A User Centric Security Model for Tamper-Resistant Devices

5.3 Multos Card Management Framework
the application provider to sign their applications before they are loaded onto the smart
card. The Mandated DAP Authority will verify the signature and notify the application
provider.
One thing to note is that in any framework, whether it is pre-issuance or post-issuance
application loading in the GlobalPlatform card specication [30] or application loading
via OTA in the NFC mobile phone [155], the loading of cryptographic keys is dependent
on an entity (e.g. GP-CA or CKLA). The application provider has to trust these entities
and their aim is to provide the key material for application loading and management to
the respective application provider without revealing it to any malicious entity. Therefore,
such entities (e.g. GP-CA or CKLA) which in most cases belongs to an o-card actor (i.e.
card issuer), cannot be entertained in the UCOM proposal.
5.3 Multos Card Management Framework
In this section, we discuss Multos architecture for card management operations along with
the possibility that the architecture can be accommodated into the TSM-based framework
for NFC mobile phones.
5.3.1 Architecture Overview
The card management architecture for Multos is more straightforward than GlobalPlatform
(section 5.2.1). An overview of the Multos card management architecture is illustrated in
gure 5.2 and discussed below:
Public Key &
Application Header
Application
Provider
Signature
Verification Key &
Application Header
Multos Certification
Authority
Signature Key &
Application
Application Load
Certificate
User Personalisation Data
Application Load
Unit Generator
Smart Card
Cardholder
Card Issuer
Application Load Unit
Application Load
Certificate
Application Load
Facility
Application
Card Issued
Figure 5.2: Multos card management architecture
The shaded entities in gure 5.2 represent various roles, but traditionally they reside with
a single entity, for example the card issuer [97, 159]. An application provider will generate
114