Security protection method for JAVA card virtual machine

Abstract

The invention discloses a security protection method for a JAVA card virtual machine, which relates to the technical field of intelligent cards and comprises the following steps of: creating redundant backup variables for pointers of the JAVA card virtual machine, and adding checksum in a JAVA object data head; when the JAVA card virtual machine is reset and initialized, initializing all pointers, and assigning values of all the pointers to respective redundant backup variables; carrying out the judgement of the execution type of byte codes by the JAVA card virtual machine: when the execution type is to execute the bytecode and operate stack data, and an execution object member accesses the bytecode or an execution method returns the bytecode, performing security check based on the pointers, the redundant backup variables of the pointers and the data checksum to judge whether the bytecode is normally executed or not. According to the method, the security protection capability of the virtual machine can be effectively enhanced, and the use security of the JAVA card virtual machine is enhanced.

Description

technical field [0001] The invention relates to the technical field of smart cards, in particular to a security protection method for a JAVA card virtual machine. Background technique [0002] With the widespread use of JAVA (a computer programming language) smart card, the use security of JAVA smart card has also attracted more and more attention. Hackers can maliciously attack the applications loaded on the JAVA smart card, thereby illegally stealing the data stored in the application on the card. Private or Sensitive Data. [0003] Since the JAVA card virtual machine has firewall measures between applications, it is impossible to obtain private data through conventional means. At present, the common attack method is to attack the memory of the card by laser, modify the virtual machine program pointer of the JAVA virtual machine, the virtual machine Stack pointer, virtual machine method frame pointer, etc., conduct side-channel attacks on the process of operating the stac...

AI Technical Summary

Problems solved by technology

[0003] Since the JAVA card virtual machine has firewall measures between applications, it is impossible to obtain private data through conventional means. At present, the common attack method is to attack the memory of the card by laser, modify the virtual machine program pointer of the JAVA virtual machine, the virtual machine Stack pointer, virtual machine method frame pointer, etc., conduct side-channel attacks on the process of operating the stack and data in E2 (non-volatile storage area), and illegally access the stored data in the card through the firewall, so as to virtualize the JAVA card Threats to the safety of the machine

Images