A User Centric Security Model for Tamper-Resistant Devices

6.2 Secure Channel Protocols
fail to provide: a) assurance that an SP is communicating with a genuine smart card
platform and not a simulator, b) assurance that the smart card security and operational
environment is certied by a reputed third party evaluation, c) assurance that the security
and operational environment state is still valid, as it was at the time of evaluation, and
d) assurance that the smart card is owned by the user who is requesting the application
download (user/card-platform binding authentication).
We dene the Secure and Trusted Channel Protocol (STCP) in the context of the UCTD
environment as a protocol providing a secure and reliable communication channel between
a smart card and an SP, coupled with an assurance of security and integrity concerning
the communicating smart card. The STCP can be used during: a) application installation/deletion
processes, and b) when the application communicates with its respective SP,
and vice versa.
6.2.2 Related Work
In this section, we restrict ourselves to a discussion of the protocols that are specically
proposed for the smart card environment and/or are being used as points of comparison in
later discussions. Detailed descriptions of the discussed protocols is provided in appendix
A, and this section will introduce these protocols.
Ever since the possibility arose that two computing devices could communicate with each
other, there has been research work on SCPs. An early discussion on various proposed
protocols can be found in [146]. A detailed comparison of authentication protocols for the
mobile network environment is presented in [168].
Early smart card protocols were based on the symmetric key crypto-system like SCP01 of
the GlobalPlatform specication [30] (this protocol is deprecated in the GlobalPlatform
card specication version 2.2). Other protocols specied by the GlobalPlatform speci-
cation are: SCP02 (based on Triple-DES), SCP10 (based on asymmetric key cryptosystem)
[30], SCP81 (based on SSL/TLS) [169], SCP03 (based on AES) [170], and SCP80
for the mobile telecom industry (based on symmetric key crypto-system) [171]. In addition
to this, entity authentication, key exchange, and application download protocols for the
smart card environment are proposed by [83, 172, 173].
The concept of trusted channel protocols was put forward by Gasmi et al. [165] along
with the adaptation of the TLS protocol [100] to meet the trusted channel requirements.
Armknecht et al. [167] propose another adaptation of OpenSSL to accommodate the concept
of the trusted channel, as do Zhou and Zhang [166]. However, at the time of writing
we were unable to nd any work that relates to the concept of the trusted channels for the
130