Secunet Security Networks Ag · XETR:YSN

Secunet Security Networks — Open Identity Summit 2013

27 slides from Secunet Security Networks's conference presentation, Sep 10, 2013

  1. Slide 1: An Open Source eID Simulator

    An Open Source eID Simulator Open Identity Summit 9th -11th September 2013 BSI HJP Consulting Tobias Senger Holger Funke

  2. Slide 2: Agenda

    Agenda Requirements of BSI Current state Simulator Virtual Smart Card Reader Community NFC Device Planned Roadmap Next steps 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 2

  3. Slide 3: Requirements: Actual state and target state

    Requirements: Actual state and target state Actual state Target state 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 3

  4. Slide 4: Requirements: Simulator on mobile NFC device

    Requirements: Simulator on mobile NFC device 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 4

  5. Slide 5: Agenda

    Agenda Requirements of BSI Current state Simulator Virtual Smart Card Reader Community NFC Device Planned Roadmap Next steps 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 5

  6. Slide 6: Current state: Developing new smart card protocols

    Current state: Developing new smart card protocols Time consuming:  Several stakeholder:  Chip developer / manufacturer  COS developer  Application developer  Integrator  Chip must be produced to work with  Life cycle during development very short, „living“ specifications  Handling of variou

  7. Slide 7: Current state: GlobalTester test tool

    Current state: GlobalTester test tool GlobalTester  Open Source test tool for smart cards and inspection systems  Eclipse framework  Rhino Engine  Bouncy castle crypto lib  Smart Card Shell  Started in 2005 (www.globaltester.org)  Open community (test manager, sample scripts)  Closed communi

  8. Slide 8: Agenda

    Agenda Requirements of BSI Current state Simulator Virtual Smart Card Reader Community NFC Device Planned Roadmap Next steps 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 8

  9. Slide 9: Current state: Software-Simulator (I)

    Current state: Software-Simulator (I) Implementation (close to Java Card)  All protocols, algorithms of BSI-TR-03110 V2 ready  EACv1: » Basic Access Control » Chip Authentication v1 » Terminal Authentication v2 » Active / Passive Authentication  EACv2: » PACE / SAC » Chip Authentication v2 » Term

  10. Slide 10: GlobalTester Architecture

    GlobalTester Architecture 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 10

  11. Slide 11: Current state: Software-Simulator (II)

    Current state: Software-Simulator (II) Missing link between Software-Simulator and Terminal (IS) Current solution needs piece of hardware  Comprion CLT one (commercial)  Handling of ISO 14443 communication (transfer speed, modulation type, etc.)  Hardware is expensive -> problem for Open Source p

  12. Slide 12: Simulator: Architecture

    Simulator: Architecture Protocols BAC EACv1 EACv2 ISO 7816 Admin Keys SM Files GP Crypto AR Driver / Hardware 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 12

  13. Slide 13: Benefits of Open Source eID Simulator

    Benefits of Open Source eID Simulator Use simulator for testing  eID stakeholder like  eID Client developers, like Open eCard  eID Server developers  Solution developers, like eCommerce Use simulator to analyze protocols  Adapt protocols and test consequences  “Experimental platform” Easy to c

  14. Slide 14: Agenda

    Agenda Requirements of BSI Current state Simulator Virtual Smart Card Reader Community NFC Device Planned Roadmap Next steps 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 14

  15. Slide 15: Open Source eID Simulator: Virtual Driver

    Open Source eID Simulator: Virtual Driver Code is implemented and tested yet  Experience in several tests (e.g. interoperability tests)  Simulator can be addressed via TCP/IP-Socket Hardware must be substituted:  Solution: Virtual Smart Card Reader  Runs in operating system as typical physical r

  16. Slide 16: Virtual Driver in ISO-OSI layer model

    Virtual Driver in ISO-OSI layer model Application Application Presentation Presentation Session Session SIM Transport Transport Network Network Data Link Data Link CLT One Physical Physical 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 16

  17. Slide 17: Simulator: Virtual Reader Driver

    Simulator: Virtual Reader Driver Simulation of basic reader  Only APDU handling: receive APDU and send result Standard / Comfort Reader  Simulation of PIN-Pad  Simulation of TR-03119 functions:  EstablishPACEChannel()  ModifyPIN(),… 2013-09-10 Open Identity Summit 2013, An Open Source eID Simul

  18. Slide 18: Agenda

    Agenda Requirements of BSI Current state Simulator Virtual Smart Card Reader Community NFC Device Planned Roadmap Next steps 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 18

  19. Slide 19: Community

    Community Web site  Basic information, URL is not defined yet  Code versioning system (repository)  First implementation (basic reader) for MS Windows  First version of simulator code Support for interested users / developers  Access to source code  Forum  Mailing list  Wiki  Manuals  FAQ

  20. Slide 20: Community: Possible structure

    Community: Possible structure Leadership BSI / HJP Maintainer Maintainer Maintainer Committer Committer Committer Committer Contributor Contributor Contributor Contributor Contributor Users 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 20

  21. Slide 21: Agenda

    Agenda Requirements of BSI Current state Simulator Virtual Smart Card Reader Community NFC Device Planned Roadmap Next steps 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 21

  22. Slide 22: NFC Device

    NFC Device Some uses cases need physical device (smart card) Hardware to simulate also physical characteristics: NFC device Use NFC interface to access simulator on smartphone / tablet Migration of simulator to NFC device Possible platforms  Windows Phone  Apple iOS  Android -> several NFC device

  23. Slide 23: Agenda

    Agenda Requirements of BSI Current state Simulator Virtual Smart Card Reader Community NFC Device Planned Roadmap Next steps 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 23

  24. Slide 24: Roadmap

    Roadmap Project is planned for two years (at least)  Lead  BSI: Tobias Senger  HJP Consulting: Holger Funke  Start September 2013  First results will be published in 2013 Virtual Driver  First implementation (basic reader) for MS Windows Simulator  Code adaptions for launching needed Communit

  25. Slide 25: Agenda

    Agenda Requirements of BSI Current state Simulator Virtual Smart Card Reader Community NFC Device Planned Roadmap Next steps 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide 25

  26. Slide 26: Next steps, Call for Participation

    Next steps, Call for Participation Simulation of German ID card Not only focussing on eID but also on smart card in general  Simulation of other applications:  eSign  Health  SIM  …. JOIN OUR COMMUNITY! 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Fu

  27. Slide 27: Questions?

    Questions? HJP Consulting GmbH Holger Funke Hauptstraße 35 33178 Borchen, Germany tel: +49 5251 41 77 633 fax: +49 5251 41 77 666 e-mail: holger.funke@hjp-consulting.com web: www.hjp-consulting.com 2013-09-10 Open Identity Summit 2013, An Open Source eID Simulator, Tobias Senger, Holger Funke Slide

secunet Security Networks — Open Identity Summit 2013 on 6ix