Java智能卡类库的研究与实现
摘要
Java智能卡技术制订了一种安全、便捷且多功能的智能卡平台规范,已经成为智能卡的主流发展趋势。Java智能卡目前正经历着巨大的变化,已经从单一设备转化为一个复杂、多应用环境的平台,提供电子钱包、身份识别和数据保护等功能。现已广泛应用于金融、公益事业、医疗卫生、社会保险、工商税务、电信、交通管理等领域。
Java智能卡技术主要由Java智能卡API、Java智能卡的运行环境和Java智能卡虚拟机三部分组成。其中,Java智能卡API类库为Applet的开发提供了标准的接口,降低了智能卡应用程序开发的复杂程度,简化了开发过程,真正实现了Java设计者宣称的“一次编写,到处运行”的理念。
本文首先简要介绍了Java智能卡的发展、研究背景和基本概况,重点分析了解释器对外包中方法的解析流程,结合解释器的设计,提出了Java智能卡类库的设计方案,并按照Java智能卡API 2.2.2规范,在智能卡有限的资源中实现了事务处理模块、临时空间管理模块和安全模块,最后扩展了Java智能卡类库,实现了SMS4算法。
The Java Card technology formulates a specific of the Smart Card Platform with security, convenience and multi-function, which has become the mainstream trend of development about Java Card. At present Java Card is undergoing tremendous changes, and has converted from single equipment to a platform with complexity and multi-application environment, which provides so many uses, including electronic wallet, identity verification and data protection etc. Now Java Card has been widely used in financial services, public utilities, health, social insurance, business taxation, telecommunications and transport management.
The Java Card technology mainly consists of three parts: Java Card API, Java Card Runtime Environment and Java Card Virtual Machine. And, Java Card API provides a stand interface for the development of Applet, reduces the development complexity of application, simplifies the development process and really realizes the conception "a preparation, running everywhere" which was declared by Java designers.
At first ,it is presented the research settings,general situations and development of Java Card, analyzed the parsing flow of the interpreter to the call of the method of other package, and proposed the scheme of Java Card API with the design of the interpreter.Besides, according to Java Card API 2.2.2, this paper realizes the module of transaction mechanism, the module of transient object and the module of security with limited resources in smart card.At last, this paper extends Java Card API and realizes SMS4.
Java智能卡技术主要由Java智能卡API、Java智能卡的运行环境和Java智能卡虚拟机三部分组成。其中,Java智能卡API类库为Applet的开发提供了标准的接口,降低了智能卡应用程序开发的复杂程度,简化了开发过程,真正实现了Java设计者宣称的“一次编写,到处运行”的理念。
本文首先简要介绍了Java智能卡的发展、研究背景和基本概况,重点分析了解释器对外包中方法的解析流程,结合解释器的设计,提出了Java智能卡类库的设计方案,并按照Java智能卡API 2.2.2规范,在智能卡有限的资源中实现了事务处理模块、临时空间管理模块和安全模块,最后扩展了Java智能卡类库,实现了SMS4算法。
The Java Card technology formulates a specific of the Smart Card Platform with security, convenience and multi-function, which has become the mainstream trend of development about Java Card. At present Java Card is undergoing tremendous changes, and has converted from single equipment to a platform with complexity and multi-application environment, which provides so many uses, including electronic wallet, identity verification and data protection etc. Now Java Card has been widely used in financial services, public utilities, health, social insurance, business taxation, telecommunications and transport management.
The Java Card technology mainly consists of three parts: Java Card API, Java Card Runtime Environment and Java Card Virtual Machine. And, Java Card API provides a stand interface for the development of Applet, reduces the development complexity of application, simplifies the development process and really realizes the conception "a preparation, running everywhere" which was declared by Java designers.
At first ,it is presented the research settings,general situations and development of Java Card, analyzed the parsing flow of the interpreter to the call of the method of other package, and proposed the scheme of Java Card API with the design of the interpreter.Besides, according to Java Card API 2.2.2, this paper realizes the module of transaction mechanism, the module of transient object and the module of security with limited resources in smart card.At last, this paper extends Java Card API and realizes SMS4.
引文
[1]张健,刘寿强,周海涛. Java智能卡及其安全性分析[EB/OL], http://www.jhsafe.com/safe/article/5/2006/200607192777.html,2006
[2]吴东辉,周捷,陈章龙. Java卡的设计[J],微型电脑应用,2003年第19卷第12期,20-23
[3] PIETER H. HARTEL, LUC MOREAU, Formalizing the Safety of Java, the Java Virtual Machine and Java Card, ACM Computing Surveys, Vol. 33, No. 4, December 2001, 517-558
[4] Egon BoErger,Wolfram Schulte, A Practical Method for Specification and Analysis of Exception HandlingDA Java/JVM Case Study, IEEE transaction on software engineering, VOL.26, NO.9, SEPTEMBER, 2000
[5] Wojciech Mostowski. Formalisation and verification of JAVA CARD security properties in Dynamic Logic[A]. Fundamental Ap-proaches to Software Engineering (FASE) Conference 2005, volume 3442 of LNCS, Springer, April 2005. 357-371.
[6] Ludovic Casset, Lilian Burdy, Antoine Requet,Formal Development of an Embedded Verifier for Java Card Byte Code [DB/CD], 2002
[7] Konstantinos Markantonakis, Keith Mayes, An overview of the GlobalPlatform smart card specification, Information Security Technical Report Volume 8, Issue 1, March 2003, 17-29
[8] Mei xue, Jing Yang, Junzhong Gu, Jiang Xiong. Research on DRM Track&Audit Based on Mobile Agent Technology[C]. IEEE. The 8th International Conference on Computer Supported Cooperative Work in Design Proceedings. 2003.
[9]林胜利,路宗强,王坤茹等. Java智能卡开发关键技术与实例[M],北京,中国铁道出版社,2006.9
[10] SUN Microsystems, Inc., JAVA CARD 1.1 Specification[S]. USA: Sun Microsystems Inc.1996,1~90
[11] SUN Microsystems, Inc., JAVA CARD 2.0 Specification[S]. USA: Sun Microsystems Inc.1997,1~90
[12] SUN Microsystems, Inc., Java Card 2.1.2 Virtual Machine Specification[S].SUN Microsystems, Inc , 2001
[13] SUN Microsystems Inc., Java Card 2.1.2 Runtime EnvironmentSpecification[S].SUN Microsystems, Inc, 2001
[14] SUN Microsystems, Inc., JAVA CARD 2.1.2 Application Programming Interface Specification [S], 2001.
[15] Wojciech Mostowski,Jing Pan,Srikanth Akkiraju,et al, A Comparison of Java Cards, State-of-A?airs, 2006
[16] SUN Microsystems, Inc., http://www.sun.com. JAVA CARD 2.2.2 Application Programming Interface Specification [S], March 2006
[17] L.R.Clausen, U.P.Schultz and G. Muller,et al, Java Bytecode Compression for Low-End Embedded Systems,ACM Transactions on Programming Languages and Systems, Vol. 22, No. 3, May 2000, 471-489.
[18] Ewen Denney,The Synthesis of a Java Card Tokenisation Algorithm
[19] Engelbert Hubbers and Erik Poll, Transactions and non-atomic API methods in Java Card:specification ambiguity and strange implementation behaviours
[20] Eran Gal, Sivan Toledo, A Transactional Flash File System for Microcontrollers, 2005 USENIX Annual Technical Conference, USENIX Association, 2005
[21] Engelbert Hubbers, Wojciech Mostowski, and Erik Poll, Tearing Java Cards. e-Smart 2006, Sophia-Antipolis, France, September 20-22, 2006.
[22] Sylvain Lecomte , Gilles Grimaud , Didier Donsez, Implementation of Transactional Mechanisms for Open Smart Card
[23] Marcus Oestreicher, Transactions in Java Card, Computer Security Applications Conference, 1999. (ACSAC '99) Proceedings. 15th Annual.
[24] Zhang Jianjie, Li Feihui,GeYuanqing, et al, A Java Processor Suitable for Applications 0f Smatt Card, 2001 IEEE
[25] Michal Spivak Sivan Toledo, Storing a Persistent Transactional Object Heap on Flash Memory
[26]林锦阳. Design and Implementation of the Java Abstract Window Toolkit for the Embedded Java Runtime Environment(嵌入式Java窗口接口执行环境的设计与实现) [D],台湾,国立成功大学,2006
[27]李钢,李增智,杨振江等,关于Java技术在嵌入式系统中的应用研究[J],小型微型计算机系统,第22卷第9期,2001年9月
[28]陈国益,Java Card执行环境与实作[D],台湾,国立成功大学,2001
[29] Gilles Barthe, Guillaume Dufay, Line Jakubiec,A Formal Executable Semantics of the JavaCard Platform, D. Sands (Ed.): ESOP 2001, LNCS 2028, pp. 302～319, 2001
[30] SUN MicroSystems Inc.Java Card 2.2.2 Runtime Environment Specification [S].SUN MicroSystems, Inc, 2006
[31] SUN MicroSystems Inc.Java Card 2.2.2 Virtual Machine Specification[S].SUN MicroSystems, Inc , 2006
[32] Quang Huy Nguyen and Boutheina Chetali. Certifying native JAVA CARD API by formal refinement. In Smart Card Research and Advanced Applications, 7th IFIP WG 8.8/11.2 International Conference, CARDIS 2006, Tarragona, Spain, April 19–21, 2006, Proceedings, volume 3928 of LNCS, Springer, 2006, 313-328
[33] Claude March′e and Nicolas Rousset. Verification of JAVA CARD applets behavior with respect to transactions and card tears. In Proceedings, Software Engineering and Formal Methods (SEFM), Pune, India. IEEE CS Press, 2006.
[34] Hans Meijer,Erik Poll,Towards a Full Formal Specification of the Java Card API,I. Attali and T. Jensen (Eds.): E-smart 2001, LNCS 2140, 2001, 165-178
[35]陈士元.以智慧卡建构网际网路人际间支付之微付款系统[D],台湾,国立中央大学,2002.6
[36] Wojciech Mostowski. Formal reasoning about non-atomic JAVA CARD methods in Dynamic Logic. In Tobias Nipkow and Jayadev Misra, editors, Proceedings, Formal Methods (FM) 2006, LNCS. Springer, 2006
[37] Bernhard Beckert and Wojciech Mostowski. A program logic for handling JAVACARD’s transaction mechanism. In Mauro Pezze, editor, Proceedings, FundamentalApproaches to Software Engineering (FASE) Conference 2003, Warsaw, Poland,volume 2621 of LNCS, Springer, April 2003, 246-260
[38] Reiner Hahnle and Wojciech Mostowski. Verification of safety properties in the presence of transactions. In Gilles Barthe and Marieke Huisman, editors, Proceedings, Construction and Analysis of Safe, Secure and Interoperable Smart devices(CASSIS’04) Workshop, volume 3362 of LNCS, Springer, 2005, 151-171
[39]王明华,JavaUSIM卡安全计算研究[D],北京,北京邮电大学,2006
[40] Marcus Oestreicher. Transactions in Java Card[A]. ACSAC'99[C] USA, 1999, 291-298
[41]张大伟,Java卡及其应用技术研究[D],北京,北京航空航天大学,2004
[42]冉蜀阳,张明,金军等,Java智能卡原理与技术[M],北京,国防工业出版社2002.8
[43] Marcus Oestreicher,Ksheerabdhi Krishna, Object Lifetimes in Java Card, USENIX Workshop on Smartcard Technology, Chicago, Illinois, USA, May, 1999
[44] Benjam Golderg, Tag- free Garbage Collection for Strongly Typed ProgrammingLanguage[J], ACM SIGNPLAN Notices, 1991, 26(6), 165-176.
[45]谌宁,覃征.基于嵌入式Java虚拟机的垃圾回收算法[J],计算机应用,第25卷第1期,2005年1月,218-219
[46] WU Junmin SONG Zhenhua,A Real-time Relaxed Garbage Collection in DSM,电子学报,2007年16卷1期,7-12
[47]张武生,黄启峰,沈美明等.Class-Based Garbage Collection in Object-Oriented Programming Environments[J],清华大学学报,2003年8卷6期,658-666
[48] Ole Agsen, Garbage Collection and Local Variable type-precision and Live ness in Java Virtual Machine[A],Proc of SIGPLAN'98 Conference on Programming Language Design and Implementation[C],Atlanta, 1998,269-279
[49]陆荣幸,郁洲等. J2EE平台上MVC设计模式的研究与实现[J],计算机应用研究,2003年20卷3期,144-146
[50]郑秀林,金丽娜. SMS4算法在DSP中的实现研究[J],北京电子科技学院学报,第14卷第4期,2006年12月,34-36
[51]隆永红.密码管理开辟新航道[J],计算机世界报,2006年2月,第06期
[52]张远洋,李峥,徐建等.面积优先的分组密码算法SMS4 IP核设计[J],《电子技术应用》,2007年33卷1期,127-129
[53]国家商用密码管理办公室.无线局域网产品中使用的SMS4算法[EB/OL],http://www.oscca.gov.cn/UpFile/200621016423197990.pdf,2006-01
[54]张蕾,吴文玲.SMS4密码算法的差分故障攻击[J],计算机学报,第29卷第9期,2006年9月
[2]吴东辉,周捷,陈章龙. Java卡的设计[J],微型电脑应用,2003年第19卷第12期,20-23
[3] PIETER H. HARTEL, LUC MOREAU, Formalizing the Safety of Java, the Java Virtual Machine and Java Card, ACM Computing Surveys, Vol. 33, No. 4, December 2001, 517-558
[4] Egon BoErger,Wolfram Schulte, A Practical Method for Specification and Analysis of Exception HandlingDA Java/JVM Case Study, IEEE transaction on software engineering, VOL.26, NO.9, SEPTEMBER, 2000
[5] Wojciech Mostowski. Formalisation and verification of JAVA CARD security properties in Dynamic Logic[A]. Fundamental Ap-proaches to Software Engineering (FASE) Conference 2005, volume 3442 of LNCS, Springer, April 2005. 357-371.
[6] Ludovic Casset, Lilian Burdy, Antoine Requet,Formal Development of an Embedded Verifier for Java Card Byte Code [DB/CD], 2002
[7] Konstantinos Markantonakis, Keith Mayes, An overview of the GlobalPlatform smart card specification, Information Security Technical Report Volume 8, Issue 1, March 2003, 17-29
[8] Mei xue, Jing Yang, Junzhong Gu, Jiang Xiong. Research on DRM Track&Audit Based on Mobile Agent Technology[C]. IEEE. The 8th International Conference on Computer Supported Cooperative Work in Design Proceedings. 2003.
[9]林胜利,路宗强,王坤茹等. Java智能卡开发关键技术与实例[M],北京,中国铁道出版社,2006.9
[10] SUN Microsystems, Inc., JAVA CARD 1.1 Specification[S]. USA: Sun Microsystems Inc.1996,1~90
[11] SUN Microsystems, Inc., JAVA CARD 2.0 Specification[S]. USA: Sun Microsystems Inc.1997,1~90
[12] SUN Microsystems, Inc., Java Card 2.1.2 Virtual Machine Specification[S].SUN Microsystems, Inc , 2001
[13] SUN Microsystems Inc., Java Card 2.1.2 Runtime EnvironmentSpecification[S].SUN Microsystems, Inc, 2001
[14] SUN Microsystems, Inc., JAVA CARD 2.1.2 Application Programming Interface Specification [S], 2001.
[15] Wojciech Mostowski,Jing Pan,Srikanth Akkiraju,et al, A Comparison of Java Cards, State-of-A?airs, 2006
[16] SUN Microsystems, Inc., http://www.sun.com. JAVA CARD 2.2.2 Application Programming Interface Specification [S], March 2006
[17] L.R.Clausen, U.P.Schultz and G. Muller,et al, Java Bytecode Compression for Low-End Embedded Systems,ACM Transactions on Programming Languages and Systems, Vol. 22, No. 3, May 2000, 471-489.
[18] Ewen Denney,The Synthesis of a Java Card Tokenisation Algorithm
[19] Engelbert Hubbers and Erik Poll, Transactions and non-atomic API methods in Java Card:specification ambiguity and strange implementation behaviours
[20] Eran Gal, Sivan Toledo, A Transactional Flash File System for Microcontrollers, 2005 USENIX Annual Technical Conference, USENIX Association, 2005
[21] Engelbert Hubbers, Wojciech Mostowski, and Erik Poll, Tearing Java Cards. e-Smart 2006, Sophia-Antipolis, France, September 20-22, 2006.
[22] Sylvain Lecomte , Gilles Grimaud , Didier Donsez, Implementation of Transactional Mechanisms for Open Smart Card
[23] Marcus Oestreicher, Transactions in Java Card, Computer Security Applications Conference, 1999. (ACSAC '99) Proceedings. 15th Annual.
[24] Zhang Jianjie, Li Feihui,GeYuanqing, et al, A Java Processor Suitable for Applications 0f Smatt Card, 2001 IEEE
[25] Michal Spivak Sivan Toledo, Storing a Persistent Transactional Object Heap on Flash Memory
[26]林锦阳. Design and Implementation of the Java Abstract Window Toolkit for the Embedded Java Runtime Environment(嵌入式Java窗口接口执行环境的设计与实现) [D],台湾,国立成功大学,2006
[27]李钢,李增智,杨振江等,关于Java技术在嵌入式系统中的应用研究[J],小型微型计算机系统,第22卷第9期,2001年9月
[28]陈国益,Java Card执行环境与实作[D],台湾,国立成功大学,2001
[29] Gilles Barthe, Guillaume Dufay, Line Jakubiec,A Formal Executable Semantics of the JavaCard Platform, D. Sands (Ed.): ESOP 2001, LNCS 2028, pp. 302～319, 2001
[30] SUN MicroSystems Inc.Java Card 2.2.2 Runtime Environment Specification [S].SUN MicroSystems, Inc, 2006
[31] SUN MicroSystems Inc.Java Card 2.2.2 Virtual Machine Specification[S].SUN MicroSystems, Inc , 2006
[32] Quang Huy Nguyen and Boutheina Chetali. Certifying native JAVA CARD API by formal refinement. In Smart Card Research and Advanced Applications, 7th IFIP WG 8.8/11.2 International Conference, CARDIS 2006, Tarragona, Spain, April 19–21, 2006, Proceedings, volume 3928 of LNCS, Springer, 2006, 313-328
[33] Claude March′e and Nicolas Rousset. Verification of JAVA CARD applets behavior with respect to transactions and card tears. In Proceedings, Software Engineering and Formal Methods (SEFM), Pune, India. IEEE CS Press, 2006.
[34] Hans Meijer,Erik Poll,Towards a Full Formal Specification of the Java Card API,I. Attali and T. Jensen (Eds.): E-smart 2001, LNCS 2140, 2001, 165-178
[35]陈士元.以智慧卡建构网际网路人际间支付之微付款系统[D],台湾,国立中央大学,2002.6
[36] Wojciech Mostowski. Formal reasoning about non-atomic JAVA CARD methods in Dynamic Logic. In Tobias Nipkow and Jayadev Misra, editors, Proceedings, Formal Methods (FM) 2006, LNCS. Springer, 2006
[37] Bernhard Beckert and Wojciech Mostowski. A program logic for handling JAVACARD’s transaction mechanism. In Mauro Pezze, editor, Proceedings, FundamentalApproaches to Software Engineering (FASE) Conference 2003, Warsaw, Poland,volume 2621 of LNCS, Springer, April 2003, 246-260
[38] Reiner Hahnle and Wojciech Mostowski. Verification of safety properties in the presence of transactions. In Gilles Barthe and Marieke Huisman, editors, Proceedings, Construction and Analysis of Safe, Secure and Interoperable Smart devices(CASSIS’04) Workshop, volume 3362 of LNCS, Springer, 2005, 151-171
[39]王明华,JavaUSIM卡安全计算研究[D],北京,北京邮电大学,2006
[40] Marcus Oestreicher. Transactions in Java Card[A]. ACSAC'99[C] USA, 1999, 291-298
[41]张大伟,Java卡及其应用技术研究[D],北京,北京航空航天大学,2004
[42]冉蜀阳,张明,金军等,Java智能卡原理与技术[M],北京,国防工业出版社2002.8
[43] Marcus Oestreicher,Ksheerabdhi Krishna, Object Lifetimes in Java Card, USENIX Workshop on Smartcard Technology, Chicago, Illinois, USA, May, 1999
[44] Benjam Golderg, Tag- free Garbage Collection for Strongly Typed ProgrammingLanguage[J], ACM SIGNPLAN Notices, 1991, 26(6), 165-176.
[45]谌宁,覃征.基于嵌入式Java虚拟机的垃圾回收算法[J],计算机应用,第25卷第1期,2005年1月,218-219
[46] WU Junmin SONG Zhenhua,A Real-time Relaxed Garbage Collection in DSM,电子学报,2007年16卷1期,7-12
[47]张武生,黄启峰,沈美明等.Class-Based Garbage Collection in Object-Oriented Programming Environments[J],清华大学学报,2003年8卷6期,658-666
[48] Ole Agsen, Garbage Collection and Local Variable type-precision and Live ness in Java Virtual Machine[A],Proc of SIGPLAN'98 Conference on Programming Language Design and Implementation[C],Atlanta, 1998,269-279
[49]陆荣幸,郁洲等. J2EE平台上MVC设计模式的研究与实现[J],计算机应用研究,2003年20卷3期,144-146
[50]郑秀林,金丽娜. SMS4算法在DSP中的实现研究[J],北京电子科技学院学报,第14卷第4期,2006年12月,34-36
[51]隆永红.密码管理开辟新航道[J],计算机世界报,2006年2月,第06期
[52]张远洋,李峥,徐建等.面积优先的分组密码算法SMS4 IP核设计[J],《电子技术应用》,2007年33卷1期,127-129
[53]国家商用密码管理办公室.无线局域网产品中使用的SMS4算法[EB/OL],http://www.oscca.gov.cn/UpFile/200621016423197990.pdf,2006-01
[54]张蕾,吴文玲.SMS4密码算法的差分故障攻击[J],计算机学报,第29卷第9期,2006年9月