Mifare, Oyster and ITSO Cards Hacked Smart Card & Identity News

True Hardware-based Security
Cryptographic RF smartcards offer true hardware-based security for authentication, encryption, and secure
data storage. They contain a 64-bit hardware-based cryptographic engine embedded in the silicon, with up to
four sets of non-readable 64-bit authentication keys, four sets of non-readable 64-bit session encryption keys,
and 2K bits of configuration memory. The configuration memory provides application developers with true
flexibility for customizing security and data protection options and then blowing fuses to permanently lock in
the configuration and custom security keys in the hardware.
Secure Dynamic Mutual Authentication Capability
Up to now, when there was a need to prove authenticity, as in trying to gain access (TV subscription program
access or secure building access) or to claim value (cash registers, laundry machines, pay-per-use copier
machines), only high-end microprocessor based smartcards were able to provide true authentication.
Cryptographic RF smartcards can establish authenticity securely through a cryptographic dynamic mutual
authentication process using the non-readable keys. They use the authentication keys, session encryption
keys and a random number to generate a unique identity, or “cryptogram”, for each transaction. Both the RF
smartcard reader and the RF smartcard must be able to duplicate each other’s cryptograms before any data
can be accessed or written. The keys are completely inaccessible, even to the owner of the device or original
silicon manufacturer. A unique cryptogram is generated for each transaction, so a cryptogram, intercepted
during a transaction, cannot be used to effect a second transaction. In the extremely unlikely event that the
non-readable key(s) from one smartcard becomes known, they cannot be used with any other smartcard
because each cryptographic RF smartcard has its own unique set of authentication keys. Fuse bits are blown
to permanently lock the security information in the smartcard such that even the card silicon manufacturer
cannot access it.
Dual Authentication Supports Cash-equivalent Cards
Uniquely, cryptographic RF smartcards allow two completely independent users to access the same section of
the memory, using completely separate authentication keys with different access levels for adding and
deducting cash. As an example, energy meter applications that happen to be very popular in developing
countries using pre-pay models, the energy company will use a higher privilege access key to add energy
credits to the card from its offices. The energy meter at the purchaser’s home is then equipped with a less
privileged key that can only allow for reduction of energy credits and never vice-versa.
Multiple Sectors with Configurable Access
Cryptographic RF smartcards are available as a complete family in densities from 1 Kbit to 64 Kbits of
completely usable memory to accommodate a wide range of information storage and cost requirements. The
user memory itself may be divided into as many as 16 separate sections, each of which can independently
customized to allow different levels of read and write access. For example, a smartcard that contains health
records might keep the patient’s ID and billing address in a portion that is accessible by the billing
department and insurance company, while diagnostic information is stored in another area that is accessible
only by the doctor, and prescription information is stored in yet another section that can be written to by the
doctor and only read by the insurance company and the pharmacist.
Multitude of Data Protection Options
Be it cash credits or private health records, cryptographic RF smartcards provide many protection options
customizable by the application developer at deployment time. These include one-time-program (OTP)
modes, read-only modes and program-only modes. In addition to protection by pre-authentication
requirements, cryptographic RF smartcards can fully encrypt data during transmission to protect
confidentiality and dynamically generate Message Authentication Codes (MAC) to verify message source and
integrity. To top off, cryptographic RF smartcards are implemented in hardened silicon using secure product
strategies that include content scrambling, tamper monitors for environmental factors, and detection
capabilities for physical and systematic security attacks.
Cryptographic RF smartcards are innovative in their approach to true hardware security and bridge the
complexity and affordability gaps between microprocessor and memory based smartcards. Laden with usable
memory and security options, cryptographic RF smartcards offer an unrivaled level of flexibility for
application developers, allowing full customization to enable adaptability to virtually any application in the
smartcard space.
Smart Card & Identity News • January 2008
13