Symmetric Key Injection onto Smart Cards.

摘要

This paper describes architectures for securely injecting secret keys onto smart cards. Specifically, this paper details key injection architectures that could be implemented on Personal Identity Verification (PIV) Card in future. The primary goal is to create additional opportunities for the use of the PIV Card in Physical Access Control Systems (PACS). There is significant interest in conducting a fast, accurate, and highly secured authentication transaction using symmetric keys in PACS environments. This paper suggests ways to load site specific symmetric keys onto a PIV Card after the card has been issued, which allows each smart card to share a unique secret key with each PACS with which it interacts. The paper presents four protocols that enable a Card Management System (CMS) to securely load site specific PACS symmetric keys. Each protocol presents unique security characteristics and uses the PIV Cards card management key in different capacities.