Verifying Extended Criteria for the Interoperability of Security Devices

TY - CHAP

T1 - Verifying Extended Criteria for the Interoperability of Security Devices

AU - Talamo, Maurizio

AU - Arcieri, Franco

AU - Della Penna, Giuseppe

AU - Dimitri, Andrea

AU - Intrigila, Benedetto

AU - Magazzeni, Daniele

PY - 2008

Y1 - 2008

N2 - In the next years, smart cards are going to become the main personal identification document in many nations. In particular, both Europe and United States are Currently working to this aim. Therefore, tens of millions of smart cards. based oil hardware devices provided by many different manufacturers. will be distributed all over the world, and used in particular to accomplish the security tasks of electronic authentication and electronic signature. In this context, the so called Common Criteria define the security requirements for digital signature devices. Unfortunately, these criteria do not address any interoperability issue between smart cards of different manufacturers, which usually implement digital signature process in still correct but Slightly different ways.To face the interoperability problem. we realized a complete testing environment whose core is the Crypto Probing System (c) Nestor Lab, an abstract interface to a generic cryptographic smart card, embedding a standard model of the correct card behavior. which can be used to test the digital signature process behavior, also in the presence of alternate or disturbed command sequences, in conjunction with automatic verification techniques such as model checking. The framework allows to verify abstract behavior models against real smart cards, so it can be used to automatically verify the Common Criteria as well as the extended interoperability criteria above and many other low-level constraints. In particular, in this paper we show how we can verify that the card, in the presence of a sequence of (partially) modified commands, rejects them Without any side effect, remaining usable, or accepts them, generating a correct final result.

AB - In the next years, smart cards are going to become the main personal identification document in many nations. In particular, both Europe and United States are Currently working to this aim. Therefore, tens of millions of smart cards. based oil hardware devices provided by many different manufacturers. will be distributed all over the world, and used in particular to accomplish the security tasks of electronic authentication and electronic signature. In this context, the so called Common Criteria define the security requirements for digital signature devices. Unfortunately, these criteria do not address any interoperability issue between smart cards of different manufacturers, which usually implement digital signature process in still correct but Slightly different ways.To face the interoperability problem. we realized a complete testing environment whose core is the Crypto Probing System (c) Nestor Lab, an abstract interface to a generic cryptographic smart card, embedding a standard model of the correct card behavior. which can be used to test the digital signature process behavior, also in the presence of alternate or disturbed command sequences, in conjunction with automatic verification techniques such as model checking. The framework allows to verify abstract behavior models against real smart cards, so it can be used to automatically verify the Common Criteria as well as the extended interoperability criteria above and many other low-level constraints. In particular, in this paper we show how we can verify that the card, in the presence of a sequence of (partially) modified commands, rejects them Without any side effect, remaining usable, or accepts them, generating a correct final result.

M3 - Conference paper

SN - 978-3-540-88872-7

VL - 5332 LNCS

SP - 1131

EP - 1139

BT - ON THE MOVE TO MEANINGFUL INTERNET SYSTEMS: OTM 2008, PT II, PROCEEDINGS

A2 - Meersman, R

A2 - Tari, Z

PB - Springer

CY - BERLIN

T2 - On the Move Confederated International Conference and Workshops

Y2 - 9 November 2008 through 14 November 2008

ER -