文档介绍：华中科技大学
硕士学位论文
安全金融智能卡操作系统IVCOS设计与实现
姓名:朱立国
申请学位级别:硕士
专业:工业工程
指导教师:朱建新
20070212
摘要
智能卡由于其高安全性、低成本和方便性,在金融等多领域中得到了广泛的使
用。本文深入研究了智能卡操作系统特别是其安全管理模块,并结合国产智能卡芯片
IV8051和金融行业相关规范,设计实现一个具有较高安全性的智能卡操作系统,降低
了智能卡的应用成本,具有良好的应用前景。
本文首先建立了智能卡攻击模型,分析了在开放环境下智能卡面临的安全威胁,
并探讨了相应的安全策略。在此基础上,研究了身份认证、安全报文等主要安全技
术,并探讨了一种改进的静态数据认证技术。
在安全技术研究的基础上,设计实现了智能卡操作系统IVCOS。首先介绍了IVCOS
的软硬件开发平台,然后阐述了IVCOS的设计原则。在设计安全模块时充分考虑了智能
卡在使用过程中可能受到的攻击,从安全状态,安全属性和安全机制三个方面建立了
IVCOS安全体系,IVCOS安全模块具体实现时采用了多种层次的安全管理策略。
此外,IVCOS采用状态机的方式实现文件操作权限的管理,应用者能够选择最合适
的安全机制。文中也初步实现了文件管理、传输管理、命令解释三个模块,并对ED/EP
应用和金融借记/贷记应用进行了流程设计。IVCOS采用了动态链表实现了文件的管
理,增强了文件系统的灵活性,同时IVCOS也支持丰富的命令集。最后,对IVCOS的基
本功能进行了测试,测试结果验证了IVCOS的安全性、可行性。IVCOS初步具备了可运
行的雏形,为进一步的研究打下了基础。
关键词:智能卡 IVCOS 安全管理模块
I
Abstract
Due to Smart Card’s high security ,low cost and convenience, it is now used in many
fields, such as finance and so on. In this paper, COS is studied, especially its security module.
Based on the chip IV8051, a secure COS is implemented according with the criterions for
financial will reduce the cost of smart card and have a perfect application
foreground.
First of all, the security model of smart card is introduced and the secure threatens to the
smart card are analyzed when the card is used in open environment. Based on the analysis, the
corresponding strategies are given in this article. Then the secure technologies are traversed,
such as identity authentication and secure message. One improved static data authentication
technology will be discussed in this paper.
Based on the study of secure technologies, IVCOS will be designed and implemented. In
the design of IVCOS, software and hardware developing platforms are introduced at first.
Then the principles of IVCOS are described. In the design of security module, possible
threatens to smart card are considered during card’s principle of security system
of IVCOS is described through security st