From Tech in Asia Product Development Conference (Special Stage)  Speaker : Agus Purwanto, Founder Orbleaf Get more insightful updates from TIA by subscribe to techin.asia/updateselalu

1. The Future of
Smart Card Operating System

2. OrbLeaf Mission
Degrading smart card technological barrier, so that people could
gain access to smart card technology with relatively easy of use
and cost
Founded for sole mission to push Orb-Weaver technology onto
market

3. Smart Card?
=
=+ +

5. Smart Card Players

6. Engineers Privileged
Application Protocol Data Unit (APDU)
00A4000402 3F00 – 611C (SELECT FILE)
00C000001C – 621A820401213F00 (GET RESPONSE)
00A4000402 2FE2 – 610F (SELECT FILE)
00C000000F – 620D820401212FE2 (GET RESPONSE)
00B000000A – 0000000000000000000000000 9000 (READ BINARY)
00880000010 238FD2EA4E399280BBBC – 610C (MUTUAL AUTHENTICATE)
00C000000C – CE9047DA37F0CCE (GET RESPONSE)
COMMAND SET : ISO7816-4 (always follow the rules)

8. Smard Card Operating System
 Is a software that’s embedded within smart card device for handling any
command received from host controller
 Provide software abstraction of how host controller would interact with smart
card device (through APDU layer), instead of accessing transparent memory,
Example :
 ISO7816-4 Standard Command Interchange
 ISO7816-7 Structured Card Query Language (SCQL)
 Written in native language (C, C++ or Assembly), accessing smart card
microprocessor directly

9. Orb-Weaver
First conceived idea (Orb-Weaver) :
String Processing Virtual Machine
Small memory footprint (24KB CODE, 2K RAM)
Allows execution of user application on native smart card OS
API oriented, Generic Purpose Scripting Language, Seamless Execution
Object Management (automatic garbage collection)
Automated Exception Handling
Turing Complete
TARGET : SIM Toolkit Engine (U-SIM Card) – 3GPP 11.14/ETSI 102.223

10. First learn the rules, then learn to break them
artistically - bisqwit (Joel Yliluoma)

12. Platform Singularity
=
=
+
+AHA Moment : Order of Magnitude reached

13. How to Enable non-Engineer people to write
program for smart card without needed to
understand the low level APDU

14. Conventional Technology
ClientServer Authenticator

15. Server (terminal)
Server
OrbLeaf’s Paradigm
Client+Authenticator
Device

16. Organ Development Studio
+ An Xcode alike Integrated Development Environment
+ Integrated Orb-Weaver script compiler
Generic Purpose Language (GPL based)
+ Cloud Integration for Application management and deployment
+ Integrated API documentation

18. Orb-Weaver Card
+ On-Card Processing through Orb-Weaver Virtual Machine
+ 8 bit microprocessor, 1K user heap
+ 64-128K application space
+ Automatic Garbage Collection
+ Integrated Exception Handler
+ Secure Installation based on Global Platform v2.2 + Proprietary
Secure Channel (all communication between terminal and card are
encrypted)

20. Architecture
Hardware Abstraction Layer (HAL)
ISO7816-3
Flash
Memory
Volatile
Memory
Global Platform Runtime
ISO7816-4
File System Heap
Manager
Command
Handler
Orb-Weaver Runtime
OW
APIs
App
Loader
Orb-Weaver
VM
CAT APIs
User
App 2
User
App 1
User
App nUser
Operating
System
HW
CryptoHardware

21. Orb-Weaver Terminal
+ Based on ARM Cortex-M4 microprocessor, as cheap as possible
instead of Cortex-A or another series of high perf SoC.
+ Supporting Secure Connection through SSLv3.0, TLSv1.1 and
TLS1.2
+ Proprietary OS, multitasking capability and exception handler
+ Supporting additional Orb-Weaver framework for use with card
application, in order to access external peripheral or specific
functionality

25. Architecture
Hardware Abstraction Layer (HAL)
HID USB
Volatile
Memory
Global
Platform
Heap
Manager
CAT
Interpreter
Orb-Weaver
Runtime
OW
APIs
Framework
Loader
Orb-Weaver
VM
CAT APIs
HW
Crypto
Operating
System
Hardware WiFi
UITK
ISO
7816-3
SSL
Framework
AppUser
ISO
14443-A
IO
TCP
UDP

26. Range of Application
+ Retail Payment
+ Payment Broker (IoT Application, Hardware Solution)
Enabling collaboration between Fintech and Hardware solution
+ Blockchain Service, Hardware token
+ O2O Service
+ Security, Secure Data Storage, Secure Authenticator, etc
+ User Management, Access Control
+ e-Ticketing, e-Pass, e-ID, etc

27. Future Roadmap
Support ISO18092
3rd Party Integration
EAL Certification

28. People who are really serious about software
should make their own hardware - Alan Kay
- END -
Contact :
agus@orbleaf.com
www.orbleaf.com