18

I'm new to smart-card development. Please help me understand how to get started.

  1. What's the relationship between Javacard and JCOP?
  2. How do I map a JCOP version to a GlobalPlatform Card Specification?
    • For example, what specification does JCOP 2.4.1 map to?
  3. When do I need to code against one API versus the other?
  4. Where can I find a good tutorial to get started?
TT--
  • 2,956
  • 1
  • 27
  • 46
Gili
  • 86,244
  • 97
  • 390
  • 689

5 Answers5

18
  1. JCOP is a software platform originally from IBM that implements Javacard API and GlobalPlatform (formerly Open Platform). Now owned and managed by NXP.
  2. JCOP 2.4.1? Probably GP 2.1.1. Do a web search for specific product specifications.
  3. javacard and GP:
    • Javacard is used to write applications - javacard applets - for smartcard platforms, using the Java Programming language and a limited version of the JVM and java libraries.
    • GlobalPlatform is a specification for managing applet-aware smartcards, defining operations for things like:
      • managing card lifecycle,
      • card/host authentication,
      • installing/deleting/instantiating/selecting applets, and
      • managing security policies on the card.
    • Using GlobalPlatform you'll exchange APDUs with the GP card for the aforementioned operations; using javacard you'll write applets that can accept and process APDUs that are specific to your application. GlobalPlatform isn't javacard specific, but javacard is the only relevant technology for smartcard applet development.
  4. For javacard tutorials, start with the javacard site. Look through the documentation section for Getting Started stuff. Download the dev kit and you'll find some html howtos. For GlobalPlatform, you'll need to begin with the latest GP spec; it's certainly not a tutorial, but I don't think you'll find anything more useful. The spec will require strong smartcard fundamentals. Also see Required Things to start Smartcard Programming Using Javacard
hsg
  • 656
  • 4
  • 10
pb2q
  • 58,613
  • 19
  • 146
  • 147
  • Re: #2, I can't find the JCOP specifications anywhere. Does JCOP even have a dedicated website? Re: #3, that's a bit weird because the book "Java Card Technology for Smart Cards: Architecture and Programmer's Guide" claims that GlobalPlatform is just an extension of JavaCard that adds extra features. It seems to imply that JavaCard contains the basic mechanisms used to install/remove applets and do authentication. Have I missed something? – Gili Aug 25 '11 at 23:44
8

I used this excellent tutorial when started with JavaCard: http://javacard.vetilles.com/tutorial/ (archive)

Sprite
  • 3,222
  • 1
  • 12
  • 29
vojta
  • 5,591
  • 2
  • 24
  • 64
3

This might be useful - I spent a while getting older tutorials working on real hardware (e.g. physical Java Cards with GP), including sending APDUs etc. I've collected some of my notes into a video format as it was too much work to write down every little thing.

The video is here: https://www.youtube.com/watch?v=oj2l0X8D4y0&hd=1 and includes basically a quick run-through of what to install, building a program, installing to a Java Card, and talking to said program via Python. It's very very basic but sometimes that's what you need...

Colin O'Flynn
  • 306
  • 1
  • 4
2

jcManager http://www.brokenmill.com/2010/03/java-secure-card-manager/ comes with source code, which is useful

g bruno
  • 21
  • 1
  • oops, the authenticate_SCP02 function is killing my JCOP41 cards! I believed that 10 failed authentications were needed to kill a card, but this function is killing them promptly. – g bruno Aug 26 '11 at 02:03
  • OK my, fault, an error in transcription, not an error in jcManager code. But note: Sudden death of JCOP card is possible. – g bruno Aug 26 '11 at 02:15
0

The two best introductory tutorials I have found are:

  1. "Lecture 14 - Javacard" https://edux.pjwstk.edu.pl/mat/268/lec/lect14/lecture14.html

and this one at JavaWorld,

  1. How to write a Java Card applet: A developer's guide

For example code there is a section titled Learning in this Github repo,

javacard-curated-list of applets

To give an idea of the first topics that are typically covered, the headings from the second link mentioned are:

Architecting the applet

Specifying the functions of the applet

Specifying AIDs

Defining the class structure and method functions of the applet

Defining the interface between an applet and its terminal application

An APDU primer

  • Defining APDU commands

  • The Javacard APDU Class

    The applet processes an APDU command by invoking methods on the APDU object. In general it performs these steps:

    Step 1. Retrieve the APDU buffer

    Step 2. Receive data

    Step 3. Return data

    Step 4. Return status word

Constructing the applet code

Implementing error checking

This article is by Zhiqun Chen who also wrote the book Java Card Technology for Smart Cards

TT--
  • 2,956
  • 1
  • 27
  • 46