Smart Card Programming and Security -

. .

Résumé :
The E-smart 2001 international conference on research in smart cards was held in Cannes, France on 19?21 September. The conference was jointlyorganized bythe Java Card Forum, Eurosmart and INRIA, and received helpful ?nancial support from the Conseil R?egional Provence-Alpes-C?ote d?Azur. The intention with E-smart is to provide a forum for discussion and exchange of results on smart card development, security, and applications. This year?s p- gram was established byan international program committee that examined 38 papers submitted and selected 20 of these for presentation. The list of topics of this year?s presentations includes biometrics, cryptography and electronic sig- tures on smart cards, hardware and software solution for smart card security, formal methods for smart card evaluation and certi?cation, architectures for multi-applications and secure open platforms, middleware for smart cards and novel applications of smart cards. The conference also featured an invited talk bySimon Moore from the Universityof Cambridge. Isabelle Attali Thomas Jensen E-smart 2001 program committee co-chairs. Organization Program Committee Isabelle Attali, INRIA Dominique Bolignano, Trusted Logic Bertrand du Castel, Schlumberger Wolfgang E?ng, Giesecke & Devrient Christian Goire, Bull CP8 Pieter Hartel, Universityof Twente Peter Honeyman, University of Michigan Thomas Jensen, IRISA / CNRS Pierre Paradinas, Gemplus Joachim Posegga, SAP AG Peter Ryan, CERT Jean-Paul Thomasson, ST Microelectronics Yasuyoshi Uemura, ECSEC Thanks are due to the following people for their help with the refereeing of papers: Thomas Genet, Valerie Viet Triem Tong, Stefan Friedich, Harald Vogt, Jaap-Henk Hoepman, Neil Henderson, Adam Field, and Jordan Chong.

Sommaire:
Invited Talk.- Protecting Consumer Security Devices.- Contributed Papers.- Jakarta: A Toolset for Reasoning about JavaCard.- Mechanising a Protocol for Smart Cards.- JCCM: Flexible Certificates for smartcards with Java Card.- Context Inference for Static Analysis of Java Card Object Sharing.- Automated Test and Oracle Generation for Smart-Card Applications.- An Internet Authorization Scheme Using Smart-Card-Based Security Kernels.- Turning Multi-applications Smart Cards Services Available from Anywhere at Anytime: A SOAP/MOM Approach in the Context of Java Cards.- An Operational Semantics of the Java Card Firewall.- CardS4: Modal Theorem Proving on Java Smartcards.- iButton Enrolment and Verification Requirements for the Pressure Sequence Smartcard Biometric.- SIMspeak - Towards an Open and Secure Application Platform for GSM SIMs.- On-Card Bytecode Verification for Java Card.- Towards a Full Formal Specification of the JavaCard API.- Protection Profiles and Generic Security Targets for Smart Cards as Secure Signature Creation Devices-Existing Solutions for the Payment Sector.- A Flexible Invocation Framework for Java Card.- ElectroMagnetic Analysis (EMA): Measures and Counter-measures for Smart Cards.- Information Leakage Attacks against Smart Card Implementations of the Elliptic Curve Digital Signature Algorithm.- Use of Biometrics for User Verification in Electronic Signature Smartcards.- Programming Internet Smartcard with XML Scripts.- Public-Key-Based High-Speed Payment (Electronic Money) System Using Contact-Less Smart Cards....