FIPS 140-2框架下的智能卡脆弱性分析

Vulnerability analysis for smart card in FIPS 140-2 framework

智能卡应用系统是一个安全环境很复杂的系统,为了保证智能卡的安全性,必须依据某种安全评估标准对智能卡进行严格的评测。本文给出了一种基于FIPS 140-2的物理安全需求对智能卡进行有效评估的方法,分析了对智能卡进行穿透性测试的方法、技术和工具,为智能卡的物理安全评估提供了指导。

Smart card system is a complex system, in order to assure the security of the smart card, we must evaluate the smart card according to some criteria. We present the physical security requirement in FIPS 140-2 in this paper, and we talk about how to e- valuate the smart card efficiently according to the FIPS 140-2. We analyse the method, technology and tools to do penetration testing,Which can give guidance for smart card physical security evaluation.