A proposal of secure information infrastructure based on PID
A proposal of secure information infrastructure based on PID
复制标题
基于PID的安全信息基础设施方案
DOI：
10.1093/ietfec/e91-a.1.229
复制
发表时间：
2002
影响因子：
--
通讯作者：
H. Yasuura
中科院分区：
文献类型：
--
作者：
浜崎 陽一郎;Y. Hamasaki;安浦 寛人;H. Yasuura
多用途智能卡系统由发行商、服务供应商和持卡人组成，其中持卡人是智能卡的接收者(来自发行商)，所述智能卡将与服务供应商提供的应用相关联地使用。对于多应用智能卡系统来说，可信的发行后程序修改是必要的，因为系统中的应用是在智能卡发行之后实现的。在本文中，我们提出了一个系统，其中只有可信的修改是可能的。在所提出的系统中，智能卡发行商在智能卡中存储唯一的称为ID的长位串。然后，智能卡被交给持卡人。在持卡人和相应的服务供应商之间共享ID(子ID)的唯一子串。发卡人和持卡人之间共享另一个子ID。在程序修改期间，使用子ID、单向散列函数和伪随机数生成函数的协议验证各方的身份和程序的真实性。
A multi-application smart card system consists of an issuer, service vendors and cardholders, where cardholders are recipients of smart cards (from the issuer) to be used in connection with applications offered by service vendors. Authentic post-issuance program modification is necessary for a multi-application smart card system because applications in the system are realized after the issuance of a smart card. In this paper, we propose a system where only authentic modification is possible. In the proposed system, the smart card issuer stores a unique long bitstring called PID in a smart card. The smart card is then given to the cardholder. A unique substring of the PID (subPID) is shared between the cardholder and a corresponding service vendor. Another subPID is shared between the issuer and the cardholder. During program modification, a protocol using the subPIDs, a one-way hash function and a pseudorandom number generator function verifies the identity of the parties and the authenticity of the program.