JavaCard
JavaCard is familiar territory for the Digital Locksmiths, being well versed in all aspects of JavaCard development.
OS development: Over the last five years we have implemented the whole Java Virtual Machine, Run time Environment and Global Platform card manager for various clients and on a wide variety of Silicon Platforms. Our JavaCard implementation is based on our Hardware Abstraction Layer (Atlas) providing certified security coupled with rapid porting to the silicon of choice.
Our JavaCard has been implemented to the following specifications:
- JavaCard 3.0.3;
- Additional Java methods (e.g. bespoke cryptographic functionality);
- Global Platform 2.2.1;
- GlobalPlatform Amendments A, C and D.
Applet development: Our intimate knowledge of card operating systems and silicon chip characteristics means we can offer the highest quality advice regarding applet design, implementation and security management throughout the card's life cycle. We have implemented EMV payment applications, electronic purses, PKI/digital signature application and the ICAO application. We have also developed a host of bespoke applications ranging from 'simple' SAM modules for key management to reconfigurable multi function e-ticket applets for transport schemes.
We develop JavaCard applets with security in mind - it is fundamental to everything that we do. By being aware of the potential problems, and having the expertise to build security in from the start, we can develop secure applications without incurring the problems and expense of having to "bolt on" security measures as an afterthought.
At Digital Locksmiths, we are also happy to provide design and review consultancy to developers and warn them of the potential security pitfalls before they releasing security code into the hands of potential hackers. No matter how small the application, if it's worth the expense of putting it onto smartcards then it is worth the extra effort to make sure it lives up to your expectations.
Card production: An important task in a card's early life cycle, either on the production line or during personalisation, is to load applets and data into the cards. Typically on a production line this means as quickly as possible, whereas after delivery this means as securely as possible. Digital Locksmiths' experience in implementing and using the Global Platform specification with its associated cryptographic protocols is available to clients. We can simplify the learning curve for new entrants to the field, review procedures against best practice and implement utilities to simplify management procedures.
If your project uses JavaCard then Digital Locksmiths has experience and skills that will simplify your task and give you confidence that you understand the risks in the system.
