A User Centric Security Model for Tamper-Resistant Devices

C.6 Application Acquisition and Contractual Agreement Protocol
C.6 Application Acquisition and Contractual Agreement Protocol
The Java Card implementation of the STCP ACA discussed in section 6.5 is listed in subsequent
sections.
C.6.1
Smart Card Implementation
Following is the implementation of the smart card protocol handler that supports the
STCP ACA .
1 package protocolACAP ;
2
3 import javacard . framework .APDU;
4 import javacard . framework . Applet ;
5 import javacard . framework . ISO7816 ;
6 import javacard . framework . ISOException ;
7 import javacard . framework . JCSystem ;
8 import javacard . framework . U t i l ;
9 import javacard . s e c u r i t y . AESKey ;
10 import javacard . s e c u r i t y . Key ;
11 import javacard . s e c u r i t y . KeyBuilder ;
12 import javacard . s e c u r i t y . KeyPair ;
13 import javacard . s e c u r i t y . MessageDigest ;
14 import javacard . s e c u r i t y . RSAPrivateKey ;
15 import javacard . s e c u r i t y . RSAPublicKey ;
16 import javacard . s e c u r i t y . RandomData ;
17 import javacard . s e c u r i t y . S i g n a t u r e ;
18 import javacardx . apdu . ExtendedLength ;
19 import javacardx . crypto . Cipher ;
20 public class ProtocolHandler extends Applet implements ExtendedLength {
21 private byte [ ] SPDHChanllengerArray ;
22 private byte [ ] SPRandomNumberArray ;
23 private byte [ ] SPCookieArray ;
24 private byte [ ] SCSPDHGeneratedValue ;
25 private byte [ ] SCRandomNumberArray ;
26 private byte [ ] S C U s e r C e r t i f i c a t e ;
27 private byte [ ] S C C e r t i f i c a t e ;
28 private byte [ ] SID ;
29 private byte [ ] SPDHChallengeTag = {
30 ( byte ) 0x1F , ( byte ) 0x5F , ( byte ) 0x5C , ( byte ) 0x01 } ;
31 private byte [ ] MessageHandlerTagOne = {
32 ( byte ) 0x1F , ( byte ) 0xC0 , ( byte ) 0xAA, ( byte ) 0xAA, ( byte ) 0x00 ,
( byte ) 0x00 ,
33 ( byte ) 0x00 } ;
34 private byte [ ] MessageHandlerTagTwo = {
35 ( byte ) 0x1F , ( byte ) 0xC0 , ( byte ) 0xBB, ( byte ) 0xBB, ( byte ) 0x00 ,
( byte ) 0x00 ,
36 ( byte ) 0x00 } ;
333