Java Card Applet Execution Control via Platform ID Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The portability of Java applets across different IC Card platforms poses a security risk, as they can be executed on unauthorized platforms, potentially revealing program code and compromising security information.
Innovation Solution
A method is implemented to control applet execution by detecting the Java Card platform's identification number before running, allowing execution only on authorized platforms, thereby preventing unauthorized execution and protecting the applet's code and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a java card applet is made portable to execute on different java card platforms, then the applet can be executed on multiple platforms without modification, but security is compromised as unauthorized platforms can execute the applet and potentially discover program code and security information
Solution Approach 1:
The patent applies preliminary action by detecting the platform identification number before the applet execution begins. The detection occurs during the initialization phase, allowing the system to determine whether to proceed with full execution or restrict to limited functionality before any sensitive operations occur. This prevents unauthorized platforms from accessing security information while still allowing legitimate platforms to execute the applet normally.
2Ease of operation
If an applet is downloaded to a different IC Card produced by a different manufacturer, then the applet can be executed on the new platform due to java portability, but the program code and security information may be discovered by unauthorized parties
Solution Approach 1:
The patent introduces an intermediary mechanism - the platform identification number detection system - that acts as a mediator between the applet and the execution environment. This intermediary verifies the legitimacy of the hosting platform before allowing the applet to execute, thereby preventing unauthorized code discovery while maintaining legitimate portability. The intermediary layer filters out unauthorized execution attempts without affecting authorized ones.
3Reliability
If the applet execution is restricted to a specific java card platform, then security information is protected, but the applet cannot be executed on other platforms even when they are compatible
Solution Approach 1:
The patent applies dynamics by making the applet execution behavior adaptive based on the detected platform identification number. Rather than using static restriction, the system dynamically adjusts its execution mode: full functionality for authorized platforms and limited functionality for unauthorized platforms. This dynamic approach maintains security while preserving flexibility for legitimate cross-platform execution scenarios.
Data Source
AI summary
A method for controlling the execution of an applet for an IC Card including a java card platform, includes a phase for downloading the applet inside the IC Card, a phase for executing the applet through the java card platform and a phase for storing an identification platform number inside a memory portion of the IC Card. The phase for executing the applet has a first step for detecting the identification platform number to perform the phase for executing the applet with or without restrictions, respectively if the identification platform number is not or is detected by the step for detecting. The applet is a java card applet or a SIM toolkit applet.