IY5606 Smart Cards/Tokens Security and Applications
K. E. Mayes and K. Markantonakis.
This training programme in smart cards, tokens, security and applications is believed to be unique in terms of its breadth of content material, the depth of information and the quality of international expert lecturers. There is strong emphasis on real-world applications and linkages with industry, making the course an ideal grounding for Masters Students considering a future career or preparing for further research in this field. A high proportion of students that select this course also chose to specialise in smart cards and tokens for their Masters project.
The course assumes little previous knowledge of smart cards and initially leads the students through the basics of smart card and token platforms as well as an in depth coverage of their secure manufacture. The course moves on to consider major applications of the technology with particular focus on mobile communication, banking and satellite TV, but also looks to the future and discusses the impact of new technologies. There is a strong emphasis on security aspects throughout the course, but in particular the formal design criteria for secure smart card/token systems is introduced as well as an insight to the wide range of security attacks and countermeasures that need to be considered when planning commercial products. The course does not end at the theoretical level but addresses the practical development of applications for smart cards (with particular emphasis on java) and subsequent operational management of issued devices using OTA (over the air) and related techniques.
By the end of the module the students should:
- Have a general understanding of smart cards and their underlying technologies
- Have an appreciation of the trusted production environment used to manufacture smart cards
- Know the various operating systems in use, plus associated interoperability and security properties
- Understand SIM/USIM cards and how security is provided for mobile telephony
- Have an overview of how smart cards are used for secure banking & finance
- Understand how smart cards are used for satellite TV
- Be aware of new smart chip & token technologies for securing platforms and applications
- Understand common-criteria security applied to smart cards and tokens
- Be aware of the range of attacks used against smart cards and their countermeasures plus how smart cards are tested/evaluated
- Be familiar with smart card application development environments for JAVA and SIM Toolkit
- Understand remote communication with the SIM (OTA) and secure SIM lifecycle management
- Be able to formulate their own informed opinions about the future for smart cards and tokens
The following lectures will be delivered by industry experts plus ISG-SCC staff.
- Introduction to Smart Cards
- Smart Cards – Trusted Production Environment
- Operating systems, Interoperability and Security
- SIM/USIM Cards – Security for Mobile Telephony
- Smart Cards for Secure Banking & Finance
- Smart Cards in Satellite TV
- Advances in Smart Chips and Tokens for Platform & Application Security
- Common Criteria and Smart Cards
- Security Attacks, Countermeasures and Testing for Smart Cards
- Application Development Environments for JAVA and SIM Toolkit
- OTA and Secure SIM Lifecycle Management