A User Centric Security Model for Tamper-Resistant Devices

3.1 Introduction
3.1 Introduction
The ICOM has played a major role in the spread of smart card technology to every aspect
of modern life. Card issuers see smart cards as a conduit for customer loyalty, rather than
as a mere electronic device used to access services. Smart cards have become a market
presence, a means of customer outreach and even in certain circumstances a status symbol
(i.e. privilege cards). Given all the above, it is obvious why surrendering control of smart
cards is a dicult decision for any organisation to contemplate. In this chapter, we describe
the ICOM architecture along with prominent platforms that support it.
The aim of a UCTD is to provide security, trust, and privacy services while being interoperable
with diverse computing devices (e.g. computers, mobile phones, and tablets).
The ownership model for the UCTD has to strike a balance between the user's freedom
of choice and the SP's requirements of security, intellectual property protection, control,
and reliability of their application. For this purpose, we propose the UCOM because it
takes into account the ownership requirements of the UCTD framework. Therefore, in this
chapter we discuss the UCOM architecture, its main stakeholders, and their requirements.
In some cases, there is a need to have an administrative authority that manages a computing
platform. Two examples of such an authority can be parents and MNOs. On a
computing platform used by children, the respective parents would like to manage the
overall platform while giving the children the right to install or delete any application
that does not violate the policy dened by the parents. Similarly, an MNO might provide
a mobile handset to a customer in return for signing a xed term contract. During the
contract period, the MNO might be involved with the UCTD that came with the mobile
handset and they might want to have the administrative rights to it. We propose a model
that accommodates the requirement of administrative authority on a UCTD (smart card),
while adhering to the UCOM. Such a model will protect the security and privacy of the
user, while implementing the usage policy dened by the administrative authority. We
refer to this model as Coopetitive Architecture for Smart Cards (CASC), which is also
discussed in this chapter.
Structure of the Chapter: Section 3.2 discusses the ICOM and its advantages and disadvantages.
In section 3.3, we briey introduce prominent platforms that support the ICOM
framework. In section 3.4, we describe the ICOM and its major components. The security
and operational requirements of individual UCOM stakeholders are discussed in section
3.5. The extension to the UCOM framework to include provision for an administrative
authority is described in section 3.6. Finally, we conclude the chapter in section 3.7.
Before diving into the chapter, we want to explain that the discussion of dierent management
models in the previous chapter and in this chapter is necessary to appreciate our
52