A User Centric Security Model for Tamper-Resistant Devices

2.2 Rationale for a User Centric Tamper-Resistant Device
2.2.1 Smart Card Environment
As pointed out by Porter [38], the crucial elements that stimulate competition and innovation
in an industry can be: a) the threat of new entrants, b) the threat of substitute
products or devices, and c) consumer power (culture). For the smart card industry, these
elements are present in a multitude of forms. The provision of having applications on a
mobile phone has enabled new entrants to venture into the traditionally monopolised industries
like the payment sector. Companies like PayPal, Google or any other third party
can oer a mobile payment service. In addition smart phones, with inclusion of Near Field
Communication (NFC) functionality, can provide a substitute for traditional smart card
applications like transport ticketing and access control [39]. Technology savvy consumers
require more features on a device, a need [40], which is successfully fullled by high-end
smart phones (e.g. the iPhone). Smart cards are lagging behind in providing such possibilities.
Nevertheless, the NFC technology provides an opportunity for the convergence of
dierent services on a single smart card.
In NFC trials around the world [41], the prominent framework that is deployed is an
extension of the ICOM model and is referred as the Trusted Service Manager (TSM) [42].
It has gained support from the banking and telecom sectors [43, 44].
CIB
CIB 2
MNO 1
1
TSO1
MNO 2
TSO 2
TSM-1
TSM-2
LC 1 LC 2
SC A
C A
SC B
C B
SC C
C C
SC D
C D
Figure 2.1: Trusted Service Manager (TSM) architecture
The TSM architecture is illustrated in gure 2.1 in which we have two TSM networks:
namely TSM-1 and TSM-2. Each network has a Mobile Network Operator (MNO), a Card
Issuing Bank (CIB), a Transport Service Operator (TSO) and a Leisure Centre (LC).
A customer C A receives a smart card (SC A ) from the TSM-1. The customer C A would
only be able to have applications on the SC A from the MNO 1 , CIB 1 , TSO 1 , and LC 1 .
However, if C A does banking with the CIB 2 that is associated with TSM-2 then she has to
either acquire a new smart card from TSM-2 or change banks, eectively creating market
segmentation.
33