Hello, Bettina
The difference is not in the hardware but in the use of it. The use of the SIM forces
you to trust the SIM manufacturer (for its security) and the telecom operator (for its
management).
Did you know, for example, that the telecom operator can load an applet into the SIM
that can read PIN protected files even when the PIN has not been entered? This is
because of a backdoor in the smart card operating system provided by the smart card
manufacturers that lets the Java Virtual Machine access files without access control
checking.
It is because of behavior like this that folks are calling into question their trust
of the SIM manufacturers and the telecom operators.
I know in Europe you tend to turn control of your trust relationships over to the
government so perhaps this behavior is does not bother you. In other parts of the
world individuals wish to keep that control to themselves. When they say that it
requires a PIN entry to read a file they expect that that instruction will be honored.
Cheers, Scott
-----Original Message-----
From: Bettina Martelli [mailto:[EMAIL PROTECTED]
Sent: Thu 3/11/2004 4:21 AM
To: [EMAIL PROTECTED]
Cc:
Subject: Re: [Muscle] Wireless Wallet - Already in Korea
Hello, list!
Anders Rundgren schrieb:
>>>>I say it one more time: The smart ID card is dead and gone.
>>>>It is beyond repair.
....
>
> Mobile phones have already reached critical mass since at
> least 5 years back and are replaced at a high frequency
> soon making such devices prime candidates for housing
> "virtual cards" allowing both governments and banks to
> co-exist.
I really don't understand this contraposition between
smart cards and mobile phones as "virtual" cards.
In each mobile phone there is a "real" smart card inside,
the SIM. Insofar a mobile phone ist just equivalent to
card + reader + some logic + modem.
The smard cards manufacturers also produce the SIMs.
The chips are the same. The market is the same.
Where is the difference?
Cheers Bettina Martelli
--
Dr. Bettina Martelli, Development, TC TrustCenter AG
SonninstraÃe 24-28, D-20097 Hamburg, Germany
Tel: +49 (0)40 / 80 80 26-0 Fax: +49 (0)40 / 80 80 26-126
_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.musclecard.com/mailman/listinfo/muscle
_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.musclecard.com/mailman/listinfo/muscle
