JavaCard
JavaCard is familiar territory for the Digital Locksmiths, being well versed in all aspects of JavaCard development.
OS development: Over the last five years we have implemented the whole Java Virtual Machine, Run time Environment and Global Platform card manager for various clients and on a wide variety of Silicon Platforms.
Applet development: Once again our intimate knowledge of card operating systems and silicon chip characteristics means we can offer the highest quality advice regarding applet design, implementation and security management throughout the card's life cycle. We have implemented EMV payment applications, electronic purses, PKI/digital signature application and the ICAO application. We have also developed a host of bespoke applications ranging from 'simple' SAM modules for key management to reconfigurable multi function e-ticket applets for transport schemes.
The apparent simplicity of JavaCard applet development is a double-edged sword. On the one hand it provides rapid development and prototyping; enabling users to test ideas and schemes without the expense and delay of developing masked ROM code for the cards; and a well-designed applet can be a secure applet. On the other hand the deceptive ease of the development cycle enables inexperienced users to develop functional applets that are full of potential security holes. We develop JavaCard applets with security in mind - it is fundamental to everything that we do. By being aware of the potential problems, and having the expertise to build security in from the start, we can develop secure applications without incurring the problems and expense of having to "bolt on" security measures as an afterthought.
At Digital Locksmiths, we are also happy to provide design and review consultancy to developers and warn them of the potential security pitfalls before they releasing security code into the hands of potential hackers. No matter how small the application, if it's worth the expense of putting it onto smartcards then it is worth the extra effort to make sure it lives up to your expectations.
Card production: An important task in a card's early life cycle, either on the production line or during personalisation, is to load applets and data into the cards. Typically on a production line this means as quickly as possible, whereas after delivery this means as securely as possible. Digital Locksmiths' experience in implementing and using the Global Platform specification with its associated cryptographic protocols is available to clients. We can simplify the learning curve for new entrants to the field, review procedures against best practice and implement utilities to simplify management procedures.
If your project uses JavaCard then Digital Locksmiths has experience and skills that will simplify your task and give you confidence that you understand the risks in the system.
