Re: [Muscle] ISO 7816-4,5,6,8 - any resources?

Sebastian Hans Sun, 12 Jan 2003 08:56:41 -0800


Peter Tomlinson wrote:

Global Platform is at http://www.globalplatform.org/. For Java card start at
http://java.sun.com/products/javacard/ - the Java Run Time spec (JCRE) shows
that the only 7816-4 style command defined in JCRE is SELECT on AID. Multos
4 is the current Multos spec, but doesn't include the card platform
identification - that is coming in a sort of Multos 4 plus.


ETSI SCP is the telecoms spec for a more general purpose platform than the
GSM card specs. Try www.etsi.org and http://docbox.etsi.org/; if you have
problems sorting out which spec is which, give Scott Guthery a shout (go via
his comprehensive FAQ at http://www.scdk.com/atsfaq.htm).

The SCP platform is currently made out of the following specs.

TS 102 221 defines the physical and logical (APDU commands) structure of the UICC platform

TS 102 223 is the Card Application Toolkit the generalizued form of the GSM and 3G toolkit.

TS 101 221 Numbering system for Telecommunication (AIDs )

TS 102 222 Administratirv Commands (File creation and deletion)

TS 102 224 Security mechanisms for UICC based Applications -
Functional requirements (comes from the 03.48 spec for GSM)

TS 102 225 Secured packet structure for UICC based applications (is referencinf GP)

TS 102 226 Remote APDU structure for UICC based applications (defines which APDU's can be send by a server in a wireless network to a UICC) using 102 225 to secure the APDU as a packet.

TS 102 230 Testspec for the UICC

TS 102 240 UICC Application Programming Interface
and Loader Requirements (the migrated 02.19 from GSM)

Regards

Sebastian Hans

Someone from the UK who is on the GP Technical Committee and now has some
time on his hands is Bill Reding ([EMAIL PROTECTED] +44 20 8991 9501).

And another attempt at handling more than one card platform type is the USA
GSC-IS (the generalised version of the military CAC spec), found on the USA
NIST web site http://smartcard.nist.gov/.

And, of course, MUSCLE people keep a close eye on the ATRs returned by
various card types. This isn't guaranteed to be a foolproof or entirely
stable way of identifying card platforms, but its the best that we have -
should be on the MUSCLE web site.

Peter

----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, January 12, 2003 1:49 PM
Subject: Re: [Muscle] ISO 7816-4,5,6,8 - any resources?

Thanks for your answer
1) 3 sets of detailed spec., where can I find them? BTW, is Multos still

an

issue?
2) What is ETSI SCP?

regards

Vladimir Beker

Aladdin. Securing the Global Village.
P.O. Box 11141,  Tel Aviv 61110 Israel
Tel:   +972 3 636-2222; Fax: +972 3 537-5796
Visit us at our Web site!  http://www.eAladdin.com

Aladdin supports Idealist. Visit http://www.idealist.org



On 01/12/2003 01:07:56 PM GMT "Peter Tomlinson" wrote:

Unfortunately, most of the functions defined in 7816-4, etc, are optional

and there is no method defined for finding the capabilities of the card.
There is a revision of 7816 under way at the moment (you can find a lot

of

the draft documents at my information site www.iosis.org, and any drafts
currently in the ballot phase will be at www.sc17.com ), but it has not
addressed the fundamental problems of the standard. The ISO/IEC SC17

crowd

are re-arranging deckchairs on a ship heading for the reefs.

We currently have 3 sets of detailed specifications for smart card
platforms: 2 of them included in Global Platform (recognises Java and

Multos

specifications), and the other is the ETSI SCP. GP specifies card

platform

recognition methods (but I doubt that any cards support this yet,

although

hope someone will enlighten us). This is the way that the market will go,
gradually leaving the uncomfortable parts of 7816 behind.

Peter
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Sunday, January 12, 2003 10:46 AM
Subject: [Muscle] ISO 7816-4,5,6,8 - any resources?

Hello,

To be honest, I find standard ISO 7616 (parts 4,5,6,8) were hard to
understanding (probabaly I am not clever enough :-)
I am not talking about spec. of particular card, but rather about

issues

defined in the standard itself (such as secure messaging, IDO etc.). In
particular, writing
higher-level tools I am trying to separate code that can be written
independently on the card type from those that must be card-specific.
Just a small example to show what I am talking about: SELECT defines

which

tags may appear in responce, but does not say how to detect which of

them

are supported by particular card and therefore are to be expected in

the

answer.

Can someone recommend good sources of information (books, URLs,

discussion

groups) where I could get help on these issues?
Thanks in advance

Vladimir Beker

Aladdin. Securing the Global Village.
P.O. Box 11141,  Tel Aviv 61110 Israel
Tel:   +972 3 636-2222; Fax: +972 3 537-5796
Visit us at our Web site!  http://www.eAladdin.com

Aladdin supports Idealist. Visit http://www.idealist.org




******************************* IMPORTANT !

**********************************

The content of this email and any attachments are confidential and

intended

for the named recipient(s) only.

If you have received this email in error please notify the sender

immediately.

Do not disclose the content of this message or make copies.

This email was scanned by eSafe Mail for viruses, vandals  and other
malicious content.

****************************************************************************

**

_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.musclecard.com/mailman/listinfo/muscle


_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.musclecard.com/mailman/listinfo/muscle


******************************* IMPORTANT !

**********************************

The content of this email and any attachments are confidential and

intended

for the named recipient(s) only.

If you have received this email in error please notify the sender

immediately.

Do not disclose the content of this message or make copies.

This email was scanned by eSafe Mail for viruses, vandals  and other
malicious content.

****************************************************************************
**

_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.musclecard.com/mailman/listinfo/muscle



_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.musclecard.com/mailman/listinfo/muscle


--
_____________________________________________________________________
Sebastian J. Hans
Java Card Business Development


email: [EMAIL PROTECTED]           Sun Microsystems
Tel: +49-(0)30-74 70 96 701             Sebastian J. Hans
Fax: +49-(0)30-74 70 96 99              Komturstrasse 18a
mobile: +49-(0)174-300 75 34            12099 Berlin
                                        Germany
_____________________________________________________________________



_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.musclecard.com/mailman/listinfo/muscle

Re: [Muscle] ISO 7816-4,5,6,8 - any resources?

Reply via email to