Title page for ETD etd-07122011-152716
Bhatt, Deep Vardhan Email
This dissertation presents the findings of a generic model aimed at providing secure
communication with remote computers via the Internet, based on smart cards. The results
and findings are analysed and presented in great detail, in particular the behaviour and
performance of smart cards when used to provide the cryptographic functionality. Two implemented models are presented. The first model uses SSL to secure the communication channel over the Internet while using smart cards for user authentication and storage of cryptographic keys. The second model presents the SSH for channel security and smart cards for user authentication, key storage and actual encryption and decryption of data.
The model presented is modular and generic by nature, meaning that it can easily be modified to accept the newer protocol by simply including the protocols in a library and with a minor or no modification to both server and client application software. For example, any new algorithm for encryption, key exchange, signature, or message digest, can be easily accommodated into the system, which proves that the model is generic and can easily be integrated into newer technologies.
Similarly, smart cards are used for cryptography. Two options are presented: first the smart
cards only store the algorithm keys and user authentication, and secondly, smart cards are
used for storing the algorithm keys, user authentication, and actual data encryption or
decryption, as the requirement may dictate. This is very useful, for example, if data to be
transferred is limited to a few bytes, then actual data encryption and decryption is
performed using smart cards. On the other hand, if a great deal of data is to be transferred,
then only authentication and key storage are performed with smart cards. The model
currently uses 3DES with smart card encryption and decryption, because this is faster and
consumes fewer resources when compared to RSA. Once again, the model design is flexible to accommodate new algorithms such as AES or IDEA.
Important aspects of the dissertation are the study and analysis of the security attacks on
smart card use. Several smart card attack scenarios are presented in CHAPTER 3, and
their possible prevention is also discussed in detail.
AFRIKAANS : Hierdie verhandeling bied die bevindinge van 'n generiese model wat daarop gemik is om veilige kommunikasie te voorsien met 'n afstandsrekenaar via die Internet en op slimkaarte gebaseer. Die resultate en bevindings word ontleed en breedvoerig aangebied, veral die
gedrag en werkverrigting van slimkaarte wanneer hulle gebruik word om die kriptografiese
funksionaliteit te voorsien. Daar word twee ge�mplementeerde modelle aangebied. Die
eerste model gebruik SSL om die kommunikasiekanaal oor die Internet te beveilig terwyl slimkaarte vir gebruikerbekragtiging en stoor van kriptografiese sleutels gebruik word. Die tweede model bied die SSH vir kanaalsekuriteit en slimkaarte vir
gebruikergeldigheidvasstelling, sleutelstoor en werklike kodering en dekodering van data.
Die model wat aangebied word, is modul�r en generies van aard, wat beteken dat dit
maklik gewysig kan word om die jongste protokolle te aanvaar deur bloot die protokolle by
'n programbiblioteek met geringe of geen wysiging van beide die bediener- en kli�nttoepassingsagteware in te sluit. Byvoorbeeld, enige nuwe algoritme vir kodering,
sleuteluitruiling, handtekening of boodskapbondeling kan maklik in die stelsel gehuisves word, wat bewys dat die model generies is en maklik in jonger tegnologie� ge�ntegreer kan
Slimkaarte word op soortgelyke wyse vir kriptografie gebruik. Daar word twee keuses
aangebied: eerstens stoor die slimkaarte slegs die algoritmesleutels en gebruikergeldigheidvasstelling en tweedens word slimkaarte gebruik om die
algoritmesleutels, gebruikergeldigheidvasstelling en werklike datakodering en �dekodering
te stoor na gelang van wat vereis word. Dit is baie nuttig, byvoorbeeld, wanneer data wat
oorgedra moet word, tot 'n paar grepe beperk is, word die eintlike datakodering en �
dekodering uitgevoer deur slimkaarte te gebruik. Andersyds, indien 'n groot hoeveelheid data oorgedra moet word, word slegs geldigheidvasstelling en stoor met slimkaarte
uitgevoer. Die model gebruik tans 3DES met slimkaartkodering en �dekodering omdat dit
vinniger is en minder hulpbronne gebruik vergeleke met RSA. Die modelontwerp is weer eens buigsaam om nuwe algoritmes soos AES of IDEA te huisves.
Nog 'n belangrike aspek van die verhandeling is om die sekuriteitaanvalle op
slimkaartgebruik te ondersoek en te ontleed. Verskeie slimkaartaanvalscenario's word in
Hoofstuk 3 aangebied en die moontlike voorkoming daarvan word ook breedvoerig
Bhatt, DV 2010, Analysing the behaviour of a smart card based model for secure communication with remote computers over the internet, MEng dissertation, University of Pretoria, Pretoria, viewed yymmdd < http://upetd.up.ac.za/thesis/available/etd-07122011-152716/ >