Java Card Entrusted Management Command Security Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Java card technology, there is a lack of a specified method for verifying the legitimacy of entrusted management commands, leading to potential security risks due to the execution of illegal commands.
Innovation Solution
A method is introduced where a security domain receives APDU data, parses it to locate and obtain a token, then sends the token length and token to the card issuer's security domain for verification, which checks the lifecycle status, access permissions, and performs signature calculations to ensure the command's legitimacy before executing the entrusted management operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the security domain executes entrusted management commands without a specified verification method, then the operation efficiency is improved, but the security reliability deteriorates due to potential execution of illegal commands
Solution Approach 1:
The patent applies preliminary action by verifying the token in the entrusted management command before executing the command. The security domain performs token verification as a preliminary step to ensure command legitimacy, preventing illegal commands from being executed while maintaining efficient operation flow.
Solution Approach 2:
The patent uses an intermediary approach by introducing a token as a mediator between the command sender and the security domain. The token serves as verification evidence that mediates the trust relationship, allowing the security domain to authenticate command legitimacy without direct complex verification processes.
2Reliability
If a token verification mechanism is introduced to verify entrusted management commands, then the security reliability is improved, but the device complexity increases due to additional verification steps
Solution Approach 1:
The patent extracts the verification logic into a separate token verification process. By taking out the token verification as a distinct step from the command execution flow, the system maintains clear separation of concerns, making the verification mechanism manageable and the overall system architecture more organized despite the added complexity.
Solution Approach 2:
The patent uses parameter changes by verifying the token parameter in the command. The verification process checks specific parameters (token validity, format, authenticity) to determine command legitimacy, transforming a complex security problem into a parameter-based verification task that can be systematically handled.
Data Source
AI summary
A method for secure execution of an entrusted management command. The method includes: when an entrusted management command is received by a slave security domain, same parses the command, acquires a predetermined byte in the command, a token length, and a token, and transmits to a master security domain; when data is received by the master security domain, same checks a lifecycle status of the master security domain, a lifecycle status and a permission of the slave security domain, verifies the token when all checks are successful, and returns a status code to the slave security domain; and, the slave security domain determines the received status code, and if same is a predetermined status code, then executes an entrusted management operation. The present invention allows for determination of the validity of an entrusted management command, and further allows for prevention of an invalid entrusted management command from being executed, thus ensuring the security of data in a Java card.