The SmartLogic Tool: Analysing and Testing Smart Card Protocols
The SmartLogic Tool: Analysing and Testing Smart Card Protocols
复制标题
SmartLogic 工具：分析和测试智能卡协议
DOI：
--
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
Joeri de Ruiter
中科院分区：
文献类型：
--
作者：
Gerhard de Koning Gans;Joeri de Ruiter
本文介绍了 Smart Logic，它是一种灵活的智能卡研究工具，可以完全控制智能卡通信通道的窃听、中间人攻击、中继和卡模拟。该硬件有现货供应，价格约为 100 欧元。此外，必要的固件和软件都是开源的。智能逻辑为智能卡协议研究和测试提供基本功能。通过重现两个攻击场景来证明这一点。第一个攻击是针对 EMV 支付协议的实施，其中支付终端被迫回滚到明文 PIN，而不是使用加密的 PIN。第二次攻击是在 20 公里距离内中继智能卡支付。我们还表明，这个距离可以增加到至少 10,000 公里。
This paper introduces the Smart Logic, which is a flexible smart card research tool that gives complete control over the smart card communication channel for eavesdropping, man-in-the-middle attacks, relaying and card emulation. The hardware is available off-the-shelf at a price of about 100 euros. Furthermore, the necessary firm- and software is open source. The Smart Logic provides essential functionality for smart card protocol research and testing. This is demonstrated by reproducing two attack scenarios. The first attack is on an implementation of the EMV payment protocol where a payment terminal is forced to do a rollback to plaintext PIN instead of using encrypted PIN. The second attack is a relay of a smart card payment over a 20 km distance. We also show that this distance can be increased to at least 10.000 km.