Using Java Card to perform web login

I wanna to implement a login system using java card.
whenever a user goes to the URL, it prompts to the user that he needs to plug in his java card, and the program reads the login token from his card.
if the token matches with the one in DB, he can then login successfully. Fail otherwise.
However, I have no idea on what i should do, in the signed applet that reads the token, and how the JavaCard API should be used.
my card reader is Gemplus GCR410 and the card is GemXpress 211is.
anyone can give me some hints or sample?

I'm quite curious as to how to do this also. How does the applet in the browser communicate to the card reader? I have the GemXpresso RAD III development kit and I believe I understand how to develop an applet on the card, but there is no information about how to send the APDU commands to OCF which in turn would send the command to the reader. Any help would be greatly appreciated. Thanks,
-Justin

Similar Messages

  • Java Card API in Web Applet

    Hi,
    We have a website which uses username/password authentication for authorization for website usage.
    The client wants to add a new level of security by giving access to people using ActiveIdentity Smart Cards.
    We would like to read these smart cards from our login screen. Is there a way to communicate to smart cards by using Java Card API via web pages (maye be usage of applets)?
    Let me know, Its getting critiocal for us.
    Thanks,
    Joy T

    Not IIS nor Apache. We are deploying on Oracle OAS, which internally uses Apache.
    If you can point me to some guidelines to achive it on Apache, that will be great..

  • Can I use Java Card Development Kit 2.2.1 on Windows XP?

    Can I use Java Card Development Kit 2.2.1 on Windows XP?
    If no, which kit supports XP?

    It is not as strait forward as per say.
    I would like to share some tips that I have learnt duirng my recent experience with Java Card Development Kit 2.1.2 ( It presumed that JAVA SDK and JCDK is properly installed:
    Additonal installation
    - you need to download Java Communicatons API version 2.o for Windows at http://java.sun.com/products/javacomm/downloads/index.html
    - unzip the downloaded file javacom20-win20.zip
    - copy comm.jar and javax.com.properties to %JAVA_HOME%\lib
    - copy win32com.dll to %JAVA_HOME%\bin
    Configuration of Environment
    - Activate System under Control Panel
    - Click Environment Variable button under Advance Tab.
    - Check that JAVA_HOME and JC21_HOME are there under User Variables for user123
    - Create a new enviroment by clicking New button under User Variables and Enter "CLASSPATH" for Variable Name and ".;c:\j2sdk1.4.1_04\lib\comm.jar for Variable Value ( the ".;" is important for the entry and varies according to your JAVA_HOME)
    Modifying %JC21_HOME%\samples\build_samples.bat
    - Next you need to modify the compiler option in build_samples.bat
    - Use editor to look for the portion "Compile Sample" and add "- target 1.1" to every statements here. A sample is listed below:
    %JAVA_HOME%\bin\javac -target 1.1 %JCFLAGS% src\com\sun\javacard\samples\HelloWorld\*.java
    You may proceed to test the demo codes as instrucrted in the User Guide.
    I hope the above will help those who are keen to have a head start in Java Card Developemnet.

  • CAN I USE JAVA CARD TECHNOLOGY TO BUILD BIOMETRIC COLLEGE ATTENDANCE SYSTEM

    HELLO everybody,
    I am new in Java card technology.Please any one can guide me.Can i use Java Card Technology to build biometrics college attendance system.If i can so which device should i need to buy or eBooks..
    PLEASE I NEED HELP..
    Thanks for your time ..
    I am looking forward to hearing from everyone..
    Thanks
    Durjan Hussain
    SCJP1.4,SCWCD

    Thanks AlexRashevsky for your good comments,
    I want to build Student Biometrics Attendance system.I want to use biometrics reader.Please i need guide for which biometrics device can i use to build the system.If you can give me your contact number that could be great with country code.Because i am doing this Project for my M.Sc dissertation and also for real client.
    I am looking forward to hear from you.
    Thanks.

  • How to calculate call duration using java card API

    Hi,
    I am developing an application using Java card API. I want to calculate duration of otgoing calls in it. I am trying to start timer at the beginning of call in Call Control event. Can someone kindly check following code of Call control event? Here timerManagement function is sending proactive command for starting timer for 3 hours. Here I am asuming that maximum call will be of 3 hours. In callDisconnect event i can get current value of timer and use it to calculate duration of call. But this scenario is also not working.
    Problem is that during code execution program stuck at send command (proHdlr.send();) of timmerManagement function. I am sending postAsBERTLV command before starting timer so may be reason is that it is not possible to send proactive command while phone is busy.
    But I also cannot send postAsBERTLV after timerManagement function. Because it is mention in specification that "The EnvelopeResponseHandler content must be posted before the first invocation of a ProactiveHandler.send method or before the termination of the processToolkit, so that the GSM applet can offer these data to the ME (eg 9Fxx/9Exx/91xx). After the first invocation of the ProactiveHandler.send method the EnvelopeResponseHandler is no more available"
    Take a look at following code
                     * Method illustrating the use of the Call Control event.
                    private void callControlService() {
                                    /** @todo: Replace following sample code with your implementation */
                                    ProactiveHandler proHdlr = ProactiveHandler.getTheHandler();
                                    EnvelopeHandler envHdlr = EnvelopeHandler.getTheHandler();
                                    ProactiveResponseHandler rspHdlr = ProactiveResponseHandler
                                                                    .getTheHandler();
                                    EnvelopeResponseHandler envRspHdlr = EnvelopeResponseHandler
                                                                    .getTheHandler();
                                    durationCount = 0;
                                     // allow call with no modifications
                                    envRspHdlr.postAsBERTLV((byte)0x9F, (byte)0x00);
                                    // start clock using timer
                                    timerManagement(proHdlr, rspHdlr, (byte) 0x0, timer_id, tempBuffer);
                                    return;
                    }Please help me in this regard
    Thanks
    Yasir

    I am also unable to start timer in call connected event. I cannot send any proactive command while phone is busy. I am using Gemalto development Suite and there simulators (Simulation 2G chain).
    Is it limitation of simulator that you cannot send any proactive command while phone is busy?
    Is there any other work around for getting call duration?

  • Seeking Help for Guidance in developing a product using JAVA CARD

    Hi All,
    I am using windows environment with netbeans 6.8 as developer tool and MySql Server connectivity for back end process.My requirement is to develop applets and installing them to my Smart card and reader.my question is
    1. how i am supposed to create applets to get the student id of particular student whose id is already registered in the database?
    2. how to install them into the smart card?
    3.what are the commands i am supposed to follow if other than APDU commands?
    4.i found there is APDU commands but what do that each CLA,INS,p1,p2,Lc,le..commands used for?how can i use them in my creation of applets.i found the command varies for certain requirements.
    5.if possible please help me with a small example so that i will start developing it.
    can anyone help me in developing this application.i will be so helpful if anyone helps me in guiding me to develop the java card product.
    Edited by: Sijukj on Mar 4, 2010 7:04 AM

    Hi,
    Welcome to the wonderful world of embedded Java development!
    Sijukj wrote:
    1. how i am supposed to create applets to get the student id of particular student whose id is already registered in the database?The first step is to download the Java Card Development Kit (JCDK) from the Sun website (along with the related documentation/specifications). If you plan on using your code on a real card, I would recommend JC version 2.2.1 or 2.2.2. If it is sufficient to run your applet on a simulator (as a proof of concept or for assignments) with no intention on running on real hardware you could go for JC 3.0.2 and use the supplied simulator. This version of JC does not have commercially available cards as of yet.
    Once you have the applet coded and installed on your card, you would personalise the card for the card holder. This means loading card holder specific data into your application. This may also involve registering the smart card ID with the student in your database.
    2. how to install them into the smart card?The procedure for loading and installing applets is outlined in the Java Card documentation (available with the JC development kits from Sun) and the GlobalPlatform card specifications (available from [http://www.globalplatform.org]). You can look into some open source tools for doing this (GPShell and the Java Card Development Kit).
    3.what are the commands i am supposed to follow if other than APDU commands?This depends on what you are trying to achieve with your applet. If you want interoperability you could implement a standard like ISO7816 or IOS24727. This is a lot of work so you may just want to implement the proprietary you require for each operation you need (e.g. set student ID, get student ID etc).
    4.i found there is APDU commands but what do that each CLA,INS,p1,p2,Lc,le..commands used for?how can i use them in my creation of applets.i found the command varies for certain requirements.These are defined in ISO7816 part 4.
    The CLA byte gives information on the command you are sending such as secure messaging, command chaining, ISO or proprietary command
    The INS is the instruction or command you are trying to perform
    P1 and P2 are parameters to the command. These may not be required for each command but are able to be used to convey further information to the applet.
    Lc is the length of the data field you are sending (e.g. for a PUT DATA command this would be the amount of data you are sending)
    Le is the length of the data you expect to receive back from the card. If this is absent you do not expect the card to return any data, 0x00 means send all the data you have left (up to the limit of the response APDU)
    5.if possible please help me with a small example so that i will start developing it.You can find example code in the Java Card Development Kit. There are a wide range of examples there that can help you get started.
    Cheers,
    Shane

  • Where can i find a complete course and some samples about using java card !

    hello !
    i am new to java card and i am seeking for complet course and samples of how i can use this new developement kit and to get familiarized with it !
    any help will be very appreciated
    thanks

    i have got t JCDevKit_User_Guide.pdf this file describes the using of jav card ! but when i tried to execute what it said on dos i did it succifully but i could not see the result? i mean is there an applet to se or to integrate in an html file or to use elswhere?
    i mean , how nomalaly can i use the files generated in the sample �? where to integrate them and where to use them?
    please help me and excuse my exhaustive questions!
    thanks

  • How to run TCK using Java Card Sun reference model from eclipse

    Hi all,
    can any one help me by giving an idea about running java card TCK using sun reference model from eclipse IDE.
    Thanks
    Murali

    tck should be able to run as stand-alone (with jcre).

  • A web wiget using java acript in my web site does not show up with Firefox but does with ie; how can I fix it?

    I have inserted a java script web wiget on my web site by copy and paste. It works fine in IE (shows, updates data etc). In FFox it does not even show up and no error messages are given. If I look at the code in FFox, it is shown. Is there a problem with my web site or am I short something in FFox?

    To avoid confusion:
    *http://kb.mozillazine.org/JavaScript_is_not_Java

  • Use JAVA Applet to do the login part

    Hi...
    I am very new in java.I don know how to make a java applet so that user can type user name and password and then login to the system.
    (If the username and password are matched)
    Would anyone mind helping me to solve this problem??

    You will be able to do this at least half a year later, for you gotta know JDBC, server-side programming, SSL, HTTPS and other scarry words :)

  • How can I open a program using Java and then perform certain tasks with it?

    For example, and this is just an example, I want to write a Java program that opens MS Paint and then manipulates that program. This can be useful to automate certain tasks.
    My question is whether this can be done writing Java code and if so how? If not possible, would I need to use a scripting language instead?

    write a Java program that opens MS Paint and then
    manipulates that program. This can be useful to
    automate certain tasks."manipulates" is a too wide term. Let me narrow down:
    1. If you want to open (run) the program and then shut (kill) it down it is possible and fairly trivial to do in java. Look up Runtime and Process classes in java.lang package
    2. If you want to open the program and edit some image/document in the opened program. It is very difficult in java. May be possible... using some Java/COM bridge, assuming your native program is COM/Active-x compliant. Note: these things go beyond the boundary of JVM and needs to interact with host OS and involves shared memory, ipc and all "low level" stuffs.
    If you want to be able to play around with these COM/Activex apps- choose .NET instead :-)
    3) You can open the program from java and pass it some command line arg as in (1) above and then the program will load that document/image at startup automatically. You may then edit the doc/image thru that program itself. However, Java is not doing anything for you here, other than just starting off your native mspaint.exe ot notepad.exe.
    -BJ
    Message was edited by:
    Bimalesh

  • How to login a site using java

    Hi
    I need to login a site programatically using java.. how to to login..
    thanks

    You will need to construct HTTP requests and send
    them to Amazon's web site. You pass the username and
    password by setting the Authorization header field
    within the request and this usually has to be BASE64
    encoded.
    There is a whole series of events that have to occur
    for HTTP authentication to work. It is a little
    involved but not overly complicated. The RFC is
    outlined here
    http://www.ietf.org/rfc/rfc2617.txt
    Google for 'http authentication' and you will find a
    lot more.Ah, I would've guessed it was harder to do (I am a complete no-no w.r.t. web-related stuff).
    Perhaps a silly question, but does it work the same with https, or is there more involved?

  • Java Card biometric authentication using OID

    Hi
    Has anyone used java card (Smart card) authentication and authorization with Oracle Internet Directory. Can it be done using the Identity Managment Component.
    More specifically speaking , I want to create the trade partner user in internet directory and wants to enable the JAAS in oracle application server for authentication and authorization.
    There are other types of users ( patient) who are having the biometric smart card (i.e. Java card). When these user swipes the finger, client based authentication is performed using the fingerprints and connects to the oid to get the authorization and personal details.
    Please let me know the exact suggestion to implement these type of identification and authorizaiton. Please let me know if there is any oracle technical paper which addresses the mentioned problem.
    Thanks in Advance.
    with regards
    Mazhar

    If you look at the JCDK samples, there is a PIN applet you can look at for user pin.
    What do you want to authenticate? Is it host to applet or host to card manager?
    Cheers,
    Shane

  • Web chat useing java

    I want to develop a web chat useing java for my new web project!How can i do it.

    UsthadThegreat wrote:
    I want to develop a web chat useing java for my new web project!How can i do it.1. Learn basic Java.
    2. Learn intermediate to advanced topics such as multithreading and socket communication.
    3. Develop requirements.
    4. Develop an architecture and design.
    5. Use the results of steps 1-4 to write Java code that realizes your web chat application.

  • Java Card & X 509 certificates

    Hi,
    i have a question about using Java Card with X.509 Certificates (including Attribute Certificates RFC 3281).
    I already have some experience with JC 2.1.1. I have implemented applets for storing files and retrieving them (deployed on card using GemXplore Developer Kit)
    and then managed the communication between off card application using the OCF 1.2.
    But that was back in 2004. From what i see now OCF has been abandoned.
    What i want to implement now is to load Certificates on Java Card (and store files as well).
    I read that in order to manage Certificates, i have to use a PKCS 11 API (like Bouncy Castle or IAKI). Does this substitute OCF? I remember OCF was complimentary to PKCS 11.
    And if it does, can i use such API to read and write other files except from Certificates? Finally does it treat Attribute Certificates (AC) same as PKI Certs?
    I case you need clarifications, i ll be happy to provide. Thank you in advance
    John

    I think you can store keys and data to sign in the same applet. data is just data, it won't auto interfere.
    about javacard 3, I think this is a very polemic subject. To feed the troll, I'll say that I'm working in a smart card company that has done cards for many years. since the beginning, i can say. All my colleagues and I think that javacard 3 is an evil. APDUs ARE card-ish and a good thing for such small CPUs. Javacard 3 has been made by sun under pressure of telcos that don't want complicated things, and are big specification fans, that never wrote a line of code. Javacard 3 will put a big overhead on card response time: as of now, there are many abstractions levels to cross to execute bytecode, and servlets and (dont know what will replace apdus) will increase transaction times.
    cards are cards, not web servers. for us, public transportaton sectors guys, javacard 3 is a frankenstein. we want speed and low level access. we don't care about J2EE.
    just don't tell me about the increased mem and power of new cards. How much will they cost? A javacard is already expensive, they will not get cheaper, and this will not help spreading javacards.
    people working in the J2EE world will code for javacard 3 like they do for mainframes. They will require more powerful card just because they're too lazy to code a correct embedded software . Can you imagine that? Maybe javacard 4 will require a heatsink on cards.
    this is a very personal opinion of course ;)

Maybe you are looking for