java智能卡内字节码校验算法研究与实践2380msbf.doc

华 中 科 技 大 学 硕 士 学 位 论 文 Abstract Java card is widly used in the highly security fields such as bank, communication etc. Byte code verification on the Java card is an indispensable part for a safe embedded system. Traditional byte code verification is infeasible as limited by the space of the Java card itself and the capability of the arithmetic unit. To solve this problem, three algorithms, namely a cache policy based algorithm, a CFT（Control Flow Tree）based algorithm, and a hybrid algorithm, are attempted for the byte code verification on the Java card in this paper. The key points of this paper are designing and implementing on-card Java card byte code verification algorithms to solve the time and space limition of traditional algorithm. Based on analyzing the translated byte code files construction and the hardware resources on card, an effective on-card cache policy is designed and adopted after translating the byte code files in the off-card part. The algorithm based on cache policy and that based on CFT are prsented first. Then a new hybrid algorithm is proposed to trading off the disadvantage of the previous two algorithms. These three algorithms improve the traditional algorithm efficiency on aspects such as time complexity, space complexity and time-space complexity respectively. And then the detailed schemes of Java card on-card verifier based on off-card translation and on-card cache policy, building environment for development, rewriting the Java card virtual machine, implementing off-card translater and so on are put forward. At last the result of this paper and some suggestions of improving the verification efficiency in the future are presented. Keywords: Java card, byte code, Byte code verifier, Cache policy, Control Flow Tree II 独创性声明 本人声明所呈交的学位论文是我个人在导师指导下进行的研究工作 及取得的研究成果。尽我所知，除文中已经标明引用的内容外，本论文不 包含任何其他个人或集体已经发表或撰写过的研究成果。对本文的研究做 出贡献的个人和集体，均已在文中以明确方式标明。本人完全意识到本声 明的法律结果由本人承担。 学位论文作者签名： 日期：  年  月  日 学位论文版权使用授权书 本学位论文作者完全了解学校有关保留、使用学位论文的规定，即： 学校有权保留