OpenSC JPKIカードドライバ

24
OpenSC JPKI カードドラ イバ Open Source Solution Technology Corporation HAMANO Tsukasa <[email protected]> JNSA PKI 相互運用技術 WG Open Source Solution Technology Corporation 1

Transcript of OpenSC JPKIカードドライバ

  • OpenSC JPKI

    Open Source Solution Technology CorporationHAMANO Tsukasa

    JNSA PKI WG

    Open Source Solution Technology Corporation 1

  • OpenSC JPKI

    ()

    Open Source Solution Technology Corporation 2

  • OpenSC JPKI

    2

    Open Source Solution Technology Corporation 3

  • OpenSC JPKI

    Open Source Solution Technology Corporation 4

  • OpenSC JPKI

    APDU(ISO 7816-4)

    Open Source Solution Technology Corporation 5

  • OpenSC JPKI

    APDU - SELECT FILE

    Open Source Solution Technology Corporation 6

  • OpenSC JPKI

    APDU - PIN

    < 00 20 00 80 04 XX XX XX XX

    > 90 00 #

    > 63 C2 #

    Open Source Solution Technology Corporation 7

  • OpenSC JPKI

    APDU - IEFSELECT FILE< 00 A4 02 0C 02 00 17

    > 90 00

    < 80 2A 00 80 [PKCS1 DigestInfo]

    > []

    Open Source Solution Technology Corporation 8

  • OpenSC JPKI

    PKCS1 DigestInfoSEQUENCE {

    SEQUENCE {

    OBJECT IDENTIFIER \

    sha1(1 3 14 3 2 26)

    NULL

    }

    OCTET STRING XX XX .. XX XX

    }

    Open Source Solution Technology Corporation 9

  • OpenSC JPKI

    OpenSC PKCS#11 PKCS#15

    Open Source Solution Technology Corporation 10

  • OpenSC JPKI

    OpenSC

    Open Source Solution Technology Corporation 11

  • OpenSC JPKI

    OpenSC esteid() Belpic() DNIe() CNS() pteID() PIV()

    Open Source Solution Technology Corporation 12

  • OpenSC JPKI

    PKCS#11 APIs

    C_Initialize() C_Finalize() C_Login() C_Sign() C_Encrypt()

    Open Source Solution Technology Corporation 13

  • OpenSC JPKI

    PKCS#15

    Open Source Solution Technology Corporation 14

  • OpenSC JPKI

    SSHhttps://www.osstech.co.jp/~hamano/

    posts/jpki-ssh/

    Open Source Solution Technology Corporation 15

    https://www.osstech.co.jp/~hamano/posts/jpki-ssh/https://www.osstech.co.jp/~hamano/posts/jpki-ssh/

  • OpenSC JPKI

    TLS withGoogle Chrome

    $ modutil -dbdir sql:.pki/nssdb \

    -add "OpenSC" -libfile \

    /usr/local/lib/opensc-pkcs11.so

    Open Source Solution Technology Corporation 16

  • OpenSC JPKI

    Open Source Solution Technology Corporation 17

  • OpenSC JPKI

    ()

    OS

    () Java Applet()

    Open Source Solution Technology Corporation 18

  • OpenSC JPKI

    ID Provider

    Open Source Solution Technology Corporation 19

  • OpenSC JPKI

    github.com/open-eid

    Open Source Solution Technology Corporation 20

  • OpenSC JPKI

    github.com/JPKI

    Open Source Solution Technology Corporation 21

  • OpenSC JPKI

    OpenSC

    github.com/OpenSC OpenSC/master

    github.com/JPKI OpenSC/jpki = 0.16.0 + JPKI patch

    Open Source Solution Technology Corporation 22

  • OpenSC JPKI

    $ pkcs11-tool -l -t

    Open Source Solution Technology Corporation 23

  • OpenSC JPKI

    jinchttps://github.com/hamano/jinc

    $ jinc

    Open Source Solution Technology Corporation 24

    https://github.com/hamano/jinc