摘要
通信协议的改进是目前智能卡通信安全的研究热点之一,其目的是保障与终端通信的智能卡真实、可靠。而对于智能卡来说,现有安全体系并没有建立起与终端通信的安全通信通道。这样就使得攻击者可以截获、修改、伪造指令,从而危及智能卡安全。在智能卡原有安全体系的基础上,增加安全会话要素的定义,通过结合原有安全状态和安全属性概念,可以建立起智能卡与终端之间的安全通信通道,从而形成了一种新的智能卡安全通信机制。
At present,Improved communication protocol smart card communication security is one of the hot research,which aims to guarantee the authenticity of smart cards.For the smart card,the existing security system does not establish a secure communication with the terminal.This allows an attacker can intercept,modify,forged orders,thereby endangering the security of smart cards.In this paper,the definition of the security session is given.Through a combination of the original concept of security state and security attributes,security session can set up secure communication channel between the smart card and the applications on terminals,which form a new smart card security communication mechanism.
作者
姚静晶
胡永涛
胡善学
YAO Jing-jing1,HU Yong-tao1,HU Shan-xue2(1.Key Laboratory of Information Network Security,Ministry of Public Security,Shanghai 201204,China;2.Shanghai Jiao Tong University,Shanghai 200240,China)
出处
《电脑知识与技术(过刊)》
2010年第33期9503-9506,共4页
Computer Knowledge and Technology
基金
国家863计划项目(2008AA01Z412)资助
关键词
智能卡
安全会话
安全机制
smart card
security session
security mechanism