??????????(?)

1
??????????(?)CPU???????

• ?????????

2
? ? ? ?

• CPU????????
• CPU????????
• CPU??????

3
????CPU?POS?

• ??????
• ??????????????,??????????????
• ?????????
• ????(?)?????
• ???????

???? ????? ?????
4
????????????
??? ????
COS (??? ?? ??)
? ??
??
??
CPU?
CPU?POS?
5
CPU?????????

• ??????ISO/IEC7816???,???CPU????????????????????,??
  ???????,???????????????????

6
??

• ??????????????????????????

• CLA?????
• INS????
• P1?P2??????
• Lc?????
• Le??????????

7
??

• ??????????????

• SW1?SW2????

8
? ? ?
9
??????? ??????????
???? RESET ??,??3B6C0002(??ATR)33(SmartCOS???)61
(?????)8638(?????????)1113E789C61DA020(???????)
??MF 80 0e 00 00 08 FFFFFFFFFFFFFFFF //80 0e 00
00 08 (???) FFFFFFFFFFFFFFFF (8??????) ??MF 80
e0 00 00 18 FFFFFFFFFFFFFFFF 0f 02
315041592e5359532e4444463031 ASSERT 9000 //80 e0
00 00 18 (???) FFFFFFFFFFFFFFFF (8??????) 0f
(??MF???) 00(DIR?????????) 315041592e5359532e44444
63031(MF?????,???? ???1PAY.SYS.DDF01 )
10
?????? 80 e0 02 00 07 00 03 05 0f 00 0a
00 ASSERT 9000 //80 e0 02 00 07 (???)
0003(?????? )05(????) 0F(????????)00(??) 0A(????)
00(????) ????PIN 80 d4 00 00 0a 01 01 00 0b 0f
11 0f 33 1234 ASSERT 9000 //80 d4 00 00 0a (???)
01(?????)01(?????) 00(????)0B(????)0F(????)
11(????)0F(????)33 (?????)1234(??PIN) ???????002
6 80 e0 02 00 07 00 26 00 1f 2f 01 00 ASSERT
9000 //80 E0 02 00 07 (???) 0001(?????)
00(???????)1f(???)2f(????)01 00(????) ????MF
80 e0 00 01 02 3f 00 ASSERT 9000 //80 E0 00
01 02 (???) 3F00(MF???)
11
????????????
???(?/???) RESET ??EF0026 00 A4 02 00 02
0026 ASSERT 6130 ??????0026 00 b0 00 00
10 ??PIN 00 20 00 00 02 1234 ??????0026 00 d6
00 00 10 11223344556677881122334455667788 ??????
0026 00 b0 00 00 10
12
????Create File ????

• Create File??????MF???DF???EF???
• ???MF???,??????,???????????(????),????????(MF)????
  ?EEPROM?8?????????????????????,????????,??FF FF
  FF FF FF FF FF FF,???MF?,???????,??????????,??4???
  ?????????

13

• Create File ?????

14

• ???????

• MF

? ??MF 80 e0 00 00 18 FFFFFFFFFFFFFFFF 0f 02
315041592e5359532e4444463031 ASSERT 9000 //80 e0
00 00 18 (???) FFFFFFFFFFFFFFFF (8??????) 0f
(??MF???) 00(DIR?????????) 315041592e5359532e44444
63031(MF?????,???? ???1PAY.SYS.DDF01 )
15

• DF

EF
???????? 00 18?SmartCOS?????????????, 00 01
??????? 00 02 ???? 0015???????????
0016???????????
16
?????? 80 e0 02 00 07 00 03 05 0f 00 0a
00 ASSERT 9000 //80 e0 02 00 07 (???)
0003(?????? )05(????) 0F(????????)00(??) 0A(????)
00(????) ????PIN(????) 80 d4 00 00 0a 01 01 00
0b 0f 11 0f 33 1234 ASSERT 9000 //80 d4 00 00 0a
(???) 01(?????)01(?????) 00(????)0B(????)0F(????)
11(????)0F(????)33 (?????)1234(??PIN) ???????002
6 80 e0 02 00 07 00 26 00 0f 11 01 00 ASSERT
9000 //80 E0 02 00 07 (???) 0001(?????)
00(???????)0F(???)11(????)01 00(????)
17

• ??MF?DF???????Create End??,?Create
  End??????,????????????

CreateEnd DF
? ????MF 80 e0 00 01 02 3f 00 ASSERT 9000
//80 E0 00 01 02 (???) 3F00(MF???)
CreateEnd MF
18
???????

• ????
• ????
• CPU?COS??????????????
• PIN?????????????
• ??????????

19
?????????

• ???????????????????????,?????????????
• ??(???)?????????????????,???????????????????????
• ????????????????????????,?????????????????,??????
  ????????
• ?????????????????????????????,???????????????,???
  ????????????????(???????????????)
• ???????????????????????,????????????????,????????
  ?????????????

20
????

• ????????? ??????????????????,?????????????????
  ???????,??????????????????
• ???????????????????????????????,??????????
• ????????????,????????

21
??????(DES)

• ???????????????,A?????????????,?????????B?B?????,?
  ??????????,??????????????????????
• ?????????????????,?????????????????
• ?Internet???,??????????????????????????????,?????
  ????n????????n(n-1)???,??????????

22
??????(DES)

• ?????????
• ???????????
• DES?????56???????????64?????,?????64?????
• ???????????????????????????????????????????????
• ?????????????????,??AES

23
???
DES
Y
X
KEY
???
DES
X
Y
KEY
24
???????(RSA)

• ???Internet???,??????????????????,??????,?????????
  (PK)???(SK),????????????????????,?????????????????
  ???????????????????????????????????????,?????????
  ???????,?????????????,????????????????????????????
  ??

25
???????(RSA)

• ????????? ,?????????????????????????
• ?????????????(SK),?????????(PK)?
• ?????????????????????????????,??????????????
• ??????,????????????????(??)??,??????????????
• ??????????????????????????????????????????????(???
  ?????????)???????

26
???
RSA
Y
X
PK
???
RSA
X
Y
SK
27
????
???????????????

• ?????
• (MACMessageAuthenticationCode)
• ????(Digital Signiture)
• ????(Digital Certificate)

28
?????(MACMessageAuthenticationCode)

• ?????????,????????,???????????????
• ?????????????????MAC,??????????????MAC(??????????
  ???)???????????????,??????????,??????????MAC,?????
  ??????????,??????????

29
MAC????
30
????(Digital Signiture)

• ?????(??????),?????????????????????,???????????
  ???,???(???)??????????
• ????(HASH)?? ????
• HASH???????????,???????? (????????)

31
???
Message
Hash ??
??
Message Digest 1
SK
???
Message
Hash ??
Message Digest 2
???
Message Digest 1
PK
32
????( Digital Certificate)

• ???????????????????????????,????????(PK)?????,???
  ?????????????????????????????,????????????????????
  ??????????????????????????? ????(Digital
  Certificate)

33

• ?????????????(SK),???????????(PK)???????????(CA)?
  ?,??????????????????,??????,??????????????????????
  ?CA?,??????CA?????????????????????????
• ???CA????????????,????????,??????CA???????

34

• ???????????,?Internet Explorer??????????????,?????
  ??????????????????????,?????????(????????????)???
  ???????????????,?????????????????,????????
• ???????????????,?????????????????????,????????????
  ????????,????????????

35

• ?????????Windows 2000??????,??????????????????????
  ??????????????,?????????????????,????????????????
  ???,???????????????,??????????????????????,??????
  ??,???????????????????????????????????????,?????
  ??????????????????,???????????????