A User Centric Security Model for Tamper-Resistant Devices

C.8 Application Binding Protocol - Distributed
C.8.2
Server Application
Implementation of a server application that responds to the application binding request in
the CDAM rewall mechanism is listed as below:
1 package protocolABPDServerApp ;
2
3 import javacard . framework .APDU;
4 import javacard . framework . Applet ;
5 import javacard . framework . ISO7816 ;
6 import javacard . framework . ISOException ;
7 import javacard . framework . JCSystem ;
8 import javacard . framework . U t i l ;
9 import javacard . s e c u r i t y . AESKey ;
10 import javacard . s e c u r i t y . Key ;
11 import javacard . s e c u r i t y . KeyBuilder ;
12 import javacard . s e c u r i t y . KeyPair ;
13 import javacard . s e c u r i t y . MessageDigest ;
14 import javacard . s e c u r i t y . RSAPrivateKey ;
15 import javacard . s e c u r i t y . RSAPublicKey ;
16 import javacard . s e c u r i t y . RandomData ;
17 import javacard . s e c u r i t y . S i g n a t u r e ;
18 import javacardx . apdu . ExtendedLength ;
19 import javacardx . crypto . Cipher ;
20 public class ProtocolHandler extends Applet implements ExtendedLength
21 {
22 private byte [ ] ClientAppRandomNumberArray ;
23 private byte [ ] ClientAppCookieArray ;
24 private byte [ ] ServerAppClientAppDHGeneratedValue ;
25 private byte [ ] ServerAppRandomNumberArray ;
26 private byte [ ] S e r v e r A p p C e r t i f i c a t e ;
27 private byte [ ] ClientAppDHChallengeTag = {
28 ( byte ) 0x1F , ( byte ) 0x5F , ( byte ) 0x5C , ( byte ) 0x01 } ;
29 private byte [ ] MessageHandlerTagOne = {
30 ( byte ) 0x1F , ( byte ) 0xC0 , ( byte ) 0xAA, ( byte ) 0xAA, ( byte ) 0x00 , ( byte )
31 0x00 , ( byte ) 0x00 } ;
32 private byte [ ] MessageHandlerTagTwo = {
33 ( byte ) 0x1F , ( byte ) 0xC0 , ( byte ) 0xBB, ( byte ) 0xBB, ( byte ) 0x00 , ( byte )
34 0x00 , ( byte ) 0x00 } ;
35 private byte [ ] ClientAppIdentity = null ;
36 private byte [ ] ClientAppRandomNumberTag = {
37 ( byte ) 0x1F , ( byte ) 0x5F , ( byte ) 0x5A , ( byte ) 0x01 } ;
38 private byte [ ] ClientAppCookieTag = {
39 ( byte ) 0x1F , ( byte ) 0x5F , ( byte ) 0x5B , ( byte ) 0x01 } ;
40 private byte [ ] EncryptedDataTag = {
41 ( byte ) 0x1F , ( byte ) 0xC0 , ( byte ) 0xFE , ( byte ) 0x01 } ;
42 private byte [ ] SignedDataTag = {
43 ( byte ) 0x1F , ( byte ) 0x5F , ( byte ) 0x5D , ( byte ) 0x02 } ;
44 private byte [ ] MACedDataTag = {
45 ( byte ) 0x1F , ( byte ) 0x5F , ( byte ) 0x5D , ( byte ) 0x01 } ;
46 private byte [ ] PlatformHash = {
392