A User Centric Security Model for Tamper-Resistant Devices

4.6 Device Ownership
4.6.2 User Ownership
User ownership is associated with individual users that acquire a smart card either from
a supplier or an administrative authority. This ownership gives the privilege to a user
to install, delete, and use applications installed in her application space. There are two
scenarios in user ownership: 1) the UCTD is subscribed with an administrative authority
(discussed in the previous section), and 2) there is no administrative authority on the
UCTD, as in UCOM initiative [32].
In the rst case, the user has to abide by the terms and conditions of the administrative
authority. However, in the second case, there is no administrative authority and the user
has complete freedom on the UCTD. Therefore, in the second case we can say that the
user is the administrator and user at the same time.
4.6.3 Ownership Acquisition & Delegation
A UCTD in its pre-issuance state is under the default ownership of the UCTD manufacturer.
When an entity, whether an administrative authority or a user takes control of the
smart card, it will initiate an ownership acquisition process. The rst step of the acquisition
is to select whether the UCTD will be under administrative control or not. If it will
be, then the administrative authority takes the administrative ownership and then issues
the smart cards to individual users. Whether the UCTD is under administrative control or
not, the user will then acquire the ownership privileges. The ownership acquisition process
is same whether it is initiated by an administrator or a normal user; therefore, we will use
the term user to indicate administrator and normal user during this section. The process
is described below:
1. The user initiates the ownership acquisition process through the Card Application
Management Software (CAMS). At this stage, the user will indicate the type of ownership
(e.g. administrative or user) and CAMS will select the appropriate manager of
the UCTD. For administrative ownership, it will select subscription manager (section
4.2.5) and for user ownership, it will select cardholder's security manager (section
4.2.4). In case, the UCTD will only have one owner then the smart card will disable
the administrative ownership, Unless explicitly instructed not to do so by the
cardholder.
2. The UCTD requests the default ownership credentials, which are communicated to
the user by the card manufacturer. In response the user will provide the relevant
default credentials.
99