(SC)#x0B2;: A System to Secure Off-Card Contract-Policy Matching in Security-by-Contract for Open Multi-application Smart Cards

摘要

The Security-by-Contract (SxC) framework has recently been proposed to support software evolution in open multi-application smart cards. The key idea lies in the notion of contract, a specification of the security behavior of an application that must be compliant with the security policy of the smart card hosting the application. In this demonstration we show SC^2 (Secure Communication over Smart Cards), a system developed to address a key issue of the SxC framework, namely the secure outsourcing of the SxC contract-policy matching service to a Trusted Third Party (TTP). SC^2 secures the communication between a smart card and the TTP that provides the SxC matching service.