A User Centric Security Model for Tamper-Resistant Devices

C.7 Application Binding Protocol - Local
C.7.1
Client Application
Implementation of a client application that request for the application binding in the
UCOM rewall mechanism is listed as below:
1 package AppBindingProt ;
2
3 import javacard . framework . ∗ ;
4 import javacard . s e c u r i t y . ∗ ;
5 import javacardx . crypto . ∗ ;
6 public class ClientApp {
7 byte [ ] C l i e n t I d e n t i t y = {
8 ( byte ) 0xbc , ( byte ) 0xc0 , ( byte ) 0xea , ( byte ) 0x07 , ( byte ) 0x94 } ;
9 byte [ ] S e r v e r D i g e s t = new byte [ 3 2 ] ;
10 byte [ ] S e r v e r I d e n t i t y = {
11 ( byte ) 0 x4f , ( byte ) 0x39 , ( byte ) 0 xf5 , ( byte ) 0xdb , ( byte ) 0xd1 } ;
12 byte [ ] TokenValue = {
13 ( byte ) 0 x4f , ( byte ) 0x39 , ( byte ) 0 xf5 , ( byte ) 0xdb } ;
14 byte [ ] c l i e n t R = {
15 ( byte ) 0x4D , ( byte ) 0xAB, ( byte ) 0xC0 , ( byte ) 0x70 , ( byte ) 0x8B , ( byte )
16 0x11 , ( byte ) 0x45 , ( byte ) 0xA9 , ( byte ) 0xCC, ( byte ) 0xD7 , ( byte ) 0x4F ,
17 ( byte ) 0x3A , ( byte ) 0xD8 , ( byte ) 0xBB, ( byte ) 0xF1 , ( byte ) 0x61 } ;
18 Cipher AESCipher ;
19 RandomData clientPRNG ;
20 AESKey clientTPMKey ;
21 private KeyPair client_SignKeyPair ;
22 short encryptionLength ;
23 AESKey myClientAppServerKey ;
24 Cipher myClientAppSignature ;
25 ScTPM mySCTPMRef;
26 ServerApp myServerAppRef ;
27 byte [ ] pMessage ;
28 PublicKey s e r v e r V e r i f i c a t i o n K e y ;
29 protected ClientApp ( ) {
30 clientPRNG = RandomData . g e t I n s t a n c e (RandomData .ALG_PSEUDO_RANDOM) ;
31 client_SignKeyPair = new KeyPair ( KeyPair .ALG_RSA_CRT,
32 KeyBuilder .LENGTH_RSA_512) ;
33 myClientAppServerKey = (AESKey) KeyBuilder . buildKey
34 ( KeyBuilder .TYPE_AES,
35 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
36 clientTPMKey = (AESKey) KeyBuilder . buildKey ( KeyBuilder .TYPE_AES,
37 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
38 AESCipher = Cipher . g e t I n s t a n c e ( Cipher .ALG_AES_BLOCK_128_CBC_NOPAD,
39 f a l s e ) ;
40 myClientAppSignature = Cipher . g e t I n s t a n c e ( Cipher .ALG_RSA_NOPAD,
41 f a l s e ) ;
42 }
43 public s t a t i c ClientApp o b j ectGenerator ( ) {
44 return new ClientApp ( ) ;
45 }
46 public void o b j e c t I n s t a n t i a t i o n ( ) {
365