A User Centric Security Model for Tamper-Resistant Devices

3.4 User Centric Smart Card Ownership Model (UCOM)
3.4.4 Card Application Management Software (CAMS)
The CAMS acts as an interface between a smart card, an SP's Application Management
Server (AMS), and a cardholder, as illustrated by gure 3.6. The cardholder uses this
interface to authenticate with the SP's AMS and to perform smart card management
tasks (e.g. application installation, deletion and state change) [10]. In addition, it can
also provide protocol translation services to avoid any incompatibilities between the smart
card capability and the respective SP's AMS (e.g. in a scenario where a smart card does
not support the TCP/IP protocol [111]. Therefore, the CAMS will translate the TCP/IP
protocol to one supported by the smart card). The CAMS communicates directly with a
smart card, but it is hosted on the host devices that are discussed in the next section.
3.4.5 Host Device
Host devices are electronic devices that hold the smart card and facilitate it in establishing
a secure channel to an SP's AMS for application management tasks. These devices can
be categorised into mobile phones, kiosks, and computer-based host devices. There is no
specic security requirement on the host device. It is advisable to consider the host device
as insecure while implementing a solution supporting UCOM.
3.4.6 Service Provider (SP)
An SP is an organisation that oers smart card-based services. It develops applications that
support dierent smart card platforms (e.g. Java Card [28], and Multos [29]). A cardholder
can easily download the chosen application, and use it to access the SP's services.
To install an application and access the services provided by an SP, users have to register
with the SP. This registration mechanism is already in place in dierent industrial sectors
(such as banking, and telecom, etc.). After the successful completion of the registration,
an SP will send the account details to the user. The user will use these account details
to gain access to a server that provides the functionality to maintain the SP's application.
This server is called the Application Management Server (AMS). After an application is
installed, the user can access the services provided by the SP. To access these services, the
application on the smart card has to be authenticated by the SP's Application Services
Authentication Server (ASAS).
68