SC2: Secure Communication over Smart Cards: How to Secure Off-Card Matching in Security-by-Contract for Open Multi-application Smart Cards

Nicola Dragoni; Eduardo Lostal; Davide Papini; Javier Fabra

doi:10.1007/978-3-642-27901-0_4

SC²: Secure Communication over Smart Cards: How to Secure Off-Card Matching in Security-by-Contract for Open Multi-application Smart Cards

Nicola Dragoni, Eduardo Lostal, Davide Papini, Javier Fabra

University of Zaragoza

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

The Security-by-Contract (S×C) framework has recently been proposed to support software evolution in open multi-application smart cards. The key idea lies in the notion of contract, a specification of the security behavior of an application that must be compliant with the security policy of the card hosting the application. In this paper we address a key issue to realize the S×C idea, namely the outsourcing of the contractpolicy matching service to a Trusted Third Party (TTP). In particular, we present the design and implementation of (SC)2 (Secure Communication over Smart Cards), a system securing the communication between a smart card and the TTP which provides the S×C matching service.

Original language	English
Title of host publication	Foundations and Practice of Security : 4th Canada-France MITACSWorkshop, FPS 2011 Paris, France, May 12-13, 2011 Revised Selected Papers
Editors	Joaquin Garcia-Alfaro, Pascal Lafourcade
Publisher	Springer
Publication date	2012
Pages	32-48
ISBN (Print)	978-3-642-27900-3
ISBN (Electronic)	978-3-642-27901-0
DOIs	https://doi.org/10.1007/978-3-642-27901-0_4
Publication status	Published - 2012
Event	4th Canada-France MITACS Workshop on Foundations & Practice of Security - Paris, France Duration: 12 May 2011 → 13 May 2011 http://fps2011.dyndns.org/

Workshop

Workshop	4th Canada-France MITACS Workshop on Foundations & Practice of Security
Country/Territory	France
City	Paris
Period	12/05/2011 → 13/05/2011
Internet address	http://fps2011.dyndns.org/

Series	Lecture Notes in Computer Science
Number	6888
ISSN	0302-9743

Access to Document

10.1007/978-3-642-27901-0_4

OpenUrl availability

Full text

Cite this

Dragoni, N., Lostal, E., Papini, D., & Fabra, J. (2012). SC²: Secure Communication over Smart Cards: How to Secure Off-Card Matching in Security-by-Contract for Open Multi-application Smart Cards. In J. Garcia-Alfaro, & P. Lafourcade (Eds.), Foundations and Practice of Security: 4th Canada-France MITACSWorkshop, FPS 2011 Paris, France, May 12-13, 2011 Revised Selected Papers (pp. 32-48). Springer. https://doi.org/10.1007/978-3-642-27901-0_4

Dragoni, Nicola ; Lostal, Eduardo ; Papini, Davide et al. / SC²: Secure Communication over Smart Cards : How to Secure Off-Card Matching in Security-by-Contract for Open Multi-application Smart Cards. Foundations and Practice of Security: 4th Canada-France MITACSWorkshop, FPS 2011 Paris, France, May 12-13, 2011 Revised Selected Papers. editor / Joaquin Garcia-Alfaro ; Pascal Lafourcade. Springer, 2012. pp. 32-48 (Lecture Notes in Computer Science; No. 6888).

@inproceedings{a778ad7253a14feeb4d72213e6bdf5c5,

title = "SC2: Secure Communication over Smart Cards: How to Secure Off-Card Matching in Security-by-Contract for Open Multi-application Smart Cards",

abstract = "The Security-by-Contract (S×C) framework has recently been proposed to support software evolution in open multi-application smart cards. The key idea lies in the notion of contract, a specification of the security behavior of an application that must be compliant with the security policy of the card hosting the application. In this paper we address a key issue to realize the S×C idea, namely the outsourcing of the contractpolicy matching service to a Trusted Third Party (TTP). In particular, we present the design and implementation of (SC)2 (Secure Communication over Smart Cards), a system securing the communication between a smart card and the TTP which provides the S×C matching service.",

author = "Nicola Dragoni and Eduardo Lostal and Davide Papini and Javier Fabra",

year = "2012",

doi = "10.1007/978-3-642-27901-0_4",

language = "English",

isbn = "978-3-642-27900-3",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

number = "6888",

pages = "32--48",

editor = "Joaquin Garcia-Alfaro and Pascal Lafourcade",

booktitle = "Foundations and Practice of Security",

note = "4th Canada-France MITACS Workshop on Foundations & Practice of Security, FPS ; Conference date: 12-05-2011 Through 13-05-2011",

url = "http://fps2011.dyndns.org/",

}

Dragoni, N, Lostal, E, Papini, D & Fabra, J 2012, SC²: Secure Communication over Smart Cards: How to Secure Off-Card Matching in Security-by-Contract for Open Multi-application Smart Cards. in J Garcia-Alfaro & P Lafourcade (eds), Foundations and Practice of Security: 4th Canada-France MITACSWorkshop, FPS 2011 Paris, France, May 12-13, 2011 Revised Selected Papers. Springer, Lecture Notes in Computer Science, no. 6888, pp. 32-48, 4th Canada-France MITACS Workshop on Foundations & Practice of Security, Paris, France, 12/05/2011. https://doi.org/10.1007/978-3-642-27901-0_4

SC²: Secure Communication over Smart Cards: How to Secure Off-Card Matching in Security-by-Contract for Open Multi-application Smart Cards. / Dragoni, Nicola; Lostal, Eduardo; Papini, Davide et al.
Foundations and Practice of Security: 4th Canada-France MITACSWorkshop, FPS 2011 Paris, France, May 12-13, 2011 Revised Selected Papers. ed. / Joaquin Garcia-Alfaro; Pascal Lafourcade. Springer, 2012. p. 32-48 (Lecture Notes in Computer Science; No. 6888).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - SC2: Secure Communication over Smart Cards

T2 - 4th Canada-France MITACS Workshop on Foundations & Practice of Security

AU - Dragoni, Nicola

AU - Lostal, Eduardo

AU - Papini, Davide

AU - Fabra, Javier

PY - 2012

Y1 - 2012

N2 - The Security-by-Contract (S×C) framework has recently been proposed to support software evolution in open multi-application smart cards. The key idea lies in the notion of contract, a specification of the security behavior of an application that must be compliant with the security policy of the card hosting the application. In this paper we address a key issue to realize the S×C idea, namely the outsourcing of the contractpolicy matching service to a Trusted Third Party (TTP). In particular, we present the design and implementation of (SC)2 (Secure Communication over Smart Cards), a system securing the communication between a smart card and the TTP which provides the S×C matching service.

AB - The Security-by-Contract (S×C) framework has recently been proposed to support software evolution in open multi-application smart cards. The key idea lies in the notion of contract, a specification of the security behavior of an application that must be compliant with the security policy of the card hosting the application. In this paper we address a key issue to realize the S×C idea, namely the outsourcing of the contractpolicy matching service to a Trusted Third Party (TTP). In particular, we present the design and implementation of (SC)2 (Secure Communication over Smart Cards), a system securing the communication between a smart card and the TTP which provides the S×C matching service.

U2 - 10.1007/978-3-642-27901-0_4

DO - 10.1007/978-3-642-27901-0_4

M3 - Article in proceedings

SN - 978-3-642-27900-3

T3 - Lecture Notes in Computer Science

SP - 32

EP - 48

BT - Foundations and Practice of Security

A2 - Garcia-Alfaro, Joaquin

A2 - Lafourcade, Pascal

PB - Springer

Y2 - 12 May 2011 through 13 May 2011

ER -

Dragoni N, Lostal E, Papini D, Fabra J. SC²: Secure Communication over Smart Cards: How to Secure Off-Card Matching in Security-by-Contract for Open Multi-application Smart Cards. In Garcia-Alfaro J, Lafourcade P, editors, Foundations and Practice of Security: 4th Canada-France MITACSWorkshop, FPS 2011 Paris, France, May 12-13, 2011 Revised Selected Papers. Springer. 2012. p. 32-48. (Lecture Notes in Computer Science; No. 6888). doi: 10.1007/978-3-642-27901-0_4