一种使用CFT的Java卡内字节码校验算法

On-card Java Bytecode Verification Algorithm Using CFT

Java卡字节码校验是构成Java卡安全体系结构的重要组成部分.而传统的Java卡字节码校验由于Java智能卡资源的限制,无法在卡内进行.本文通过对控制流程图和类型推导的分析,提出了基于控制流程树的Java卡卡外翻译过程和卡内校验器算法,详细描述了CFT迁移机理并对于基于CFT的Java卡内字节码校验算法和可行性进行了分析与实践.

Bytecode verification is an important part of Java card security architecture. However,the traditional Java card bytecode verification is unable to be embedded on card due to the resource limited. A novel algorithm base on the CFT and type inference analysis is present to address this problem in this paper. An algorithm of off card transformation and an on card verification for Java card is proposed with detailed description on the CFT transformation. The analysis and practice on this algorithm and its feasibility are conducted as well.