2001 - 1 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Smart card basics
August 2001 - 2 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Introduction Outline
Role of smart cards Types of Smart cards
Contact Smart cards Memory Cards Microprocessor Cards Contactless Smart cards
What is an application How to communicate with a smart card
August 2001 - 3 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Smart Cards Are Used in Daily Life
Which smart cards do you have in
your pocket?
August 2001 - 4 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Application Field
Identity Portable File Healthcare Access Control Banking
OPEN SESAME
Vending Machine GSM
Computer Security
Service Payment
August 2001 - 5 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Payphone
Loyalty
What is a Smart Card?
Chip
August 2001 - 6 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Smart Card Features
n Basic features Size of an ID card Unique and permanent serial number Protected data memory Electronic component on board Memory and processor on one chip n Optional features Password protection in the card Cryptographic capabilities Programming capabilities
August 2001 - 7 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Access Control
n Some information in smart cards cannot
be accessed by anyone, these internal secrets can be used by the card itself for ciphering and authentication purposes
n Some information is freely accessible
August 2001 - 8 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Access Control
n Access to information can be limited
to the card holder by the use of a PIN (Personal Identification Number) Open n A PIN is a specific sort of password Sesame n A smart card can control many passwords, allowing different people customized access to information
3rd
n A password may be concealed in
another card or in software
August 2001 - 9 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Access Control
n Information held in different areas or
file in smart cards can be used in different ways
Read Only Add Information Only Erase and Update
August 2001 - 10 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Several types of Smart Cards...
n The smart card stores data and programs Protection by advanced security features n Several types of smart cards Contact Memory Microprocessor Contactless
August 2001 - 11 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Contact Smart Cards
(PVC, ABS, PET)
ROM (1 to 3 mm2) RAM (0.3 to 1 mm2)
P CORE (1 to 2 mm2) EEPROM (1 to 10 mm2)
Card Body Size: 85 * 54 * 0.76 mm - defined by ISO7816-1
August 2001 - 12 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Memory Cards
The first generation of smart cards
August 2001 - 13 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
What are Memory Cards ?
n Memory cards simply store data and can be viewed as a small
floppy disk with optional security.
n What for ?
Data storage Counter management
n EPROM or EEPROM components n NO microprocessor n What type of application ?
phone cards others...
August 2001 - 14 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Why Memory Cards ?
n An Economic (no processor) solution to Replace coins no vandalism, lower running costs, advertising... Replace MagStripe cards higher security, cheaper readers globally cheaper solution
4Allows off-line transactions
SAVINGS
August 2001 - 15 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Memory Chips
n Memory chips are dedicated to data storage: Phonecards and Multi-service smart cards n The chip design will use either EPROM or
EEPROM technologies:
Reserved area to store users data
n Memory chips have no microprocessor inside n A single silicon wafer is used to produce many
chips
From 6,000 to 8,000 chips per wafer Memory chips are very small
~ 2 mm
Introduction to Smart Cards Nicolas SMAYRA
August 2001 - 16 Bull & Innovatron Patents
Memory cards - Pros & Cons
n Pros: Pros low cost built-in counter
n Cons: Cons small data storage
management higher production throughput
capacity no real "intelligence" ! lower security no possible postcustomization
August 2001 - 17 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Memory Card Applications
n Phonecards n Private electronic
Payphone Portable File
n n n n
purse Loyalty Vending Identity ...
Loyalty
Vending machine Service Payment
August 2001 - 18 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
ISO Standard for Memory Card...
n Standards: Memory (& Microprocessor) cards ISO 7816-1 : Physical characteristics ISO 7816-2 : Dimensions and location of contacts
1- Vcc 2- RST 3-CLK 4-RFU
Gnd-5 Vpp-6 I/O-7 RFU-8
August 2001 - 19 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Memory Card Communication
n Each Card has a specific Protocol n Readers need drivers developing for each card
Drivers
Commands Card Protocol
Gemplus Readers include Drivers for each Memory Card
August 2001 - 20 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
How Data Access may be Protected
n Secret code n Fuse n Key (Authentication) n Applicative mechanisms
Read / Update may be protected by Manufacturer or Issuer Different memory areas may have different protection
August 2001 - 21 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Memory Card Range
Gemplus Memory Cards
GFM Range GPM Range GemClub-Memo GAM Range
GFM2k GFM4k GFM32k
GPM271 GPM276
GPM2k GPM8k
GAM326 GAM275
GFM : Gemplus Free-Access Memory GPM : Gemplus Protected Memory GAM : Gemplus Authenticated Memory GemClub-Memo : New generation of memory cards
August 2001 - 22 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
GFM Main Applications
n Any application where the security is
not crucial
u Non
protected portable file u German Healthcare card
n Can be used to replace a
magstripe application
80 435 12345 1620369149124 09
Portable File
Mrs. PATIENT
August 2001 - 23 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
GPM Applications
n These cards were originally designed as payphone
cards n They are now used as disposable prepaid cards for:
Parking applications Gift cards...
Card counter is decremented as units are used until empty
August 2001 - 24 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
GAM Applications
n Prepaid cards:
Payphone
Payphone
Parking Photocopier Vending...
Vending Machine
August 2001 - 25 Bull & Innovatron Patents
Parking
Introduction to Smart Cards Nicolas SMAYRA
Example of Phonecard Application
Phonecard
Identification code : CSN Max. Nb. of Units Key
n Payphone knows cards
contents n Payphone Authenticates card
n Payphone uses up units n Card is useable until it runs
Payphone
Units Balance
out of units
August 2001 - 26 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Gemplus Memory Card Markets
Petrol Industry
Smart Oil Company
Large Scale Distribution
"AllUneed" AllUneed" Hypermarket
Department Stores
Grandes Galleries "Around Corner" shop
Small Retailers
Travel & Entertainment
Smart Dreamland Resort
Ministry Of Smart IDs
August 2001 - 27 Bull & Innovatron Patents
National ID...
Introduction to Smart Cards Nicolas SMAYRA
Main Competitors
n Several competitors using off-the-shelf chips Schlumberger G&D Oberthur Bull Orga Incard...
August 2001 - 28 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Microprocessor Cards Basics
August 2001 - 29 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Microprocessor cards
A microprocessor card can: add / delete manipulate information in its memory on the card. Similar to a miniature computer with a microprocessor an input/output port operating system hard disk built-in security features.
August 2001 - 30 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Microprocessor cards
n What for ? Advanced data storage Data processing (Intelligent card) High security needs n Chip organisation:
ROM COS
CPU
R A M
SECURITY
n What type of application ? Any !
August 2001 - 31 Bull & Innovatron Patents
E E P R O M
Introduction to Smart Cards Nicolas SMAYRA
Microprocessor Chips
n Microprocessor chips are dedicated to data
processing:
Electronic purse, Banking, GSM, Loyalty and Electronic commerce applications For advance data storage and security needs
August 2001 - 32 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Main Features of Microprocessors
n Microprocessors implement EEPROM, ROM and
RAM technologies
Reserved area to store user data and an Operating System
n All microprocessors have a special processing
unit (CPU: Central Processing Unit) n A single silicon wafer is used to produce many chips
From 500 to 1,500 chips per wafer Microprocessor chips are larger than memory chips From 6 to 20 mm
August 2001 - 33 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Microprocessor cards - Pros & Cons
n Pros: Pros
n Cons:
high processing power programmable and customizable large data storage capacity high security
price ! long manufacturing cycle
August 2001 - 34 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
An Operating System Inside the Chip !
n What is an OS? A software specific to each smart card manufacturer Loaded and protected in the chip ROM by the chip manufacturer a MASK is created
Chip Organization ROM CPU
R A M E E E P P R RO OM M
SECURITY
OS
Designed by Gemplus Loaded by chip manufacturers
August 2001 - 35 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
OS Role
n The role of the Chip Operating System is to Enable an easy Memory access Give the Card a pre-defined behavior Contains the set of commands Manage Security Contains the cryptographic algorithms Checks the access conditions
August 2001 - 36 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
OS, Gemplus Know-How
n An OS is ALWAYS proprietary to the smart card
manufacturer
BUT ... There are ISO standards to provide interoperability between card manufacturers ALL Gemplus Microprocessor cards follow international standards
August 2001 - 37 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Contactless Smart Cards
Communication over the air
August 2001 - 38 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Some benefits...
n allow the card to communicate with an antenna
/ coupler unit without an physical contact.
n Contactless cards are the ideal solution when
transactions must be processed very quickly, as in mass-transit or toll collection activities.
August 2001 - 39 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Contactless Cards
ISO 7816-1 dimension (86x54x 0.8)mm Proximity Transaction (8 to 10cm)
Antenna Read / Write operations Security features Data memory
Access control or Tele-ticketing applications
August 2001 - 40 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Contactless Card Structure
Bonding wires Antenna
Transparent PVC Micromodule White PVC Card body
ISO dimensions
August 2001 - 41 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Transportation & Smart Card
Electronic Toll Collection Public Transport Parking
SmartAir
Mr.Smith
12394983-00
Vehicle Card
Airline Ticketing
And any application on the move...
August 2001 - 42 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
A Smart Card is part of an
August 2001 - 43 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
What is the point of using a card in an application?
n Security n Easy to use n Capability to support more than one application n Portable information n Marketing tool
August 2001 - 44 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Application Players
HOST
READERS
CARDS
August 2001 - 45 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
How to communicate with a smart card ?
August 2001 - 46 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Application Software
n Application software developed for
customers needs
Design to communicate with users card
Application software
August 2001 - 47 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Reader
n Link between: the host the cards
August 2001 - 48 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Role of the Reader
n The reader is the interface between the card and
the application
It serves as a translator It accepts the messages
from the card and from the application software
Reader Application Software
Card
August 2001 - 49 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Role of a Transparent Reader
n Reader = interface between the card and the application
Terminal Reader
Host
Host drives the card through the reader Reader transmits to/from card
Card
Application Software
August 2001 - 50 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Role of a stand-Alone Reader
n Application downloaded onto the reader n Reader = Application Manager and Card Interface
Host
Reader drives the card Reader communicates with card
Card
Reader or Terminal
August 2001 - 51 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Messages
n The card communicates with the reader by
exchanging messages n A message is either
a Command : From the reader to the card a Response : From the card to the reader
Command
Response
August 2001 - 52 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Example
Read Name
Gemplus Id: Gemplus
August 2001 - 53 Bull & Innovatron Patents
Introduction to Smart Cards Nicolas SMAYRA
Q&A
Thank you
August 2001 - 54 Bull & Innovatron Patents
Bull CP8 Patents Introduction to Smart Cards Nicolas SMAYRA
