Skip to Main content Skip to Navigation
Conference papers

On Practical Information Flow Policies for Java-Enabled Multiapplication Smart Cards

Dorina Ghindici 1 Isabelle Simplot-Ryl 1
1 POPS - System and Networking for Portable Objects Proved to be Safe
LIFL - Laboratoire d'Informatique Fondamentale de Lille, Inria Lille - Nord Europe, IRCICA
Abstract : In the multiapplicative context of smart cards, a strict con- trol of underlying information flow between applications is highly desired. In this paper we propose a model to improve information flow usability in such systems by limiting the overhead for adding information flow security to a Java Virtual Machine. We define a domain specific lan- guage for defining security policies describing the allowed information flow inside the card. The applications are certified at loading time with respect to information flow security policies. We illustrate our approach on the LoyaltyCard, a multiapplicative smart card involving four loyalty applications sharing fidelity points.
Document type :
Conference papers
Complete list of metadata
Contributor : Isabelle Simplot-Ryl <>
Submitted on : Thursday, December 9, 2010 - 11:53:03 AM
Last modification on : Wednesday, April 7, 2021 - 3:00:02 PM


  • HAL Id : inria-00544952, version 1



Dorina Ghindici, Isabelle Simplot-Ryl. On Practical Information Flow Policies for Java-Enabled Multiapplication Smart Cards. Proc. 8th Smart Card research and Advanced Application IFIP Conference (CARDIS 2008), 2008, Egham, Surrey, United Kingdom. pp.32--47. ⟨inria-00544952⟩



Record views