Smart Card Technology: Seminar Report
Smart Card Technology: Seminar Report
TECHNOLOGY
Seminar report
on
1 Abstract ……………………………………………...…….3
Chapter 1
Chapter 2
Chapter3
Abstract
Organizations have been experimenting with smart cards for almost thirty years,
yet they are not yet used particularly in the North American market. Smart cards offer
exciting possibilities for convenience, accuracy, customization, data security and and cost
reduction for individuals and organizations. There have, however, been many barriers to
the broad diffusion of smart cards such as deposit insurance liability, data accuracy,
transaction anonymity, fraud risk, the small number of application developers and the
difficulties associated .with changing peoples habit’s and expectations. Today, Sun
Microsystems Java software platform removes or reduces many of the problems faced by
earlier smart card implementations. The largest players in the smart card industry are
working toward standardizing on Java because of the advantages inherent in its design such
as security, network awareness and scalability. In addition, any Java programmer. Can
potentially become a smart card application developer
Chapter 1
As the use of computers has been more and more widespread within organizations
and individuals all over the world, the way people thinks has changed, and the need to
apply this technology to all of daily aspects has increased. Smart cards are becoming
acceptable for user authentication and many other purposes. The usage of smart cards has
spread in many areas such as Pay Phones, GSM and other areas as shown below.
“There are lots of different kinds of smart cards: security cards (used to identify the
carrier), electronic wallet cards (with stored value), processor cards (which carry out
proprietary calculations in a black box fashion), memory cards and even cards with
virtual machines to run Java applets!”
Smart cards and intelligent tokens uses encryption algorithms to provide the
required level of data security to prove the identity of the person sending/receiving the
message and that the message hasn’t been altered. There are many custom command sets
used by smart cards but most of them are based around the ISO-7816 specifications, which
set out the communication protocols ad defines the commands used by smart cards in great
details. “Smart cards allow thousands of times the information storable on magnetic stripe
cards. In addition, smart cards are more reliable, perform multiple functions and are more
secure because of high security mechanisms such as advanced encryption and biometrics.
Smart cards can and will hold a large amount of personal information, from medical/health
history to personal banking and personal preferences.”
Smart card
M.TECH COMMUNICATION SYSTEMS
10621D6121 6 SMART CARD
TECHNOLOGY
A smart card is a piece of plastic, the same size as a credit or debit card, with a
silicon chip embedded in it. The chip contains a microprocessor, which is a miniature
computer which can perform calculations and store data in its memory.
These chips hold a variety of information, from stored (monetary)-value used for
retail and vending machines, to secure information and applications for higher-end
operations such as medical/health care records. New information and/or applications can be
added depending on the chip capabilities. The card is "smart" because it is "active", that is
that it can receive information, process it and then "make a decision". For example, when a
smart card is inserted in a terminal, the terminal sends its "digital signature" to the
microprocessor. If the digital signature agrees with the existing parameters in the
processor's memory, then the memory files are opened and the data made visible to the
terminal. In the same way, the card sends its "digital signature" to the terminal and the
terminal's microprocessor verifies it. This mutual verification is done off-line, this means
that the terminal is not connected to the system's central computer, known as the host.
(Figure.1.2)
Smart cards have the same three fundamental elements as all other computers:
processing power, data storage and a means to input and output data. Processing power is
supplied by a microprocessor chip (e.g. Intel 8051 and Motorola 6805), and data storage is
supplied by a memory chip (EEPROM, FLASH, ROM, RAM). In some instances these
elements can be combined in one chip. The means in which data is transferred varies from
card to card. In order to operate, each card must have a power source, whether in a card
reader or on the card itself. Below figure shows the main elements of microprocessor used
in smart cards – CPU, ROM RAM and EEPROM
Microprocessor
The microprocessor is the intelligent element of the smart card which manipulates
and interprets data. The software utilized for manipulation and interpretation of the data is
either embedded in memory during the manufacture of the card or input under the control
of the microprocessor. Microprocessors in smart cards can be up to 16 bits with a 10MHz
processor
Memory
M.TECH COMMUNICATION SYSTEMS
10621D6121 6 SMART CARD
TECHNOLOGY
The memory in a smart card can either be non-volatile, retaining data when power
is switched off, or volatile, losing data when power is switched off. If the memory is
volatile, the smart card would then require a battery to power itself. Memory can also allow
data to be written to it and read from it, or only allow data to be read from it (read-only
memory). In most cases smart card applications will require non-volatile memory to retain
information such as the identity of the cardholder and the application software, and
read/write memory to update stored information, such as a balance after a transaction is
made.
Memory in smart cards can be categorized into three types: ROM, RAM and
programmable read-only memory (PROM). ROM is non-volatile, and the contents are
embedded in the chip during the manufacturing stage; once embedded, the contents cannot
be altered. Currently, chips with up to 32Kb of ROM are available. RAM is volatile, and is
used as a temporary storage space. Data can be written to it, altered, read and deleted from
it. Currently, chips are available with more than 64Kb of RAM. There are two types of
PROM: electrically programmable read-only memory (EPROM) and electrically erasable
programmable read-only memory (EEPROM). EPROM cannot be reprogrammed.
EEPROM can be reprogrammed, however its structure is more complex and susceptible to
damage which makes it more expensive.
Input / Output
There are several different ways to input and output data to and from the smart
card. Contact cards usually contain a metallic contact on the surface which, when inserted
in a slot in the read/write unit, links with a connector in the unit. Contact less cards use a
contact less method of transmission and reception of data, which only require the card to be
placed near or on the surface of the read/write unit. Super Smart Cards have an integrated
keyboard and display unit, therefore not requiring a read/write unit.
Chapter 2
CHIP CONFIGARATION
M.TECH COMMUNICATION SYSTEMS
10621D6121 6 SMART CARD
TECHNOLOGY
(Figure.2.1)
Depending on how the smart card is accessed, smart card can be classified into 4
main type:
(Figure.2.2)
M.TECH COMMUNICATION SYSTEMS
10621D6121 6 SMART CARD
TECHNOLOGY
The integrated circuit chip on a Smart Card requires some facilities fed to it
from the outside world. Generally these are an electrical voltage to power
the chip, a clock frequency to drive the chip and an input/output path for the
data.
The contactless smart card dispenses with the contact plate on the surface of a smart
card and instead uses some form of electrical coupling. Generally, contactless smart cards
will be placed in close proximity to a reader, less than 3 centimeters. An inductive
(transformer) or capacitive coupling is used to transfer energy and power the card. The
clock may be internally derived and input/output is achieved by modulating the power
signal. There are several different processes that can accomplish this, including inductive
coupling and capacitive coupling.
RF/ID: A method of identification without physical contact. Accomplished through the use
of radio waves . RF/DC: A method of communication without physical contact.
Accomplished through the use of radio.
CombiCard
The Combi Card is a single card which has the features of both contact and contact
less smart card with addition of magnetic strip, 2-dimensional and/or one-dimensional bar
code technology incorporated into the card. This allows the card to be multi-application if
necessary.
The types of smart cards that have presented so far are considered as a passive card
which required an external source of power supply and read/write terminal. This restriction
inevitably affects their suitability for certain types of application. For instance, any passive
smart card system must ensure adequate terminal availability throughout the planned area
of the service. This lead to the development of the third generation active smart card, know
as Super Smart Card, which is currently under development.
Super Smart Card incorporates a keyboard and display directly on the surface of the
card. It can function as a standalone unit, or connect to a computer. For this purpose, they
also generally have surface contacts. Disadvantages to the super smart card include the
high cost of production in comparison with the other cards, the difficulty in meeting ISO
standards and the small size of the keypad.
The primary benefit of a Super Smart Card (active card) is its off-line, self-
validating functionality. Unlike terminal-power passive cards, it is usable at any time in any
location, yet, with its build in PIN-validating programmer and other secure features, access
is as highly protected as any existing smart card system.
Chapter 3
Beside having a loose standard, current generation of contact less smart cards do have
some other disadvantages. They tend to be rather slow and expensive to build and tend to
fail as a result of flexing since they consist of a number of linked components rather than a
single chip. Furthermore, there are also problems in embossing some types of contact less
card since embossing damages the components. Potentially they are less secure as a result
of the potential to couple a listening device at the card - reader air interface.
More secure
Data stored on a smart card is protected by sophisticated security mechanisms. It is thus
very difficult and expensive to thus fraudulently alter data or copy the cards. Changing
from magnetic stripe cards to smart cards can dramatically reduce card fraud linked to
counterfeit cards, as well as fraud linked to off-line transactions by making them secure.
Faster
Smart cards can perform secure off-line transactions which typically take a fraction of a
second, compared with several seconds for on-line transactions. For applications such as
the electronic purse, this time saving is perceived by card holders as a major advantage
over other cards and cash. Some card issuers have developed smart cards using contactless
technology (this uses a radio transmitter/receiver to make the link between card and
terminal, so the cards just have to be waved near a terminal, rather than being inserted into
it).
Flexible
Smart card issuers exist in many different sectors and use many different applications. The
Hand-e card is compatible with most of the large smart card operating system software. It
also supports the Microsoft Windows for Smart Cards and the Java card, which support the
Java programming language
APLLICATIONS
Financial Applications
Electronic Purse to replace coins for small purchases in vending machines and over-the-
counter transactions.
Credit and/or Debit Accounts, replicating what is currently on the magnetic stripe bank
card, but in a more secure environment.
Securing payment across the Internet as part of Electronic Commerce.
Communications Applications
The secure initiation of calls and identification of caller (for billing purposes) on any
Global System for Mobile Communications (GSM) phone.
Subscriber activation of programming on Pay-TV.
Government Programs
Electronic Benefits Transfer using smart cards to carry Food Stamp and WIC food
benefits in lieu of paper coupons and vouchers.
Agricultural producer smart marketing card to track quotas.
Information Security
Employee access cards with secured passwords and the potential to employ biometrics
to protect access to computer systems.
Employee access cards with secured ID and the potential to employ biometrics to protect
physical access to facilities.
Transportation
Drivers Licenses.
Mass Transit Fare Collection Systems.
Electronic Toll Collection Systems.
Health Care
Student Identification
Conclusion
Smart cards are here to stay. They have found widespread acceptance in Europe and Asia,
and they are slowly finding acceptance in the US. While the current significant use has
been in the communications and transportation industries, once the card readers become
commonplace in personal computers, smart cards will significantly enhance e-commerce.
International standards for smart cards are emerging rapidly. The EMV standard developed
by Europe, MasterCard and Visa is a dominant standard. The GSM is another major
standard that addresses the wireless aspects of communication with the smart card. Another
fast-moving area of development in smart cards is the Java card. These and other
applications suggest that there are attractive opportunities for empowering employees while
strengthening financial control. The ability to program multiple levels of control into the
card, using open as well as proprietary standards, could expand the card's adoption. All
these trends point to tremendous possibilities in the future for smart card technology.
REFERENCES
3. http://www.ewh.ieee.org/r10/bombay/news5/SmartCards.htm.