Objective
ISOP1 proposes solutions to overcome the handicaps of the Smart Card Industry to converge to a common development open platform starting from: Javacard, Multos from MasterCard and Smart Card for Windows. The interoperability will be achieved by defining high level's encapsulating different multi-application operating systems. This standard architecture involves protection profiles, tools and proof of properties. Partners like Visa UK, Mondex, Europay will participate for requirements, definition and support for pilots (ISOP2). The tasks are Co-ordination and interface with Eurosmart and security agencies (SCSSI, BSI, GISA), analysis of the market to define the business models according to the security requirements of three leading industries (Banking, PayT, GSM), architecture for Interoperability, security models and protection profiles, development of tools and APIs for a demonstrator as proof of concept.
Objectives:
The ISOP1 project will propose solutions to allow the Smart Card Industry to converge to a common development platform starting from the different existing ones : open platform environment such as JavaCard, Multos from MasterCard and Smart Card for Windows. The project will demonstrate the interoperability of open platform by defining an architecture for interoperability at high level, through API's encapsulating different multi-application operating systems. Associated to this standard architecture is the necessity for a common view on security through protection profiles and for tools enabling easy development and proof of properties. As proof of concept the solutions will be validated by a complete set of demonstrators (Smart Card, terminals and software tools). Strategic market players like Visa International, Visa UK, Mondex and Europay will participate for requirements, definition and support for pilots.
Work description:
The work will be co-ordinated and interfaced with the Eurosmart and security agencies (SCSSI, BSI, GISA) for the evaluation of the Protection Profiles. The project will be promoted through protection profiles and a formal model of the architecture. The market will be analysed to define the business model according to the security needs and requirements of the three leading industrial sectors: Banking, PayTV, GSM. The architecture for interoperability will also be defined (Java Card, Multos, Smart Cards for Windows) and critical components for interoperability will be identified and analysed.
Security models and protection profiles will also be defined. The different models (Banking, GSM and PayTV) imply different requirements and needs in terms of security. From this analysis, it will be possible to extract a common view on the level of security (security requirements, security targets and certification procedures). For each business model, a protection profile will be produced to synthesise this analysis and to define the security requirements. Those protection profiles will be the deliverables of this important phase. Tools and APIs will be specified and developed for a secure open platform demonstrators and a demonstrator for "proof of concept" will validate the consistency of the specifications and deliverables that are the outcomes of the project.
Fields of science
CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques.
CORDIS classifies projects with EuroSciVoc, a multilingual taxonomy of fields of science, through a semi-automatic process based on NLP techniques.
Call for proposal
Data not availableFunding Scheme
CSC - Cost-sharing contractsCoordinator
78430 LOUVECIENNES
France