At risk of being declared off the topic, I add the following:
The situation can be even worse than Guido describes, because ISO allows a
card to refuse to accept (which means that it will give an error response)
standard ISO 7816-4 file handling commands unless a prior mutual
authentication sequence between card and reader has been successfully
carried out. Thus, even when the card contains only data files, and as
someone else wrote, the card is not like a floppy disk. It is only very
recently that attempts have begun to standardise the security methods so
that there might be a migration to universally accessible cards and
universal (or "vanilla") readers - but this standardisation is not being
carried out at the level of ISO 7816; it is being carried out by a variety
of groups for whom such standardisation is, or might be, useful. eEurope,
CEN TC224 WG11 and national mirror groups (e.g. in France), ITSO (public
transport ticketing in the UK), PKCS#15 group in the USA - these are a few
that I know. We are really looking for standard application algorithms and
associated standard security procedures (both for the app and for the card
platforms that those apps may wish to reside on) - and it may be necessary
for cards to carry related platform level and application level security
scheme and key set ID in a standard manner in order to implement this. For
those in the UK, the Smart Card Club (Smartex Ltd, www.smartex.com) and ITSO
(www.itso.org.uk) will be places to look, and I am coordinating the
collection of information for Smartex. More generally in Europe, eEurope
Trailblazer 7 on multi app cards is the place to go.
Peter T
Bristol UK
----- Original Message -----
From: "Treutwein Guido" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 06, 2001 8:01 AM
Subject: AW: MUSCLE Smartcard program?
>
>
>
> -----Ursprüngliche Nachricht-----
> Von: Angie Mitchell [mailto:[EMAIL PROTECTED]]
> Gesendet am: Dienstag, 6. Februar 2001 03:31
> An: [EMAIL PROTECTED]
> Betreff: MUSCLE Smartcard program?
>
>
> > It seems that a lot of the apps ive found are application
> > specific.. a gsm card viewer, dss software, blahblahblah. I jus want
> > something that will show me whats on the card, regardless of what kind >
> of card it is. I am prolly asking for a lot and I am new to this so
> > if there is something I'm missing, please enlighten me :)
> > Much thanks..
> >
> > Angie.M
>
> Hi,
>
> unfortunately the generic application to show everything on a ISO or GSM
> processor card is impossible. The only command, which is guaranteed to
work
> in ISO is "Select File", because that is independent of the security
status.
> This will only give you the information, that a file with the id given
> exists.
> If you are not able to determine from the response, whether it is a
> dedicated file, (so you apply recursion there) the journey ends here. (The
> response may well be proprietary, so standards don't help much and you
need
> a manual for the card in question to interpret the response finding out
file
> size, type, etc) Of course, the card might support the PCSC DIRECTORY
> command to speed up the process, but if no strictly standardised
application
> demands that from the card ...
>
> So you end up knowing which files exist. If you have no further
information
> about the application you will also not know, which access rights to
acquire
> using which pins or keys, so you might not be able to read anything. But a
> tree view of the files on the card with non-descriptive ids is not overly
> impressive.
>
> Shortly summarised: a card is no floppy disk, and being designed to keep
> information for itself any application will have a hard job to visualise
> something.
>
> hth
> [EMAIL PROTECTED]
> ***************************************************************
> Linux Smart Card Developers - M.U.S.C.L.E.
> (Movement for the Use of Smart Cards in a Linux Environment)
> http://www.linuxnet.com/smartcard/index.html
> ***************************************************************
>
>
***************************************************************
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***************************************************************
