A User Centric Security Model for Tamper-Resistant Devices

3.3 Frameworks for the ICOM
Application
A
Multos Firewall
Application
B
Multos Firewall
Application
C
Application
Space
Multos Firewall
Application Abstract Machine
Multos Operation System
Platform
Space
Smart Card Hardware
Figure 3.2: Generic representation of the Multos card architecture
The application installation and deletion mechanism proposed by the Multos specication
has stringent centralised architecture [97]. Every time an application is to be installed, an
application provider will request an Application Load Certicate from the Multos Certication
Authority through the appropriate card issuer. Because it has such a stringent
architecture and a mandatory requirement for a crypto co-processor, this highest security
evaluation level smart card platform is not considered the industry's leading specication.
This title goes to the Java Card technology, which has proliferated in the smart card industry
because of its exibility and robustness, and its readily available pool of experienced
developers.
3.3.2 Java Card
By 1990, Sun Microsystems had started a project to develop a language that generated
a program once that could then be executed on any micro-controller. Their only consideration
was the micro-controllers used in electronic appliances (i.e. toasters, washing and
coee machines, etc.). However, with the emergence of the internet came an increasing
need to deliver rich contents on the heterogeneous devices connected to the internet. The
Java language that accommodated these changes was invented by Sun Microsystems and
it can be adapted to the ever-growing personal computer market. Soon Java became a de
facto standard language for internet applications.
In 1996, engineers at the IT technology provider Schlumberger at Austin (TX, USA) developed
the Java Card, which is a smart card that supports a subset of Java language [98].
When this idea was made public, the smart card industry immediately became interested.
Later, Sun Microsystems arranged a meeting to gather input and explore the dynamics
of the smart card industry. All the major smart card manufacturers attended this meeting.
This was the beginning of the Java Card forum, which is an independent forum for
collaboration between dierent industrial players. Membership of the Java Card forum
59