A User Centric Security Model for Tamper-Resistant Devices

7.3 UCTD Firewall
Table 7.2: Protocol notation and terminology
Notation Description
SE Represents the server application.
CL Represents the client application.
T EM Represents the TEM on a smart card.
F Represents the UCTD rewall on a smart card.
K A−B Long term symmetric key shared between entity A and B.
KS−C
t Session key generated by the TEM.
E K (Z) Represents symmetric encryption of the data Z with the key K
N X + num Random number of entity X is incremented by the value of num, where
num = 0, 1, 2, 3, .....
X|Y Represents the XOR binary operation on the data items X, Y.
IMA X Integrity Measurement Authorisation message generated by entity X.
V RE X Application assurance validation response generated by the TEM for
entity X.
AP Represents the authentication process a server application requires from
the respective client application, when requesting the shareable resources.
OR Represents the object reference to the server application's resource manager
(i.e. ARM).
7.3.8 Protocol Notation and Terminology
In this section, we list the notation used to describe the protocols in this chapter. The
notation listed in table 7.2 is an extension to the notation described in tables 4.2 and 6.1.
7.3.9 Enrolment Process
During the enrolment process, the SPs of a client and server application agree on the
business and technical terms for sharing their application resources on a UCTD.
Common Criteria
Certification Body
Application Assurance
Certificate (AAC)
Server Application’s
Service Provider’s
certificate
Client Application’s
Service Provider’s
Certificate
Application Certificate
(Includes User details)
Figure 7.9: Hierarchy of a client application's certicate
In this process, an SP of a client application provides assurance and validation from a
173