Nov 21-22, 2000 SWITCH - AAI Workshop 2
The Smart Card ArchitectKudelski Group Structure
KUDELSKI HOLDING
NAGRAAUDIO
NAGRAVISIONDigital
NagraF
NagraD
NagraUK
NagraI
Kudelski Family Dassault GroupPublic shareholders
NagraUSA
Nagravision Sao Paulo
Nagravision Singapore
NagravisionEl Segundo
Nagra ID
NagraStar
NAGRA+
50%
50%
50% CANAL+
50% M. Droz
50% ECHOSTAR
Nagravision Shanghai
NAGRAVISION SA
NagraCard
MediaCrypt50%
50% ASCOM
Sport Access
49 TIERS (VS)51%
50%
Nov 21-22, 2000 SWITCH - AAI Workshop 3
The Smart Card ArchitectPresence Worldwide
Sentech
Echostar
Bell South
Sky Vista
Web-TV (Dish)
PacBell
Americast
GTE
Express-VU
Loral Orion
Look Com.
Image & WL
Alaska
Choice-TV
Sterling
DVB
PLDT
XX
Nov 21-22, 2000 SWITCH - AAI Workshop 4
The Smart Card ArchitectPay-TV, did you know it’s PKI ?
! Pay-TV systems installed worldwide" 22 millions customers
" pay-per-view
" electronic purse
" Internet
! Managed and secured with a very high proprietarysecured PKI solution" based on a smartcard
Nov 21-22, 2000 SWITCH - AAI Workshop 6
The Smart Card ArchitectSmart Cards and PKI
! Smart cards are «certificate wallets»
! Secure storage for:" Owner private key" Trusted root certificates
! Smart Cards are a «PC-in-your-Pocket»" Generation of owner’s digital signature
! Smart cards provide:" Mobility" Security" Transparency" Issuer branding, loyalty
Nov 21-22, 2000 SWITCH - AAI Workshop 7
The Smart Card ArchitectDigital ID
! Asymmetric key-pair" public key
" private key
! X.509 certificate" ISO standard
" public key
" credentials
Nov 21-22, 2000 SWITCH - AAI Workshop 8
The Smart Card Architect
Smart card application example:Digital Signature
Nov 21-22, 2000 SWITCH - AAI Workshop 9
The Smart Card Architect
Smart card inheterogeneous environments
! Smart cards need readers and drivers
! Readers" desktop or embedded (keyboard, floppy slot)
" optional display and keypad
" PC world ready for installation
" Mac, Unix & Linux ‘waiting’ for USB
! Drivers" PC/SC standard for Windows PC
" custom developments
Nov 21-22, 2000 SWITCH - AAI Workshop 10
The Smart Card ArchitectISO 7816 vs USB
SMARTCARDREADER
OS / Software
ISO 7816prop. protocol
based on RS232
Microcontroller / SoftwareDriver
COMPUTER
SMARTCARDREADER
OS / Software
protocol on USB
galvanic coupling deviceDriver
COMPUTER
Nov 21-22, 2000 SWITCH - AAI Workshop 11
The Smart Card Architect
Certificate Portability:Smart Cards Holding Certificates
! Pros" Tamper-proof device
" Portable
" Visible security/theft indicator
" Upgradeable
" Branding, Photos,Mag-stripe
" Biometric cards, readers
coming
! Cons" More expensive than a pure
software solution
" infrastructure
" Standards issues
" Multi-application issues
Nov 21-22, 2000 SWITCH - AAI Workshop 12
The Smart Card ArchitectNagraCard solution
! Based on knowledge of massively-deployed smartcard based system management in Pay-TV" Nagravision is the #1 player in digital TV, and is an independent
company
" More than 20 millions of smart cards delivered and operating
! NagraCard thinks security at system level" To secure the overall security
" To avoid a breach in the chain
" To strengthen each element security
Nov 21-22, 2000 SWITCH - AAI Workshop 13
The Smart Card ArchitectOur Mission
! Smart card architect
" Security solutions & services
! Smart card R&D
" Secured and reliable smart card operating systems andapplications
! Our approach
" audit
" architecture, security
" implementation
Nov 21-22, 2000 SWITCH - AAI Workshop 14
The Smart Card ArchitectContact
Tel. +41 21 732 05 60
Fax +41 21 732 05 61
E-mail: [email protected]
Web-site: www.nagra.com
NagraCard S.A.
Kudelski Group
Route de Genève
CH-1033 Cheseaux