一种多应用智能卡数据的保护方法  

New Data Protection Method for Multi Application Smart Card

作　　者：杨小宝[1] 谢璇[1] 肖跃雷[1] 

机构地区：[1]西安邮电大学物联网与两化融合研究院,陕西西安710061

出　　处：《电视技术》2015年第14期25-30,共6页Video Engineering

基　　金：国家自然科学基金项目(61402367);国家科技重大专项基金项目(2009ZX03004-003);陕西省科学技术研究发展计划项目(2013K06-14)

摘　　要：当前存在于多应用智能卡的数据访问逻辑缺陷和共享模式下的非法终端访问,将导致信息泄露、被篡改或攻击。在分析多应用智能卡文件系统和安全状态的基础上,提出了一种适合跨领域多行业应用的数据访问保护方法,该方法基于椭圆曲线算法密钥证书的生成、分发和应用等,实现了卡内行业数据的安全加载,和应用阶段的读卡端与卡身份验证、密钥协商、密文传输、和数字签名等安全措施。与现有方式比较,该方法从卡片发行直到持卡人应用,全方位地对卡内数据的访问提供严密而高效地保护,有效地解决了对卡数据访问的潜在安全隐患,推动了多应用智能卡的应用和发展。There exist currently logical flaws and illegal terminal of data access in sharing mode for the general multi-application smart card, which leads the information to be leaked, tampered or attacked. After analyzing the file system and security state of multi-application smart card, a new protection proposal of accessing data of smart card. Based on the elliptic curve algorithm is proposed, this proposal generates key certificates, distributes and uses them. At the stage of application, some security measures of safely loading of industry data, mutual authentication, key agreement, cipher text transmission and digital signatures are achieved. Compared with the current security scheme, this proposal provides the tight and high efficient protection all round from issuing card to application of cardholder, effectively resolves the above potential threat, and which can promote the application and development of multi-application smart card.

关 键 词：智能卡 多应用 密钥证书 数字签名 椭圆曲线算法 

分 类 号：TN919.8[电子电信—通信与信息系统]