Safe JAVA card secret key storage method

Abstract

The invention discloses a safe JAVA card secret key storage method. The storage method comprises the following steps of initializing the card, writing in a safe channel initial secret key in an issuing party safety margin, and establishing a safe channel initial secret key object; setting an ENC (encryption) secret key and an MAC (message authentication code) secret key in the safe channel initial secret key through an encrypted ENC secret key and an encrypted MAC secret key; encrypting a DEK (data encryption key) secret key in the safe channel initial secret key through a DEK secret key; and storing an encrypted safe channel initial secret key value in a PUT KEY instruction into the secret key object, and storing a public key value to a public key object. By adoption of the safe JAVA card secret key storage method, the encapsulation and safety in storage of the secret key are improved, and the use time of the secret key is saved.

Description

technical field [0001] The invention relates to the technical field of smart cards, in particular to a safe JAVA card key storage method. Background technique [0002] JAVA card technology is a technology that enables programs written in JAVA language to run on smart cards or resource-constrained devices by tailoring the JAVA technology. At present, JAVA card technology has been widely used in finance, telecommunications and other industries. JAVA cards often carry a lot of confidential information about users, so people are more and more concerned about the security of JAVA cards themselves. [0003] In the JAVA card, in order to perform some calculations, it is often necessary to save some keys. The key is an extremely important sensitive data in the JAVA card, and the security of its storage must be guaranteed. [0004] GlobalPlatform is a global organization dedicated to providing a common security and card management architecture. Most of the JAVA cards currently on th...

AI Technical Summary

Problems solved by technology

[0016] Common key storage methods in the card can be stored in arrays or key objects. Storage in arrays is obviously the most insecure storage method. If you use this method to store, then The security of the card can only be guaranteed by the fact that the key is not allowed to be read in the GlobalPlatform specification, but the attacker is likely to obtain the key value through brute force cracking or logical attack

[0017] It is obviously more secure than the array method to store the key object. It stores the key value in the key object, and the user cannot directly access the actual value of the key. The key in the card is also in the form of a key object. transmission, which improves encapsulation, but since the key value is transmitted to the card through the PUTKEY command, and the key value in the command has been encrypted, to store it in the key object, only Operations where the key value is first decrypted and then used to set the key object, in these operations the key value is likely to be leaked through the array of commands

Images