The Oberthur CosmopolIC V4 Smart Card with ActivCard Applets is a high-security, multi-application smart card designed to meet stringent government and industry standards. It combines Java Card technology and Open Platform services to support various applets, including those for identification (ID), public key infrastructure (PKI), and general cryptographic (GC) services.
Key Features and Certifications
1. FIPS 140-1 Level 2 Certification: The CosmopolIC V4 Smart Card meets the Level 2 requirements of the Federal Information Processing Standard (FIPS) 140-1, ensuring robust cryptographic security. This certification validates its use in secure government and enterprise environments.
2. Java Card Technology: The smart card uses Java Card technology, providing a secure and flexible platform for running applets. The Java Card API allows access to essential services like memory management, cryptographic algorithms, and I/O control.
3. Secure Cryptographic Services: The card offers various cryptographic functions, including DES, Triple DES encryption and decryption, RSA signature and verification, and SHA-1 hashing. These functions are essential for secure communications and data protection.
Functional Overview
1. Multi-Application Support: The CosmopolIC V4 supports multiple applets, allowing it to serve various roles, such as ID verification, secure storage, and cryptographic operations. Applets can be securely downloaded and managed on the card, ensuring flexibility and scalability.
2. Physical and Software Security: The smart card is designed with physical security measures, including tamper-evident features. Software security is enhanced through the use of a Java Card Virtual Machine, which isolates applet execution and prevents unauthorized access to applet data.
3. Role-Based Access Control: The card implements role-based access control, ensuring that only authenticated users can access specific services. Roles include Card Holder, Application Operator, and Cryptographic Officer, each with distinct access privileges.
Applet Services
1. ID Applet: Provides cardholder verification services, such as PIN management and external authentication.
2. PKI Applet: Offers RSA-based cryptographic services, including key generation, digital signatures, and certificate management.
3. GC Applet: Ensures secure storage and retrieval of sensitive data, protected by authentication mechanisms.
Technical Specifications
- Memory: EEPROM and ROM configurations for storing applets and user data.
- Standards Compliance: Compliant with ISO/IEC 7816 standards for integrated circuit cards.
- Communication Protocols: Supports ISO 7816-1, -2, -3, and -4 protocols, enabling seamless integration with various systems.
Conclusion
The Oberthur CosmopolIC V4 Smart Card is a versatile and secure solution for multi-application environments, particularly suited for government and high-security applications. Its robust cryptographic capabilities, combined with flexible applet management and stringent security standards, make it an ideal choice for secure identity verification and data protection needs.