smartcard - How to choose Secure Channel Protocol to use? -


what mean smart card support scp 01 , scp02? , how choose between two? predefined in security domain or there command select 1 or other choice?

what mean smart card support scp 01 , scp02?

when want install applet on card or want delete applets , other sensitive operations (changing applets life-cycles example), need prove authenticate guy first (i.e. need prove owner of card). , when want have encrypted communication card, need implement secure channel. must cryptography operations. steps , structure of these operations mentioned in global-platform specifications in details. different versions of global platform specifications introduce different mechanism authentication. scp01, scp02 , scp03 name of these mechanism (stands secure channel protocol 01, 02 , 03). (other specifications such etsi, introduce other mechanism too).

and how choose between two?

well, typically each card support 1 of these authentication mechanisms after issuance. old cards support scp01 , newer ones support scp02 or scp03. refer globalplatform card specification in mutual authentication , secure channel sections details. card manufacturers provide option choose protocol once, in pre-personalization step. not common cards.


Comments