On Practical Information Flow Policies for Java-Enabled Multiapplication Smart Cards

Dorina Ghindici 1 Isabelle Simplot-Ryl 1
1 POPS - System and Networking for Portable Objects Proved to be Safe
LIFL - Laboratoire d'Informatique Fondamentale de Lille, Inria Lille - Nord Europe, IRCICA
Abstract : In the multiapplicative context of smart cards, a strict con- trol of underlying information flow between applications is highly desired. In this paper we propose a model to improve information flow usability in such systems by limiting the overhead for adding information flow security to a Java Virtual Machine. We define a domain specific lan- guage for defining security policies describing the allowed information flow inside the card. The applications are certified at loading time with respect to information flow security policies. We illustrate our approach on the LoyaltyCard, a multiapplicative smart card involving four loyalty applications sharing fidelity points.
Type de document :
Communication dans un congrès
Springer. Proc. 8th Smart Card research and Advanced Application IFIP Conference (CARDIS 2008), 2008, Egham, Surrey, United Kingdom. 5189, pp.32--47, 2008, Lecture Notes in Computer Science
Liste complète des métadonnées

https://hal.inria.fr/inria-00544952
Contributeur : Isabelle Simplot-Ryl <>
Soumis le : jeudi 9 décembre 2010 - 11:53:03
Dernière modification le : jeudi 11 janvier 2018 - 06:22:13

Identifiants

  • HAL Id : inria-00544952, version 1

Collections

Citation

Dorina Ghindici, Isabelle Simplot-Ryl. On Practical Information Flow Policies for Java-Enabled Multiapplication Smart Cards. Springer. Proc. 8th Smart Card research and Advanced Application IFIP Conference (CARDIS 2008), 2008, Egham, Surrey, United Kingdom. 5189, pp.32--47, 2008, Lecture Notes in Computer Science. 〈inria-00544952〉

Partager

Métriques

Consultations de la notice

68