Over-the-Internet: Efficient Remote Content Management for Secure Elements in Mobile Devices

Mohamed Sabt (1, 2) , Mohammed Achemlal (3, 1) , Abdelmadjid Bouabdallah (2)

1 Orange Labs [Caen]
2 Heudiasyc - Heuristique et Diagnostic des Systèmes Complexes [Compiègne]
3 Equipe SAFE - Laboratoire GREYC - UMR6072

We propose Over-the-Internet (OTI), a novel system that manages secure element based applications. We demonstrate our solution in the context of NFC ecosystem and show that it can be effectively used for transmitting big applications to the secure element. Our system leverages the GlobalPlatform card specification as well as the GlobalPlatform user-centric ownership model. Our solution integrates the different actors of the NFC ecosystem in its architecture. We propose to leverage the concept of security domain, so that service providers can manage their applications independently from the SE issuer. We implement our solution within available platforms and show that it is secure, fast, reliable and easily deployable.

Mots clés: secure element, nfc, ota, globalplatform

Domaines: Cryptographie et sécurité [cs.CR]

Mohamed Sabt, Mohammed Achemlal, Abdelmadjid Bouabdallah. Over-the-Internet: Efficient Remote Content Management for Secure Elements in Mobile Devices. Conference on Mobile and Secure Services, Feb 2015, Gainesville, United States. ⟨hal-01118705⟩