THE OPEN PLATFORM THE OPEN PLATFORM PROTECTION PROFILE (OP3) PROTECTION PROFILE (OP3) TAKIN.pdfVIP

Marc Kekicheff, Forough Kashef, David Brewer Open Platform Development THE OPEN PLATFORM PROTECTION PROFILE (OP3) TAKING THE COMMON CRITERIA TO THE OUTER LIMITS Introduction lOpen Platform is a cross industry standard for multi-application reconfigurable smart cards lOP may be viewed as an extension to JavaCard? / Windows for Smart CardR lOP3 is essential to prove trustworthiness worldwide lOP3 follows SCSUG example and use CC lNot without many challenges The Open Platform Specification Runtime Environment Card Manager Issuer Application Provider Application Open Platform API Provider Security Domain and hardware-neutral API Secure Channel APDU s OP Functionality Cryptographic Support Configuration/ Feature Set C ar d M an ag er S ec ur ity D om ai ns D el eg at ed M an ag em en t D A P V er ifi ca tio n D E S R S A Configuration 1a X X Configuration 1b X X X Configuration 1b* X X X X Configuration 2a X X X X X Configuration 2b X X X X X X OP Configurations Provides Secure Channel and Global PIN services to applications Security Assumptions lOP merely a component lNeed to trust ;back-office systems ;cryptographic key management ;byte code verification ;card/chip operating environment (COE) lAssumptions expose vulnerabilities that OP cannot protect itself against The COE Assumption lTamper resistant lResistant to DPA, etc. lFacilitates OP recovery lReports exceptions to OP lPrevents bypass, etc. of OP security lEnforces applet separation lProvides object re-use Security Threats Clone Future A Currennt Past A Current A KEY A IC RTE/OP/applications Post issuance downloaded application Card - CAD interface CAD, incuding power etc Group I Group II Group III Group IV Group V Group VI Security Functions lExtensive access control rules (discretionary and mandatory) lIntrusion detection, Secure recovery lCryptography ;host-card authentication, key confidentiality, message authentication, message encryption, MAC chaining ;receipt generation and token verification The Open Pla