How to study GlobalPlatform Card Specification 2.1.1?

I'm a learner of GlobalPlatform Card Specification 2.1.1.Now,I have studied this document.I may didn't hold the important information,So can you give me some advice or some question about it.
thanks.wait for your replies.

For what purpose did you study GlobalPlatform? All depends on that for me

Similar Messages

GlobalPlatform Card Specification 2.2 March, 2006

Dear ALL,
I am having problem with javacard programming (Cry RSA )
Code :
package com.epic.tle;
import javacard.framework.*;
import javacard.security.KeyPair;
import javacard.security.RSAPrivateCrtKey;
import javacard.security.RSAPublicKey;
import javacardx.crypto.Cipher;
public class TLE extends Applet {
       OwnerPIN pin;
       final static byte TLE_CLA = (byte) 0x0C;
       final static byte VERIFY = (byte) 0x01;
       final static byte INITIALIZE = (byte) 0x09;
       final static byte PIN_TRY_LIMIT = (byte) 0x03;
       final static byte MAX_PIN_SIZE = (byte) 0x06;
       final static short SW_VERIFICATION_FAILED = 0x6300;
   byte[] theBuffer;
   private KeyPair keyPair;
   private Cipher rsaCipher;
       private TLE() {
               pin = new OwnerPIN(PIN_TRY_LIMIT, MAX_PIN_SIZE);
               keyPair = new KeyPair(KeyPair.ALG_RSA , (short)512);
               rsaCipher = Cipher.getInstance( Cipher.ALG_RSA_NOPAD, true);
               theBuffer = new byte[128];
       public static void install(byte bArray[], short bOffset, byte bLength) throws ISOException {
               new TLE().register(bArray, (short) (bOffset + 1), bArray[bOffset]);
       public void process(APDU apdu) throws ISOException {
               byte buffer[] = apdu.getBuffer();
               if ((buffer[ISO7816.OFFSET_CLA] == 0)&& (buffer[ISO7816.OFFSET_INS] == (byte) (0xA4))) {
                       return;
               if (buffer[ISO7816.OFFSET_CLA] != TLE_CLA) {
                       ISOException.throwIt(ISO7816.SW_CLA_NOT_SUPPORTED);
               switch (buffer[ISO7816.OFFSET_INS]) {
               case VERIFY:
                       verify(apdu);
                       return;
               case INITIALIZE:
                       initialise(apdu);
                       return;
               default:
                       ISOException.throwIt(ISO7816.SW_INS_NOT_SUPPORTED);
       private void verify(APDU apdu) {
               byte buffer[] = apdu.getBuffer();
               byte byteRead = (byte) (apdu.setIncomingAndReceive());
               if (pin.check(buffer, ISO7816.OFFSET_CDATA, byteRead) == false) {
                       ISOException.throwIt(SW_VERIFICATION_FAILED);
       private void initialise(APDU apdu){
}It's gives the error :
install_for_install_and_make_selectable() returns 0x80206444 (Unknown ISO7816 error: 0x6444)
Install file (tleInstallGP211.txt)
mode_211
enable_trace
establish_context
card_connect
select -AID a000000003000000
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f // Open secure channel
delete -AID a00000006203010c0101
delete -AID a00000006203010c01
install -file tle.cap -nvDataLimit 2000 -instParam 00 -priv 2
# getdata
# close_sc // Close secure channel
# putkey // Put key
// options:
//          -keyind Key index
//          -keyver Key version
//          -key Key value in hex
card_disconnect
release_contextInstalling console command
C:\java_card\GPShell-1.4.2>GPShell.exe tleInstallGP211.txt
Hope your Help,
Regards ,

Hi,
According to ISO7816, the error means the following:
SW1-SW2 set to '64XX' with the value of 'XX' from '02' to '80' means that the card aborted the command; a possible completion of the command is conditioned by the recovery of a query of 'XX' bytes, for which the card possibly expects a responseYou might want to add some try/catch blocks to see which line is failing. You could even break the install method up into 2 lines and see if the constructor is successful.
Cheers,
Shane

About CVM in GP Card Specification

Dear all, while i read GP Card Specification, i found the methods of init and verify PIN in "org.globalplatform" in GP211 APIS.
But also , i found the similar methods about init and verify PIN in "javacard.framework" in JC221 APIS.
So, i wanna know what is the difference.
Thanks so much .

hello
The javacard pin is standalone. You can use it as you wish in your app. You can even have more than one.
The gp pin is global to the card. you update in app A, the change is reflected in app B. Which is a neat idea, but is probably less secure than intended, since I can design an app that will change the pin of other apps in their back.
</>
Anyways, I don't know a lot of applications that use this, because there is no way to know how securely this is implemented in practice.
The pin will almost always be reimplemented in a "more secure way" to suit the application requirements. usually, this involves redundancy and tampering protection (checksum, CRC, etc), as well as secure update methods (ciphered, etc). The provided PIN APIs also prevent any readback, which is not always insecure, and not always desirable. It depends

HT1689 how do I gift a specific app?

How do I gift a specific iphone app

If you are doing it directly on the your phone then find the app that you want to gift in the App Store app on it, tap on it to select it, and then tap the share icon (the square with the upward arrow towards the top right of the screen), and you should then get a popup with one option being 'gift' e.g.
If doing it on your computer's iTunes then find the app and click on the small downward pointing arrow next to the items' price.
You will need to have a credit card on your account to be able to gift, you can't use an account's balance for gifting.

How to study CORBA

Hi,
I only have some basic java programming knowledge. I am working on a CORBA based project now. Our company bought a system which has a loads of object models for CORBA interfaces and associated technical documents. These documents don't make any sense to me because I have no CORBA experience before at all.
I browsed www.omg.org and download some CORBA specifications. Thousand pages to read.
I want to finish this project as soon as possible, anyone can give me some idea how to study CORBA quickly?
Anybody can describe the learning curve and give me some key words for searching and studying?

http://www.google.com/search?hl=en&q=corba+tutorial&btnG=Google+Search

How to purchase gift cards in Vietnam ?

I really want to purchase a membership package for an app in Appstore but I don't know how to purchase gift cards in Vietnam. Could anybody help me with this ? Thanks in advance.

iTunes gift cards are not available in all countries, and they are country-specific (they can only be used in their country of issue on accounts with a billing address in that country) - as far as I can see they are not available in Vietnam, you will have to use one of the other payment methods that shows on your account's payment details screen e.g. a credit card

Card specific keys

My card implements the mutual authentication. For that purpose the external application and the card must share the set of secret keys. The first key is relevant for encryption and the other for the MAC calculation. At this point I am putting these keys on the card during the personalization. These keys are the same for all cards. Now I am thinking is this secure enough. I read that it is recommended to use derived (card specific) keys such that only one card is affected if a key is compromised. How can I calculate the card specific keys? If I will have this, then if someone finds out the initial secret keys and the algorithm how the card specific keys are made, then the card is again compromised. Right?

You said that the random key is more secure way. You mean that during the personalization I can generate random key on the card. The operating system takes care of the security of such object. But, this random key has to be shared with the external party which is communicating with the card. Both of them need it in order to establish the secure channel. At some point it has to be extracted and given to the terminal side. Right? Or the random key has to be generated on the perso dll during the personalization. Then the outside world has to have some kind of lookup table in which the relation token serial number, random key has to be stored and before executing the mutual authenticate method, the external party has to for the particular token serial number extract its random key. What if the secure channel has to be made from the middleware API that is installed on the user’s PC. If the lookup table is stored somewhere like HSM it is impossible use case because the user’s PC is located in his home. With random keys, each key would be generated at perso time and injected into the card manager with PUT KEY over a secure channel. You could use the unique card identifier as the label for the key in the HSM so there is no lookup table. You could use the same data you would use to diversify a key since it should also be unique. I am assuming you have some way of having a connection back to a HSM from the middleware? If not, this model sounds worrying to me. If you have your keys exposed to every client client then you are opening up a security risk. You can assume the client machine is secure.
You said:
It is easier to secure a single set of master keys (and rotate as required) that are used like this than a master key that is shared
I did not understand how this will work. In case of mutual authenticate method. The external party is using one master secret key from the set of secret key set. When the command comes to the card, the card has to verify it. But how the card knows with which key the message is encrypted.If you have keys in a HSM you need some way of knowing what key to use. You could map cards to a master key. Some security organisations recommendations on key rotation and usage policies which are designed to limit the exposure of sensitive keys. It adds overhead but you gain additional security (if a key is compromised only a limited number of your cards are compromised).
Cheers,
Shane

How to start java card development?

Good Evening all,
I am novice for java card development , from last some days I study java card and terms related to it, now i have some knowledge about applets , and API. as i read about java card 2 and 3, I think i moved to java card 2 that's why i download jcdk 2.1.
Now i want to do something in development rather than further conceptual study. Frankly speaking I m confused where to move because different sites have different point of view so i want to execute my knowledge which i earned from last some days...
so I want to ask
1- which IDE would be best for java card development? { eclipse or net beans or something other}
2- what things i would be require during java card application?{ java sdk version? jcdk version? ocf? or what}
3- at start i want to use simulation technique to test what i made and how its work, so for this which tool or IDE would be best work for me,
so kindly request you to guide me and show me the path where i can move and achieve what i want..
---------------------------------------------------------------------------------------------------Thank you in advance------------------------------------------
Edited by: 911936 on Feb 2, 2012 10:01 AM

Hello umer,
last night it seems very tough to execute sample program of jcdk 2.2 but finally i make it, and i also i got the IDE - net beans that is very good for java card...
I think i should share my knowledge here for next novice people...
----------------------------------------------------------------------------java card development require-------------------------------------------------------------
Because here we use java for java card so we require
1- java development kit (JDK) - use below link to get this.
[get jdk here|http://download.oracle.com/otn-pub/java/jdk/6u30-b12/jdk-6u30-windows-i586.exe]
2- Java card require java card development kit (JCDK) I think java card version 3 is latest but i used jcdk 2.2.1
[get jcdk here|http://download.oracle.com/otn-pub/java/java_card_kit/2.2_01/java_card_kit-2_2_01-win-gl.zip]
now i think this is enough to start java card development...
follow below steps
1- install jdk 6 in c:/java/jdk1.6
2-keep jcdk in c:/java_card_kit-2_2
3- open command prompt and run
a)-set JC_HOME=c:\java_card_kit-2_2
b)-set JAVA_HOME=c:\java/jdk1.6
c)-set PATH=%JC_HOME%\bin;%PATH%
4-there are some sample project in scdk, if you want to get confidence , u should run one of them..
run command- jcwde jcwde.app { jcwde is a simulator where u check what u made }
and run this command in another command prompt- apdutool -nobanner -noatr demo1.scr > demo1.scr.jcwde.out
You can get detail of 3 and 4 step from cJDK_Users_Guide.pdf which is present in jcdk.
------------------------this is all which u need to do to get confidence in java card, but dont be over confident because in reality "the ball is not in your court yet"
Note- if you are searching which java IDE is best for java card development then
[click here- this is one of the best ide for java card|http://dlc.sun.com.edgesuite.net/netbeans/7.1/final/bundles/netbeans-7.1-ml-windows.exe]
Edited by: 911936 on Feb 3, 2012 8:58 AM

How to remove credit card from iphone4s

how to remove credit card from iphone4s

Not sure what you mean by this. Are you trying to remove your credit card information from the App Store/iTunes store?

How to set up Application specific custom ogoff (sign-off) page.

Hi,
I'm using OracleAS 10.1.2.2
Note 333638.1 shows us how do make a custom SSO login page to be application specific. This works.
Now, I want to do a custom SSO logout (sign-out) page. Using the redirect method described does not seem to work. Please note that in our version 10.1.2.2, there is no default logout.jsp page in the /sso/jsp directory. To deploy a custom logout page, I would need to update the WWSS_LS_CONFIGURATION_INFO$ view.
I was able to test a custom SSO logout.jsp page sucessfully. However, when I tried using a redirect_logout.jsp to make it application, it no longer works.
Does anyone know or have any idea on how to deploy an application specific logout page? (i.e. only specific applications uses the custom logout page, otherwise go to the default one).
Thanks.
- Kevin

Well,
There are 5 choices to choose from on the page. In the description of the choices at the bottom of the page there are 7, and the two additional choices talk about having to first have registered the site with SSO. So...I'm interpreting that as meaning that other 2 possible choices would be displayed if the site is registered with SSO. That, plus the fact that the page which describes how to add the site to SSO seems to think that the SSO choices are displayed in the wizard.
So, no, there's no "exact launguage" that says what the reason is for the choices not being displayed. Can you point me to some exact language that tells me how to get those choices displayed?

HT204266 How come my credit card says invalid security code when I put my code in at the App Store?

How come my credit card says invalid security code when I put my code in at the App Store? I have a bunch of free apps when I had my ipad 1 now I have 2 and my credit card will not be read as authentic Watson ever I tried my girls card nothing do I need to have money on it for a free download? I even bought a couple of games but why with so many free ones? Please help me I'm slow so walkit through with me thnx also my ipad 2 is brand new out da box and I accidentally updated to 6.0 without finding out first about it so some pointers to it would help ...which I think that it has something to do with it.

Is the address on your iTunes account exactly the same (format and spacing etc) as on your credit card bill : http://support.apple.com/kb/TS1646 ? If it is then you could try what it says at the bottom of that page :
If the issue persists, contact your credit card company and verify that they and any company they use to process credit card authorisations have the correct information on file.
And/or try contacting iTunes support : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page
For iOS I would expect an updated version of the manual to appear here at some point : http://support.apple.com/manuals/ipad/
In the meantime there is this : http://www.apple.com/ios/whats-new/

Does anyone know how to delete credit card details from an Apple account?

Hi not sure if this is posted in the right place but i'll give it a go anyway.
Would anyone know how to delete credit card details from an Apple account?
Someone posted selecting 'none' in the payment section would work but i logged into my account online on a computer there aren't any options at all to do this.
I tried hitting edit but there isn't a delete button.
If anyone knows any help would be most appreciated!
-F

Answer should be here:
https://discussions.apple.com/message/12832322#12832322

HT3702 How to delete credit card info from iTunes account

How to delete credit card info from iTunes account?

HI KiwiMCB,
Please Contact Customer Care; an agent will be able to help you with that.
Best,
Sara

How to remove tv card from touchsmart 610_1010

The tv card in my touchsmart 610_1010 as stopped working the device manager says it is working and I've uninstalled it and reinstalled but the media centre says it cann,t detect tv tuner ' I was thinking of doing a card removal and reinstall , can any one point me in the right direction of a video off how to remove tv card , or any solution. Thanks for your time any help would be appreciated. ...thanks

Hello tangledup61,
Welcome to the HP Forums, I hope you enjoy your experience! To help you get the most out of the HP Forums I would like to direct your attention to the HP Forums Guide First Time Here? Learn How to Post and More.
I understand you are looking to replace your non-functioning TV Tuner Card in your Touchsmart 610. I would be happy to assist you, but first I would encourage you to post your product number for your computer as I was unable to find your model with the information you already provided. I am linking an HP Support document below that will show you how to find your product number. As with this we can provide you with accurate information.
How Do I Find My Model Number or Product Number?
Please re-post with the requested information and I would be happy to provide you with assistance. Thank you for posting on the HP Forums. Have a great day!
Please click the "Thumbs Up" on the bottom right of this post to say thank you if you appreciate the support I provide!
Also be sure to mark my post as “Accept as Solution" if you feel my post solved your issue, it will help others who face the same challenge find the same solution.
Dunidar
I work on behalf of HP
Find out a bit more about me by checking out my profile!
"Customers don’t expect you to be perfect. They do expect you to fix things when they go wrong." ~ Donald Porter

How to remove SD Card from the Card Reader slot - Satellite A100?

Hi,
Is there anyone to help me? I inserted a 64 MB SD card in the card reader slot of my Toshiba A100 model. It's the first time i have inserted the card. The card is inside the slot. I can not take it out! I don't have any idea how to remove the card from the card reader slot. I can see the contents of my SD card, can open the files too. But how to remove it out from the slot. Please help me giving your idea to remove the card out from the slot.
Arjun

Hi
In my knowledge the SD card slot doesnt has a any additional helps like the PCMCIA slot to remove the card.
You have to remove it simply. Try to grab the card and move it out. You can try to use the pair of tweezers. Maybe it helps

How to study GlobalPlatform Card Specification 2.1.1?

Similar Messages

Maybe you are looking for