April 2002 3CSG1 1

Electronic CommerceSmartcards

John WordsworthDepartment of Computer ScienceThe University of ReadingJ.B.Wordsworth@rdg.ac.ukRoom 129, Ext 6544

April 2002 3CSG1 2

Lecture objectives

Describe the types of smartcard

Describe the kind of information that can be kept on a smartcard

Observe the wide range of specifications, vendors, and operating systems

Review the OpenCard framework

April 2002 3CSG1 3

What is a smart card?A plastic card with an embedded chip:

microprocessor + memory

memory chip with hard logic

Direct contact – gold plated contacts

Contactless – imbedded antenna

Combi card

Hybrid card

April 2002 3CSG1 4

What can you keep on it?

Electronic cash

Electronic wallet

Authentication information:

Biometric

Digital certificate

Medical information

Subscriber indentification (SIM)

Anything else

April 2002 3CSG1 5

Specifications

Visa Open Platform

EMV (Europay, Mastercard, Visa)

Security Identification Module

Various operating systems:

Manufacturers' own systems

Windows for Smart Cards

MULTOS

Java Card (Sun)

April 2002 3CSG1 6

OpenCard Framework (OCF)

Objectives:

Card terminal vendor independence

Card OS provider independence

Card issuer independence

Architecture and APIs (application programming interfaces)

CardTerminal layer

CardService layer

ApplicationManagement component

April 2002 3CSG1 7

Key points

Smartcards have many uses in e-commerce.

There is a wide range of standards and specifications.

The OpenCard Framework provides an abstract view of a smartcard that can facilitate application development.