Java Card 3 Technology:

The Foundations of NFC

Introduction

Presentation agenda

● Introduction to the Java Card Forum

● The Java Card 3 platform

● Java Card 3 Technology in the NFC ecosystem

● Conclusion

Secure element interoperability is key to the quality of services

Source: Observatoire du NFC et du sans-contact

Java Card Forum at a glance

o Mission: Develop and promote Java as the preferred

programming language for multiple-application smart cards

• 1999: Java Card 2.1 Interoperable File Format

• 2006: Java Card 2.2.2 ETSI

• 2008: Java Card 3.0 first spec

• 2011: First deployments of Java Card 3.01 classic

• 2013: Java Card 3 is in its maturity phase

SmartCard Vendors Silicon Industry + + Oracle

Java Card Market Footprint is expanding

● over 2.1B Java cards shipped in 2012

● 100% of all known NFC Card Emulation chips run Java

Card.

● Huge growth in Java Card contactless payment cards

hitting in 2013

● forecast is that Java Card payment cards will increase at a

minimum of 50% over current 2012 volumes.

Java Card Market Footprint

Embedded SE Shipments

100% Java Card

10,000,000,000 and still growing

The initial rationale for Java Cards

Overcoming the drawbacks of proprietary systems:

● Proliferation of non-compatible operating systems and

applications

● Higher costs to launch, change or upgrade applications

● Need for specialized skills to develop applications

● More difficult to handle multi-sourcing

● Extended time to market due to integration issues

Applet Applet

Java Card API

Java Card Run Time

Environment

Java Virtual Machine

OS and Hardware

Applet

Java Card in NFC

• Java Card available on all form factors

• Industry-wide binary compatibility

Foundation for interoperability

• Starting from Java Card APIs

• Adding GlobalPlatform APIs (incl. Amdt C)

• Adding vertical APIs (ETSI, 3GPP, Mifare, …)

Full range of APIs

• A complete testing offer available

• Development and consulting offer

• Security labs and certification authorities

Complete ecosystem

Java Card Certification

● Developed special tool for Java Card

● “Java Card Test Vehicle” to evaluate ITSEFs

● Focusing uniquely on Java Card security

2011 2012 2013

Total 34 28 2

Java Card 30 14 2

JC Platforms 6 6 1

Certified Smart Card Products

Java Card Security Interoperability

Java Card Platform

Sensitive

Applet

Basic

Applet

Certification by composition

● Limited security portability

● Depends on platform guidelines

One-time certification

● Based on platform properties

● Based on common guidelines

Java Card platform ongoing work

● Better security properties of APIs

● Promotion of basic guidelines

Java Card targets

● Any contactless card

- From a specific app

● Making any card a tag

- Add a NDEF app

- Use as trigger

- Include security

SE Access API

● Mandatory for wallets

● Made available in some

contexts

● Useful for all NFC apps

- Card emulation

- NFC reading

The Other Sides of Java Card in NFC

Conclusion

● The Java Card 3 Platform comes with integrated support of

NFC and enhancements in applications support

• Java Card is present in 100% of NFC platforms, in all form factors

● NFC applications require:

• A stable and secure platform

• Interoperability across many platforms

• Certified platforms and application

• Remote manageability

● Java Card 3 is the platform of choice to make NFC grow

• Be ambitious with Java Card

• Think about Java Card outside of the box

• Let us know about any bottleneck you encounter

Eric Vétillard Java Card Product Manager

JCF Representative

Oracle

Thank you !