Securing the future of mobile services
Open Mobile API specification
11
Security, Identity, Mobility
6. Transport API
The Transport API as part of the Open Mobile API provides a communication framework to Secure
Elements available in the Open Mobile device.
6.1 Overview
The role of the Transport API is to provide a mean for applications to access the Secure
Element(s) available on the device. The access provided is based on the concepts defined by
ISO/IEC 7816-4:
APDUs: the format of the messages which are exchanged with the Secure Element, basically
a byte array is sent to the SE (or more precisely to an Applet in the SE) and the SE responds
with another byte array. For the details of the exact formatting of such byte arrays, refer to
ISO/IEC 7816-4.
Basic and Logical Channels: the communication abstraction to the SE: Channels are the way
to transmit APDUs, and can be opened simultaneously (although one can send an APDU at a
time, by waiting for the response before sending the next APDU).
This API relies on a “connection” pattern: the client application (running on the device
connected to the SE, e.g. the phone) opens a connection to the SE (a.k.a session in the rest of
the document) and then opens a logical or basic channel to an Applet running in the SE.
On top of this pattern, there are a number of constraints that are enforced by the system:
An application cannot send “channel management” APDUs on its own, as this would break the
isolation feature given by the logical channel. Once a channel is opened, it is allocated to
communicate with one and only one Applet in the SE. In the same manner, the SELECT by DF
name APDU cannot be sent by the terminal application.
The restrictions for the system should be implemented in the modules that are directly handling
the communication with the Secure Element and not in the API itself to ensure that attackers
cannot overcome the APDU filters. Thus if possible, the baseband should take care of the
filtering or at least the RIL that communicates with the baseband.
Secure Element (SE)
Applet
Mobile Device
Open Mobile API
Transport API
Device Application
Figure 6-1: Transport API overview
剩余65页未读，继续阅读
跑跑跑蜗牛
- 粉丝: 0
- 资源: 3
我的内容管理
展开
最新资源
- 最优条件下三次B样条小波边缘检测算子研究
- 深入解析：wav文件格式结构
- JIRA系统配置指南：代理与SSL设置
- 入门必备：电阻电容识别全解析
- U盘制作启动盘：详细教程解决无光驱装系统难题
- Eclipse快捷键大全：提升开发效率的必备秘籍
- C++ Primer Plus中文版：深入学习C++编程必备
- Eclipse常用快捷键汇总与操作指南
- JavaScript作用域解析与面向对象基础
- 软通动力Java笔试题解析
- 自定义标签配置与使用指南
- Android Intent深度解析：组件通信与广播机制
- 增强MyEclipse代码提示功能设置教程
- x86下VMware环境中Openwrt编译与LuCI集成指南
- S3C2440A嵌入式终端电源管理系统设计探讨
- Intel DTCP-IP技术在数字家庭中的内容保护
资源上传下载、课程学习等过程中有任何疑问或建议，欢迎提出宝贵意见哦~我们会及时处理！
点击此处反馈
