Smart Card File System (ISO 7816-4) MF DF EF MF Master File (root directory, must always be present) DF Dedicated File (directory file, can contain directory and data files) EF Elementary File (data file) Muhammad Wasim Raad

Smart Card File Names (ISO 7816-4) MF FID File Identifier (2 bytes) Reserved FIDs 3F00 MF root directory 0000 EF PIN and PUK #1 0100 EF PIN and PUK #2 0001 EF application keys 0011 EF management keys 0002 EF manufacturing info 0003 EF card ID info 0004 EF card holder info 0005 EF chip info 3FFF file path selection FFFF reserved for future use FID File Identifier (2 bytes) DF DF Name (1-16 Bytes) usually ISO 7816-5 AID EF Short-FID (5bits) FID File Identifier (2 bytes) FID forming rules • EFs in the same directory cannot have the same FID • Stacked DFs cannot have the same FID • EFs in a directory (MF oder DF) cannot have the same FID as the parent directory Application Identifiers (AIDs) • An AID consists of a 5 byte Registered Identifier (RID) containing a country code, an application category and a provider identifier plus an optional Proprietary Application Identifier (PIX) with a variable length of 0..11 bytes. • AIDs must be registered with an appointed national registration authority and are usually kept confidential. Muhammad Wasim Raad

Smart Card Internal File Structure EEPROM pages 100'000 write cycles 64 byte page size Header Body pointer EF Header: file structure info, access control rights, pointer to data body content changes never or seldom, protected from erasure Body: data, content might change often, many write operations Muhammad Wasim Raad

Muhammad Wasim Raad

MULTOS A high security architecture Apps needing high security can reside next to apps needing low security Co-residence of multiple, inter-operable, platform independent applications Dynamic remote loading and deletion of applications over the lifetime of a card Achieved using the language MEL (MULTOS Executable Language) Muhammad Wasim Raad

PC/SC Architecture designed to ensure the following work together even if made by different manufacturers: smart cards smart card readers computers Differs from OpenCard because it offers API interoperability rather than uniform API Designed for Windows environment with development in Visual C++ Muhammad Wasim Raad

Java card The Java Card specifications enable Java technology to run on smart cards and other devices Multi-Application Capable - Java Card technology enables multiple applications to co-exist securely on a single smart card Dynamic: - New applications can be installed securely Secure: - relies on the inherent security of the Java programming language to provide a secure execution environment. - platform's proven industry deployments and security evaluations ensure that card issuers benefit from the most capable and secure technology available today. Muhammad Wasim Raad

Muhammad Wasim Raad

Muhammad Wasim Raad

How can the SMART card help in new channels? To Managing Finances Securely and Conveniently Entertainment on Demand To store personal data for covenience on-line Earning and redeeming rewards with Virtual Merchants To Secure Virtual World Shopping with Credit (Chip SecureCode) or e-Cash Virtual Health, Govt or other Services Muhammad Wasim Raad

Proprietary Smart Card Operating Systems Proprietary Chip OS developed in “native” code - specific to underlying silicon - to access chip functions. OS often dedicated to performing a single specific function – e.g. EMV Data Data Data Data E2 E2 Native EMV Code Native Loyalty Code Native EMV Code Native EMV Code Native Loyalty Code ROM ROM Proprietary OS A Proprietary OS B OS code is fixed in the ROM of the chip, and cannot be changed after the chip is made. Chip Hardware A Chip Hardware B Limited number of programmers able to make adaptations to proprietary OS – impact on time to market if changes / new functions required. In order to multi-source silicon, native code must be redeveloped from scratch for new chip. Muhammad Wasim Raad Chip Hardware A Chip Hardware B

KILLER Applications Muhammad Wasim Raad

Operating System Options Logical & Physical Access WIM SIM Loyalty E-Purse Credit/Debit Open Platform (Card Manager & Security Domain) API MULTOS by Mondex International and MAOSCO Council Windows for Smart Card by Microsoft and Global Platform Java Card by Sun Micro and Global Platform or or Multos Muhammad Wasim Raad

Muhammad Wasim Raad

Muhammad Wasim Raad

Muhammad Wasim Raad

Muhammad Wasim Raad

Proximity Solutions for MULTOS 2 types of MULTOS “Dual-Interface” cards – supporting communication with the chip via both the contact plate and the contactless interface based on Proximity Standard - ISO 14443 Hitachi/DNP Contactless MULTOS: 36K EEPROM, Type B contactless interface, Available now Supports both versions of Paypass transaction (contactless M/Chip 4, or Contactless Track 2 data) and in fact can execute ANY existing MULTOS application over the contactless interface. Keycorp / Philips Contactless MULTOS, 16K EEPROM, MIFARE Type A contactless interface, Prototypes available now Supports Mifare ticketing only. Full contactless MULTOS application execution planned for Q3 2004 250K issued for Japan Residential ID card Muhammad Wasim Raad

Smart Card Corporate ID& E-Purse Multi-application system Muhammad Wasim Raad

Smart toolz File creation utility Muhammad Wasim Raad

What is RFID? RFID is an ADC technology that uses radio-frequency waves to transfer data between a reader and a movable item to identify, categorize, track... RFID is fast, reliable, and does not require physical sight or contact between reader/scanner and the tagged item Muhammad Wasim Raad

Radio Frequency Identification What is RFID Tag enters RF field RF signal powers tag Tag transmits ID, plus data Reader captures data Reader sends data to computer Computer determines action Computer instructs reader Reader transmits data to tag Radio Frequency Identification Label (Transponder) Reader/Antenna (Interrogator) Computer Muhammad Wasim Raad

RFID Primer RFID Diagram: Note: The host is the software database... Antenna RF Module Reader Host Computer Note: The host is the software database... Muhammad Wasim Raad

RFID Primer Antenna RF Module Reader Host Computer Note: The RF module creates radio frequency (RF). It receives and transmits RF through the antenna… Muhammad Wasim Raad

RFID Primer Antenna RF Module Reader Host Computer Note: The RF module creates radio frequency (RF). It receives and transmits RF through the antenna… Muhammad Wasim Raad

RFID Primer Note: Tag (transponder) is interrogated by the antenna.... RF Module Tag Reader Host Computer Note: Tag (transponder) is interrogated by the antenna.... Muhammad Wasim Raad

(Tag ID Communication) RFID Primer (Tag ID Communication) Antenna RF Module Tag Reader Host Computer Note: The antenna captures the tag ID number…first as analog RF waves, then it is converted to digital information. Muhammad Wasim Raad

An RFID Tag Is A Portable Database Interrogation Unit Micro Tx/Rx Antenna Tag Computer Radio Tx/Rx RAM ROM CPU I/O Pwr Supply Computer Network Radio Tx/Rx RAM ROM CPU I/O Pwr Supply …A sophisticated computing and communications device …A wireless extension of Information Systems Muhammad Wasim Raad

What is RFID? -- The Tags Tags can be read-only or read-write Tag memory can be factory or field programmed, partitionable, and optionally permanently locked Bytes left unlocked can be rewritten over more than 100,000 times Muhammad Wasim Raad

What is RFID? -- The Tags Tags can be attached to almost anything: pallets or cases of product vehicles company assets or personnel items such as apparel, luggage, laundry people, livestock, or pets high value electronics such as computers, TVs, camcorders Muhammad Wasim Raad

Are All Tags The Same? Basic Types: Active Tag transmits radio signal Battery powered memory, radio & circuitry High Read Range (300 feet) Passive Tag reflects radio signal from reader Reader powered Shorter Read Range (4 inches - 15 feet) Muhammad Wasim Raad

Are All Tags The Same? Memory Size (16 bits - 512KBytes +) Variations: Memory Size (16 bits - 512KBytes +) Read-Only, Read/Write or WORM Type: EEProm, Antifuse, FeRam Arbitration (Anti-collision) Ability to read/write one or many tags at a time Frequency 125KHz - 5.8 GHz Physical Dimensions Thumbnail to Brick sizes Price ($0.50 to $250) Muhammad Wasim Raad

Types of Tags - Memory Segmentation Read Only (Factory Programmed) WORM - Write Once, Read Many times Reprogrammable (Field Programmable) Read/Write (In-Use Programmable) Muhammad Wasim Raad 7

What is RFID? -- The Readers Readers (interrogators) can be at a fixed point such as Entrance/exit Point of sale Warehouse Readers can also be mobile -- tethered, hand-held, or wireless Muhammad Wasim Raad

<150 kHz (125 kHz & 134 kHz ) Advantages Uses normal CMOS processing — basic and ubiquitous Relative freedom from regulatory limitations Well suited for applications requiring reading small amounts of data at slow speeds and minimal distances Penetrates materials well (water, tissue, wood, aluminum) Muhammad Wasim Raad

<150 kHz (125 kHz & 134 kHz ) Disadvantages: Does not penetrate or transmit around metals (iron, steel) Handles only small amounts of data Slow read speeds Large Antennas -- compared to higher frequencies Minimal Range Muhammad Wasim Raad

<150 kHz (125 kHz & 134 kHz ) Disadvantages: Tag construction: is thicker (than 13.56 MHz) is more expensive (than 13.56 MHz) more complex (requires more turns of the induction coil) Muhammad Wasim Raad

RFID Primer…Frequencies Smart Cards Inductive Magnetic Field Coupling: 13.56 MHz (Popular Smart Card Frequency) Mid. Freq. EAS AM CB 1 MHz 10 MHz Muhammad Wasim Raad

13.56 MHz Advantages Uses normal CMOS processing--basic and ubiquitous Well suited for applications requiring reading small amounts of data and minimal distances Penetrates water/tissue well Simpler antenna design (fewer turns of the coil); lower costs to build Higher data rate (than 125 kHz--but slower than higher MHz systems) Thinner tag construction (than 125 kHz) Muhammad Wasim Raad

13.56 MHz Disadvantages Government regulated frequency (U.S. versus Europe) Does not penetrate or transmit around metals (unless very thick) Large Antennas (compared to higher frequencies) Larger tag size than higher frequencies Tag construction: requires more than one surface to complete a circuit Minimal Range Muhammad Wasim Raad

Bar Codes vs. RFID Muhammad Wasim Raad

RFID Applications Petrol Service Stations In Singapore, the Mobil petrol service stations has already introduced RFID technology to implement their Speed Pass system to enable drivers to fill up the petrol and drive away. All information will be gathered automatically through RFID smart tags and customers’ bills can be settled through GIRO. Muhammad Wasim Raad

RFID Application in Petrol Service Station Muhammad Wasim Raad

RFID Application in a Factory Canteen In the video, it is very interesting to notice that in the factory canteen’s environment, RFID tags are attached at the bottom of the plates to identify the cooked food and its price. The staff of the factory need only to pick up the food on the tray and place the tray on top of a RFID reader. The RFID reader will identify the products and its price. The staff need only to place the cash card to pay for the food. Muhammad Wasim Raad