接触式智能卡的嵌入式系统攻击平台设计  

An Embedded System Design for Practical Security Analysis of Contact Smartcards

作　　者：王飞宇[1] 李翔宇[1] 乌力吉[1] 张向民[1] 

机构地区：[1]清华大学微电子与纳电子学系,北京100084

出　　处：《计算机测量与控制》2012年第9期2513-2515,共3页Computer Measurement &Control

基　　金：国家自然科学基金项目(61006021)

摘　　要：为了对接触式智能卡的安全性进行研究,搭建了一个多功能的接触式智能卡的嵌入式系统攻击平台,作为开放、可控的目标芯片激励平台;文中给出了具体的实现方案,尤其对智能卡接口电路、读卡器接口电路以及控制模块的设计进行了详细阐述;该平台可以模拟智能卡和读卡器的功能,与真实的智能卡或者读卡器通信,实施中间人攻击、产生侧信道攻击所需的触发信号、向卡片的电源和时钟施加扰动。通过该平台的使用,还可对智能卡芯片安全性设计进行FPGA验证;该方案具有灵活性强、成本低、高效率等优点,可以用于侧信道攻击、故障攻击、密码芯片安全性测试等领域,提高工作效率。In order to enhance the security of contact smartcards, an embedded system for practical security analysis which is an opening programming platform for generating trigger signals of the chip is designed. Detail design of the embedded system is presented, and the de- sign of contact smartcards interface circuit, card reader interface circuit and the control module are described particularly. This design can be used to communicate with smartcards or card reader, at the same time implementing Man in the MiddleAttack, generating trigger sig- nals for Side-Channel attack or disturbing power supply or clock of the smartcards. Furthermore, it can test and verify the chip design of contact smartcards by FPGA. The result shows us it is not only flexibility, low cost and high efficiency, but also utilized in many fields such as Side-Channel attack, fault attack and security testing in cryptographic chip.

关 键 词：智能卡 ISO7816 NIOSII 攻击 嵌入式系统 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]