




版權說明:本文檔由用戶提供并上傳,收益歸屬內容提供方,若內容存在侵權,請進行舉報或認領
文檔簡介
中英文資料翻譯IntroductionofsmartcardAsmartcard,chipcard,orintegratedcircuitcard(ICC),isinanypocket-sizedcardwithembeddedintegratedcircuitswhichcanprocessdata.Thisimpliesthatitcanreceiveinputwhichisprocessed—bywayoftheICCapplications—anddeliveredasanoutput.TherearetwobroadcategoriesofICCs.Memorycardscontainonlynon-volatilememorystoragecomponents,andperhapssomespecificsecuritylogic.Microprocessorcardscontainvolatilememoryandmicroprocessorcomponents.Thecardismadeofplastic,generallyPVC,butsometimesABS.Thecardmayembedahologramtoavoidcounterfeiting.Usingsmartcardsalsoisaformofstrongsecurityauthenticationforsinglesign-onwithinlargecompaniesandorganizations.OverviewA"smartcard"isalsocharacterizedasfollows:Dimensionsarenormallycreditcardsize.TheID-1ofISO/IEC7810standarddefinesthemas85.60×53.98mm.AnotherpopularsizeisID-000whichis25×15mm(commonlyusedinSIMcards).Bothare0.76mmthick.Containsasecuritysystemwithtamper-resistantproperties(e.g.asecurecryptoprocessor,securefilesystem,human-readablefeatures)andiscapableofprovidingsecurityservices(e.g.confidentialityofinformationinthememory).Assetmanagedbywayofacentraladministrationsystemwhichinterchangesinformationandconfigurationsettingswiththecardthroughthesecuritysystem.Thelatterincludescardhotlisting,updatesforapplicationdata.Carddataistransferredtothecentraladministrationsystemthroughcardreadingdevices,suchasticketreaders,ATMsetc.BenefitsSmartcardscanbeusedforidentification,authentication,anddatastorage.[1]Smartcardsprovideameansofeffectingbusinesstransactionsinaflexible,secure,standardwaywithminimalhumanintervention.Smartcardcanprovidestrongauthentication[2]forsinglesign-onorenterprisesinglesign-ontocomputers,laptops,datawithencryption,enterpriseresourceplanningplatformssuchasSAP,etc.HistoryTheautomatedchipcardwasinventedbyGermanrocketscientistHelmutGr?ttrupandhiscolleagueJürgenDethloffin1968;thepatentwasfinallyapprovedin1982.ThefirstmassuseofthecardswasforpaymentinFrenchpayphones,startingin1983(Telecarte).RolandMorenoactuallypatentedhisfirstconceptofthememorycardin1974.In1977,MichelUgonfromHoneywellBullinventedthefirstmicroprocessorsmartcard.In1978,BullpatentedtheSPOM(SelfProgrammableOne-chipMicrocomputer)thatdefinesthenecessaryarchitecturetoauto-programthechip.Threeyearslater,theveryfirst"CP8"basedonthispatentwasproducedbyMotorola.Atthattime,Bullhad1200patentsrelatedtosmartcards.In2001,BullsolditsCP8DivisiontogetherwithallitspatentstoSchlumberger.Subsequently,SchlumbergercombineditssmartcarddepartmentandCP8andcreatedAxalto.In2006,AxaltoandGemplus,atthetimetheworld'sno.2andno.1smartcardmanufacturers,mergedandbecameGemalto.Asmartcard,combiningcreditcardanddebitcardproperties.The3by5mmsecuritychipembeddedinthecardisshownenlargedintheinset.Thecontactpadsonthecardenableselectronicaccesstothechip.ThesecondusewaswiththeintegrationofmicrochipsintoallFrenchdebitcards(CarteBleue)completedin1992.WhenpayinginFrancewithaCarteBleue,oneinsertsthecardintothemerchant'sterminal,thentypesthePIN,beforethetransactionisaccepted.Onlyverylimitedtransactions(suchaspayingsmallautoroutetolls)areacceptedwithoutPIN.Smart-card-basedelectronicpursesystems(inwhichvalueisstoredonthecardchip,notinanexternallyrecordedaccount,sothatmachinesacceptingthecardneednonetworkconnectivity)weretriedthroughoutEuropefromthemid-1990s,mostnotablyinGermany(Geldkarte),Austria(Quick),Belgium(Proton),France(Moneo),theNetherlands(ChipknipandChipper),Switzerland("Cash"),Norway("Mondex"),Sweden("Cash"),Finland("Avant"),UK("Mondex"),Denmark("Danm?nt")andPortugal("Porta-moedasMultibanco").Themajorboominsmartcardusecameinthe1990s,withtheintroductionofthesmart-card-basedSIMusedinGSMmobilephoneequipmentinEurope.WiththeubiquityofmobilephonesinEurope,smartcardshavebecomeverycommon.TheinternationalpaymentbrandsMasterCard,Visa,andEuropayagreedin1993toworktogethertodevelopthespecificationsfortheuseofsmartcardsinpaymentcardsusedaseitheradebitoracreditcard.ThefirstversionoftheEMVsystemwasreleasedin1994.In1998astablereleaseofthespecificationswasavailable.EMVco,thecompanyresponsibleforthelong-termmaintenanceofthesystem,upgradedthespecificationin2000andmostrecentlyin2004.ThegoalofEMVcoistoassurethevariousfinancialinstitutionsandretailersthatthespecificationsretainbackwardcompatibilitywiththe1998version.WiththeexceptionofcountriessuchastheUnitedStatesofAmericatherehasbeensignificantprogressinthedeploymentofEMV-compliantpointofsaleequipmentandtheissuanceofdebitandorcreditcardsadheringtheEMVspecifications.Typically,acountry'snationalpaymentassociation,incoordinationwithMasterCardInternational,VisaInternational,AmericanExpressandJCB,developdetailedimplementationplansassuringacoordinatedeffortbythevariousstakeholdersinvolved.ThebackersofEMVclaimitisaparadigmshiftinthewayonelooksatpaymentsystems.Incountrieswherebanksdonotcurrentlyofferasinglecardcapableofsupportingmultipleaccounttypes,theremaybemerittothisstatement.Thoughsomebanksinthesecountriesareconsideringissuingonecardthatwillserveasbothadebitcardandasacreditcard,thebusinessjustificationforthisisstillquiteelusive.WithinEMVaconceptcalledApplicationSelectiondefineshowtheconsumerselectswhichmeansofpaymenttoemployforthatpurchaseatthepointofsale.Forthebanksinterestedinintroducingsmartcardstheonlyquantifiablebenefitistheabilitytoforecastasignificantreductioninfraud,inparticularcounterfeit,lostandstolen.Thecurrentleveloffraudacountryisexperiencing,coupledwithwhetherthatcountry'slawsassigntheriskoffraudtotheconsumerorthebank,determinesifthereisabusinesscaseforthefinancialinstitutions.SomecriticsclaimthatthesavingsarefarlessthanthecostofimplementingEMV,andthusmanybelievethattheUSApaymentsindustrywillopttowaitoutthecurrentEMVlifecycleinordertoimplementnew,contactlesstechnology.Smartcardswithcontactlessinterfacesarebecomingincreasinglypopularforpaymentandticketingapplicationssuchasmasstransit.VisaandMasterCardhaveagreedtoaneasy-to-implementversioncurrentlybeingdeployed(2004-2006)intheUSA.Acrosstheglobe,contactlessfarecollectionsystemsarebeingimplementedtodriveefficienciesinpublictransit.Thevariousstandardsemergingarelocalinfocusandarenotcompatible,thoughtheMIFAREStandardcardfromPhilipshasaconsiderablemarketshareintheUSandEurope.Smartcardsarealsobeingintroducedinpersonalidentificationandentitlementschemesatregional,national,andinternationallevels.Citizencards,drivers’licenses,andpatientcardschemesarebecomingmoreprevalent;ForexampleinMalaysia,thecompulsorynationalIDschemeMyKadincludes8differentapplicationsandisrolledoutfor18millionusers.ContactlesssmartcardsarebeingintegratedintoICAObiometricpassportstoenhancesecurityforinternationaltravel.ContactsmartcardContactsmartcardshaveacontactarea,comprisingseveralgold-platedcontactpads,thatisabout1cmsquare.Wheninsertedintoareader,thechipmakescontactwithelectricalconnectorsthatcanreadinformationfromthechipandwriteinformationback.[3]TheISO/IEC7816andISO/IEC7810seriesofstandardsdefine:thephysicalshapethepositionsandshapesoftheelectricalconnectorstheelectricalcharacteristicsthecommunicationsprotocols,thatincludestheformatofthecommandssenttothecardandtheresponsesreturnedbythecard.robustnessofthecardthefunctionalityThecardsdonotcontainbatteries;energyissuppliedbythecardreader.ElectricalsignalsdescriptionAsmartcardpinoutVCC:PowersupplyinputRST:Eitheruseditself(resetsignalsuppliedfromtheinterfacedevice)orincombinationwithaninternalresetcontrolcircuit(optionalusebythecard).Ifinternalresetisimplemented,thevoltagesupplyonVccismandatory.CLK:Clockingortimingsignal(optionalusebythecard).GND:Ground(referencevoltage).VPP:Programmingvoltageinput(deprecated/optionalusebythecard).I/O:InputorOutputforserialdatatotheintegratedcircuitinsidethecard.NOTE-Theuseofthetworemainingcontactswillbedefinedintheappropriateapplicationstandards.ReaderContactsmartcardreadersareusedasacommunicationsmediumbetweenthesmartcardandahost,e.g.acomputer,apointofsaleterminal,oramobiletelephone.SincethechipsinthefinancialcardsarethesameasthoseusedformobilephoneSubscriberIdentityModule(SIM)cards,justprogrammeddifferentlyandembeddedinadifferentshapedpieceofPVC,thechipmanufacturersarebuildingtothemoredemandingGSM/3Gstandards.So,forinstance,althoughEMVallowsachipcardtodraw50mAfromitsterminal,cardsarenormallywellinsidethetelephoneindustry's6mAlimit.Thisisallowingfinancialcardterminalstobecomesmallerandcheaper,andmovesareafoottoequipeveryhomePCwithacardreaderandsoftwaretomakeinternetshoppingmoresecure.[citationneeded]ContactlesssmartcardAsecondtypeisthecontactlesssmartcard,inwhichthechipcommunicateswiththecardreaderthroughRFIDinductiontechnology(atdataratesof106to848kbit/s).Thesecardsrequireonlycloseproximitytoanantennatocompletetransaction.Theyareoftenusedwhentransactionsmustbeprocessedquicklyorhands-free,suchasonmasstransitsystems,wheresmartcardscanbeusedwithoutevenremovingthemfromawallet.ThestandardforcontactlesssmartcardcommunicationsisISO/IEC14443.Itdefinestwotypesofcontactlesscards("A"and"B"),allowsforcommunicationsatdistancesupto10cm.TherehadbeenproposalsforISO/IEC14443typesC,D,EandFthathavebeenrejectedbytheInternationalOrganizationforStandardization.AnalternativestandardforcontactlesssmartcardsisISO15693,whichallowscommunicationsatdistancesupto50cm.ExamplesofwidelyusedcontactlesssmartcardsareHongKong'sOctopuscard,SouthKorea'sT-money(Bus,Subway,Taxi),London'sOystercard,JapanRail'sSuicaCardandMumbaiBustransportationserviceBESTusessmartcardsforbuspass,whichpredatetheISO/IEC14443standard.Allofthemareprimarilydesignedforpublictransportationpaymentandotherelectronicpurseapplications.ArelatedcontactlesstechnologyisRFID(radiofrequencyidentification).Incertaincases,itcanbeusedforapplicationssimilartothoseofcontactlesssmartcards,suchasforelectronictollcollection.RFIDdevicesusuallydonotincludewriteablememoryormicrocontrollerprocessingcapabilityascontactlesssmartcardsoftendo.Likesmartcardswithcontacts,contactlesscardsdonothaveabattery.Instead,theyuseabuilt-ininductortocapturesomeoftheincidentradio-frequencyinterrogationsignal,rectifyit,anduseittopowerthecard'selectronics.CryptographicsmartcardsCryptographicsmartcardsareoftenusedforsinglesign-on.MostadvancedsmartcardsareequippedwithspecializedcryptographichardwarethatletyouusealgorithmssuchasRSAandDSAonboard.Today'scryptographicsmartcardsarealsoabletogeneratekeypairsonboard,toavoidtheriskofhavingmorethanonecopyofthekey(sincebydesignthereusuallyisn'tawaytoextractprivatekeysfromasmartcard).Suchsmartcardsaremainlyusedfordigitalsignatureandsecureidentification,(seeapplicationssection).[4]ThemostcommonwaytoaccesscryptographicsmartcardfunctionsonacomputeristouseaPKCS#11libraryprovidedbythevendor.OnMicrosoftWindowsplatformstheCSPAPIisalsoadopted.Themostwidelyusedcryptographicalgorithmsinsmartcards(excludingtheGSMso-called"cryptoalgorithm")are3DES(TripleDES)andRSA.Thekeysetisusuallyloaded(DES)orgenerated(RSA)onthecardatthepersonalizationstage.ComputersecurityTheMozillaFirefoxwebbrowsercanusesmartcardstostorecertificatesforuseinsecurewebbrowsing[5].Somediskencryptionsystems,suchasFreeOTFEorTrueCrypt,canusesmartcardstosecurelyholdencryptionkeys,andalsotoaddanotherlayerofencryptiontocriticalpartsofthesecureddisk[6].Smartcardsarealsousedforsinglesign-ontologontocomputersSmartcardssupportfunctionalityhasbeenaddedtoWindowsLivePassportsFinancialTheapplicationsofsmartcardsincludetheiruseascreditorATMcards,inafuelcard,SIMsformobilephones,authorizationcardsforpaytelevision,pre-payutilitiesinhousehold,high-securityidentificationandaccess-controlcards,andpublictransportandpublicphonepaymentcards.Smartcardsmayalsobeusedaselectronicwallets.Thesmartcardchipcanbeloadedwithfundswhichcanbespentinparkingmetersandvendingmachinesoratvariousmerchants.Cryptographicprotocolsprotecttheexchangeofmoneybetweenthesmartcardandtheacceptingmachine.Thereisnoconnectiontotheissuingbanknecessary,sotheholderofthecardcanuseitregardlessofhimbeingtheowner.TheGermanGeldkarteisalsousedtovalidatethecustomersageatvendingmachinesforcigarettes.
智能卡簡介智能卡、芯片卡或IC卡(ICC),是指任何具有嵌入式集成電路并且可處理信息的袖珍卡。這意味著,它可以接收輸入并由IC卡處理程序處理后產生輸出。IC卡有兩大類:記憶卡只包含非易失性存儲器存儲組件,甚至只有一些具體的安全邏輯;微處理器卡含有揮發性內存和微處理器組成部分,該卡是由塑料(一般是聚氯乙烯,但有時是ABS樹脂)制成,可嵌入一個全息圖像,以避免偽造。“智能卡”的特點如下:尺寸通常為信用卡大小,根據ISO/IEC7810的ID-1標準定義為85.60×53.98毫米,還有一種流行的尺寸根據ID-000標準為25×15毫米,兩者都是0.76毫米厚。通常包含一個安全系統——防篡改屬性(例如一個安全的密碼,安全文件系統,人類可讀的功能等),并有能力提供安全服務(如對信息保密的記憶)。通過一個中央管理系統進行交流信息和配置設置的卡通過安全體系完成信息管理。后者包括信用卡更新的應用程序數據。卡數據傳送到中央管理系統通過卡閱讀設備,如車票的讀者,自動柜員機等好處:智能卡提供了一種手段,實行商業交易靈活,安全,標準方法以最小的人為干預。智能卡可以提供強大的身份驗證[2]為單點登錄或企業單點登錄電腦、筆記本電腦、數據加密、SAP等企業資源規劃平臺等。歷史:自動化的芯片卡是由德國火箭科學家HelmutGrottrup和他的同事JürgenDethloff在1968年提出,并1982年獲得專利。首次大規模使用的信用卡是開始于1983年用于在法國支付付費電話。RolandMoreno在1974年首次提出實際概念的記憶卡。1977年,MichelUgon發明了第一個微處理器的智能卡。1978年,Bull獲得SPOM(自可編程單片微機)的專利,它確定了其必要的結構,以進行芯片自動編程。三年后,第一個“CP8”由摩托羅拉公司在此基礎上獲得專利。到現在共有1200個有關智能卡的專利。智能卡結合了信用卡和借記卡的屬性。3到5毫米厚度使得安全芯片可以嵌入到卡中以存儲安全信息。卡上有可以通電的金屬片。智能卡的第二次的使用是在1992年的法國由整合芯片制成的借記卡(藍卡)。當在法國使用藍卡,只需要將卡插入到商家的終端,然后輸入密碼,在交易被接受之后便可完成支付。只有非常有限的交易(如支付小高速公路通行費)是使用了個人識別號碼。智能卡的電子錢包系統(信息記錄在卡上,而不是在外部記錄帳戶,使機器識別信用卡不需要網絡連接)從20世紀90年代中期開始風靡在整個歐洲:最典型的有德國(Geldkarte),奧地利(Quick),比利時(Proton),法國(Moneo),荷蘭(ChipknipandChipper),瑞士(Cash),瑞典(Cash),芬蘭(Avant),英國(Mondex),丹麥(Danm?nt)和葡萄牙(Porta-moedasMultibanco)。智能卡是在20世紀90年代隨著使用SIM卡的GSM移動電話設備在歐洲廣泛應用。隨著手機在歐洲的普及,智能卡已成為非常普遍的。國際支付品牌的MasterCard,Visa和Europay商定于1993年開發共同的標準,使用智能卡無論是作為借記卡還是信用卡都能在支付時使用。EMV系統的第一個版本的公布于1994年。在1998年發布了穩定的標準。EMVco公司負責系統的長期維護,并在2000年升級了標準,最近一次是在2004年。EMVco的目標是要保證各金融機構和零售商的標準保持1998年版向后兼容。除了一些國家堅持的EMV標準如美利堅合眾國已取得EMV兼容的銷售點設備和發放借記卡和信用卡部署的重大進展。一般來說,在國家支付協會的協調下,確保同MasterCard國際組織,Visa國際組織,AmericanExpress和JCB共同制訂詳細的實施計劃的標準一致,使各利益相關者參與。EMV卡的支持者聲稱它提供了一個支付系統的范例。在有些國家的銀行目前不提供單卡支持多個帳戶類型的服務的情況系,這個聲明可能是有道理的。雖然一些銀行在這些國家正在考慮發行一張卡,使其作為一個借記卡和信用卡,商業卡,但這仍然相當困難。在所謂的EMV概念下界定的消費者如何選擇支付手段成為銷售點。至于銀行感興趣的是介紹智能卡的標準化的好處是能夠顯著減少欺詐行為,特別是偽造,丟失和被盜。目前許多國家正在經歷欺詐行為,再加上無論是國家法律對消費者或銀行或是否有商業案例的金融機構賦予的欺詐風險。一些批評者宣稱,實施EMV儲蓄是遠遠低于成本的。因此許多人認為,美國支付行業將選擇等待目前的EMV的生命周期以便實施新的非接觸式技術。非接觸式接口智能卡在支付和票務應用方面變得越來越普遍,如大眾交通。Visa和MasterCard已同意在美國部署一個易于執行的版本(2004-2006)。在全球范圍內,非接觸式收費系統正
溫馨提示
- 1. 本站所有資源如無特殊說明,都需要本地電腦安裝OFFICE2007和PDF閱讀器。圖紙軟件為CAD,CAXA,PROE,UG,SolidWorks等.壓縮文件請下載最新的WinRAR軟件解壓。
- 2. 本站的文檔不包含任何第三方提供的附件圖紙等,如果需要附件,請聯系上傳者。文件的所有權益歸上傳用戶所有。
- 3. 本站RAR壓縮包中若帶圖紙,網頁內容里面會有圖紙預覽,若沒有圖紙預覽就沒有圖紙。
- 4. 未經權益所有人同意不得將文件中的內容挪作商業或盈利用途。
- 5. 人人文庫網僅提供信息存儲空間,僅對用戶上傳內容的表現方式做保護處理,對用戶上傳分享的文檔內容本身不做任何修改或編輯,并不能對任何下載內容負責。
- 6. 下載文件中如有侵權或不適當內容,請與我們聯系,我們立即糾正。
- 7. 本站不保證下載資源的準確性、安全性和完整性, 同時也不承擔用戶因使用這些下載資源對自己和他人造成任何形式的傷害或損失。
最新文檔
- 化妝常識考試題及答案
- 陳列培訓考試題及答案
- 柜臺彩妝師面試題及答案
- 2025年鐵爐鼓風機項目提案報告
- 中科軟java面試題及答案2025年
- 貿易日報面試題及答案
- 專科危重患者護理常規
- 建筑行業安全管理信息化建設方案評估報告
- 膽囊結石的課件
- 農村電商助力新型農業經營主體品牌建設
- 智能建造(利用智能技術和相關技術的建造方式)
- D500-D505 2016年合訂本防雷與接地圖集
- 廣東省高速公路工程施工安全標準化指南測試題補考(含答案)
- 氧化鋅避雷器基礎知識課件
- GB/T 5023.3-2008額定電壓450/750 V及以下聚氯乙烯絕緣電纜第3部分:固定布線用無護套電纜
- GB/T 29264-2012信息技術服務分類與代碼
- GB/T 17626.18-2016電磁兼容試驗和測量技術阻尼振蕩波抗擾度試驗
- 六年級科學上冊教學計劃
- 人教版數學六年級下冊期末測試卷及參考答案
- 會議管理系統的分析與設計
- 省級土壤樣品庫實施方案
評論
0/150
提交評論