After last year’s push for a phone based on SavaJe (a “small” Java SE technology made for PDAs and mobile phones), the big buzz at this year’s JavaOne will be that Sun is buying SavaJe’s technology, opening the world of mobile phones to mainstream Java SE technology. At the same time, we are working hard […]
Category Archives: Java Card Bandol
Should a card initiate transactions ?
In the current smart card application models, the card always acts as a server, and it responds to solicitations from the card terminal. This has many advantages: for instance, the terminal can put the card in “sleep” mode when it does not need it. Some may say that the SIM Toolkit framework is an exception […]
Interview
Card Technology has published an interview of me, and the good news is that I still agree with me, even after editing. Of course, I would have liked to elaborate more on some topics, and sometimes to make my views more subtle. But there is always a limit to the size of an article. One […]
JCF announcement
The Java Card Forum made the official announcement of my nomination as Technical Chairman at Cartes’06. The official press release can be found on the JCF site (in Word). Like in any good press releases, there are a few quotes, which are provided here. I said: Our common driving force is the success of Java […]
Defining a micro-server
The discussions in the Java Card Forum, and between Sun and its licensees are of course private and confidential, but there have been several presentations (including the presentation by Thierry Violleau at e-Smart [VR06]) about this topic. Everybody can therefore derive that the next release of Java Card will define a smart card as some […]
An efficient sensitive section API
e-Smart, day 3. Benoît Gonzalvo is from Gemalto’s security group, and he also participates to the Java Card Forum’s security work. The issue is to protect against attacks (side-channel observation or fault induction) [Gon06]. The two current approaches are: Protecting the whole VM, which is secure but potentially very slow. Protecting the application code, which […]