1. Identity and Access IDPrime MD 8840 and IDCore 8030 MicroSD cards
Didier Bonnet
April 2015

2. MicroSD Slots Deployment
As of today, MicroSD cards are compatible with most of the Android and Windows platforms, but not the iOS ones

3. Secure MicroSD Cards Range
MicroSD cards embedding the same secure chip as the IDPrime MD cards
IDPrime MD 8840 – 8GB or 16GB = PKI enabled
IDCore 8030 – 8GB or 16GB = Pure Java platform
Use Cases
All PKI and OTP use cases
Android, Windows 7/8 and Linux
Supported by IDGo Secure , IDProve 300 and any other 3rd party application based on IDGo 800 for PCs or Mobiles
Value proposition
Form factor: Small size and semi detachable
Can be personalized on PCs using standard Card Management Systems (CMS)
Flash memory for personal or professional usages
Well suited for low volumes / short term projects, OR for projects requiring Flash memory

4. IDCore Features
Secure MicroSD equipped with 8 or 16 GB Flash memory
Compliant with the SD Association specifications and the ASSD protocol
Java platform compliant with Java Card v2.2.2 and Global Platform v2.1.1
Secure chip EAL5+ certified, memory size of 80 KB (standard) or 160 KB (option)
Support of all the most recent cryptographic algorithms including RSA 2048 and Elliptic Curves
High security level certifications on request: FIPS140-2 Level 3 or Common Criteria EAL5+
Gemalto Java applets in option: OTP-OATH, MPCOS
Drivers for Android, Windows 7 / 8.x, Linux and BlackBerry OS
More details

5. IDPrime MD 8840 Features More details
Secure MicroSD equipped with 8 or 16 GB Flash memory
Compliant with the SD Association specifications and the ASSD protocol
PKI applet: Same features as the Gemalto IDPrime MD smart cards
Support of all the most recent cryptographic algorithms including RSA 2048 and Elliptic Curves
Certification Common Criteria EAL5+ / PP SSCD for Qualified Signature or FIPS Level 3. FIPS140-2 Level 3 certification on request.
OTP- OATH applet in standard, MPCOS applet in option
Easy connection to a Windows PC through a PC/SC driver
Supported by the IDGo 800 middleware on Android and Windows 7 / 8.x
Linux on request
More details

6. Main Features IDCore 8030 IDPrime 8840
Secure MicroSD equipped with 8 or 16 GB Flash memory
Java platform OS compliant with Java Card v2.2.2 and Global Platform v2.1.1
Compliant with the SD Association specifications and the ASSD protocol
Support of all the recent cryptographic algorithms including RSA 2048 and Elliptic Curve
Certification: CC EAL5+ & PP SSCD for Qualified Signature
On request
On going
FIPS140-2 Level 3
OTP-OATH applet
Option
PC/SC emulation driver for Windows 7 / 8
Driver for Linux
Libraries
Driver for Android
IDGo800

7. Packaging and Marking Specifications
Packaging specifications
Standard : MicroSD stuck in a white ISO format plastic card
80 units per box
Option: JEDEC 4 x 16 units trays
Marking specifications
Standard: Gemalto logo
Option: Customisation of the marking, Q > 10 KU, 2.5 K€ fee
Option: Customisation of the ISO plastic card, Q > 1 KU, 2.5 K€ fee

8. Sales Conditions IDPrime MD 8840 – 8 GB available on the BtoB webstore
Q = 1400 units available in stock
Product sold through the Direct and Indirect Channels
Beside the webstore, MoQ = 3 KU
Standard delivery time = 10 weeks
Usually requires the IDGo 800 for Android middleware
Please refer to the IDGo 800 Legal process
Please contact the Gemalto TCs for demonstrations
IDGo 800 for Android architecture

9. More Details on our Webpage

10. Common Features with the IDPrime MD cards range

11. IDPrime cards positioning statement
Gemalto helps organizations protect and manage their logical, physical, and cloud-based data assets. Our strong multi-factor authentication solutions support a range of form factors and authentication methods providing the highest level of protection.
IDPrime
Minidriver enabled PKI Cards

12. Minidriver enabled PKI cards
IDPrime family
IDPrime
Minidriver enabled PKI cards
A common set of features
Product Features
IDPrime .NET 510
IDPrime .NET 5500
IDPrime MD 3810
IDPrime MD 830
IDPrime MD 3840
IDPrime MD 840
Base CSP 
PKCS#11
RSA
On board PIN Policy
Multi PIN support
Biometry support
Dual interface
(contact / contactless & NFC support)
FIPS Level 3 certif.
(platform + PKI applet)
FIPS Level 2 certif
(platform + PKI , OTP & MPCOS app)
CC EAL5+ / Javacard &
CC EAL5+ / PP SSCD (Java+applet)
Elliptic Curves
OTP OATH option
MPCOS applet option

13. Minidriver enabled PKI cards
IDPrime family
IDPrime
Minidriver enabled PKI cards
Other features
Product Features
IDPrime .NET 510
IDPrime .NET 5500
IDPrime MD 3810
IDPrime MD 830
IDPrime MD 3840
IDPrime MD 840
Dynamic profile update 
Secure Key injection (Windows)
Option (Dec 14)
RSA OAEP algo
RSA PSS algo
PIN Policy SSO
Option (Dec14)
Option (Feb 15)
ICP Brazil certification
Option (Q2 15)
Dedicated Signature PIN for CC certified (Sign only) keys
Dedicated PUK to unblock the Signature PIN
Mifare Classic emulation
Hybrid
Option
DESFire emulation
Legic Advant compatibility
PAC options

14. Value Proposition: IDPrime MD as Corporate Badge
Enterprises, Universities & Governments who need to secure the access to their data, network & cloud-based assets from both PCs and mobile devices
The IDPrime MD offers all the services of a smart card based Corporate Badge plus the full compatibility with the NFC interface of smartphones and tablets.
IDPrime MD allows card holders to securely and easily access all their applications whatever their location.
The IDPrime MD, associated with the IDGo 800 middleware suite, is the only Corporate Badge operating on any OS, Plug & Play under Windows, and via NFC with mobile devices.
WE TARGET
THE SOLUTION
BENEFITS
DIFFERENTIATOR 14

15. IDPrime MD key benefits 1/2
Plug & Play PKI smart cards
Native support on Windows up to 8.1
IDGo 800 middleware suite: Minidriver, PKCS#11, Credential Provider, tools
Ready for Mobile Security
Dual interface capability ISO and NFC compliant)
Security level even beyond Digital Signature regulations
FIPS Level 3
CC EAL5+ / PP SSCD
Various form factors and authentication methods
Contact / dual / hybrid smartcard or token
Both PKI and OTP authentication are available

16. IDPrime MD key benefits 2/2
Enhanced cryptographic support
PKI services with both RSA and Elliptic curves
E-purse option with MPCOS applet
Flexible security policy
Extended on-board PIN Policy
Optional Microsoft Secure Key Injection service
Wide eco-system integration

17. Digital Signature regulations
IDPrime MD security level is even beyond requirements for Digital Signature regulations
FIPS140-2 Level 3 certified OS and PKI applet
IDPrime MD 830
FIPS Level 2 is required by US regulations
CC EAL5+ / PPSSCD certified OS and PKI applet
IDPrime MD 840 and IDPrime MD 3840
CC EAL4+ / PPSSCD required by European Digital Signature law
All the IDPrime MD card chips are certified CC EAL5+ or EAL6+
All IDPrime MD cards embed the most advanced security countermeasures 17

18. Enhanced cryptography
IDPrime MD is ready for the future, since it supports all the crypto. algorithms for immediate and future deployments
IDPrime MD supports both RSA and Elliptic Curves
RSA up to 2048, RSA OAEP & PSS
Elliptic Curves up to P-521
SHA1, SHA 256, SHA-384, SHA-512
AES up to 256, 3DES
ECC (Elliptic Curves) computation is faster than RSA
Apart for signature verification – which is not performed by the card anyway
Improved performances are becoming important with large key lengths

19. Various authentication methods
PKI authentication
PIN based
Multi PIN option
OTP authentication
OATH standard
Event based
Batch, Self or Live provisioning
With or without PIN entry (same PIN as PKI)
Proposed as an option 19

20. Optelio Contactless MicroSD card

21. Dual Secure Element running contactless applets
Optelio Contactless Micro SD
A contactless MicroSD card with an integrated antenna, turning any handset into a contactless MIFARE Classic, MIFARE + and DESFire EV1 card
Dual Secure Element running contactless applets
Active contactless front end and
specific RF antenna architecture to boost RF performance: A unique Gemalto design.
A technological breakthrough
The result of Gemalto’s unique RF and hardware integration expertise.

22. Marking specifications
Standard marking 2
Marking customization: On request 22

23. Value Proposition for Enterprises
For Physical Access Control and private epurse use cases
Makes any mobile phone equipped with a MicroSD slot ready to use

24. Qualified Android handsets – Oct 201424

25. Thank you!