Eric Vétillard's Cardis2010 Slides

1,264 views
1,201 views

Published on

0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
1,264
On SlideShare
0
From Embeds
0
Number of Embeds
7
Actions
Shares
0
Downloads
48
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide

Eric Vétillard's Cardis2010 Slides

  1. 1. Where is our smart card AppStore? Eric Vétillard Cardis 2010
  2. 2. SIM Toolkit Menus & interactions from the SIM card
  3. 3. Java Card 1.0 Platform interoperability Application portability But … Applications are scripts
  4. 4. Java Card 2.1 Full-blown applications Multi-application cards Binary interoperability … But … APDUs
  5. 5. Java Card 2.2 RMI Hiding the low-level protocol But … not universal
  6. 6. Smart Card Web Server Based on standard protocols HTTP, TLS, … But … Still APDUs Many limitations
  7. 7. Java Card 3.0 Full blown Web Server TCP/IP based Ultimate (2010)
  8. 8. OpenPlatform 2.0.1’ Interoperable card management But … One actor ?
  9. 9. GlobalPlatform 2.1 Supports multiple providers/roles But … not very SIM-oriented
  10. 10. GlobalPlatform 2.2 SIM-oriented Full UICC profile, Supports NFC But … APDU
  11. 11. GlobalPlatform 3.0 Fully IP-based Supports SCWS Ultimate (2010)
  12. 12. Impressive • Open • Interoperable • Interoperable app • Multi-application management • High-level protocols • Multiple providers • Standard protocols • Works on UICC • Full IP support • Manages Web servers
  13. 13. But …
  14. 14. Who cares ?
  15. 15. Open Not everybody cares about that No Java Card in China Proprietary frameworks Operators are “big enough”
  16. 16. Interoperable Yes, we all like that But … we don’t get it easily Functional interop takes years No security interop (yet)
  17. 17. Multi-application Few people really care Applications are often tightly linked ( Some use cases in the SIM area )
  18. 18. Multi-provider Nobody cares In fact, it is mostly annoying Before NFC, no multi-provider cards It may still kill NFC
  19. 19. High-level protocols Only developers care Who cares about developers?
  20. 20. Standard Protocols Standard? Not on cards! Handset vendors are slow to react SCWS support ? USB SIM interface ?
  21. 21. Why?
  22. 22. Cards are Tokens Programmable tokens but still tokens
  23. 23. Wait !!
  24. 24. SIM cards !! SIM cards are more than tokens For the benefit of a single operator Losing value in a connected world Nice biz model (20th century)
  25. 25. NFC !! NFC supports multiple providers Have you seen NFC deployments ? Have you seen NFC biz models ?? Back to the brand, plus revenues
  26. 26. No Future ?
  27. 27. Assets ? Secure Small = Personal Cheap = Trusted Manageable = Here Personalizable
  28. 28. Environment ? Cloud Interconnection, all data accessible Identity? Mobile Here and Now Generative, Interactive
  29. 29. Here Me You
  30. 30. Soooo what ?? (some) research issues
  31. 31. Open Card Platforms The technology is there (almost)
  32. 32. Leveraging Locality
  33. 33. Think at the System Level
  34. 34. Think at the Human Level
  35. 35. Getting to Trust
  36. 36. Where is my App Store? Most likely, it will not come Smart cards are in the infrastructure Smart cards are lacking …
  37. 37. Where is my App Store?
  38. 38. Thank you!
  39. 39. For more information • Sources of inspiration – Usual suspects: Bruce, Ross, and friends – More industrial: Ajit Jaokar, Umair Haque – Compiled: http://javacard.vetilles.com • Image credits from Flickr culdesac par Gabba Gabba Hey! iconwall by liquidx appstoreiphone by Lee Bennett fuzzyball by andymangold androidmarket by Fragments of Eternity neons_night by an untrained eye mom_child_trust by Isobel T neons_toss by Neato Coolville Lightbulb by jamie hladky

×