Development of A Fuel Card Application Using Basic Smart Card

This work is devoted for smart card technology and focusing on software and security. The main differences between smart card software and Personal Computer software have been reviewed. The BasicCard is adopted to design a Fuel Card Application; Fuel Card Application deals with the two parts of smart card software namely, card side and host side. In the present technique programs for Issuing Company, Card User and Fuel Card have been developed. The threats those may attack a Fuel Card application were analyzed then solutions have been proposed to fulfill the security requirements; this is done by designing Fuel Card Application with security which has different cryptographic algorithms that use different keys in a single Fuel Card. Under ZeitControl BasicCard @Development Kit, two Fuel Card Application models, with security and without security, were developed and simulated using Professional BasicCard, memory and time of execution for the two models have been compared. It is concluded that applying security increases memory in not more than 25%, while the increase in the execution time is about 60% but this increment is insignificant relative to the inputting time.


Introduction
The smart card proved to be an ideal medium.It made a high level of security (based on cryptography) available to everyone, since it could safely store secret keys and execute cryptographic algorithms.In addition, smart cards are so small and easy to handle that they can be carried and used everywhere by everybody in everyday life [1].The development of the smart card, combined with the expansion of electronic data processing systems, has created completely new possibilities for devising a new solution.Smarts card are very useful in the area of personal security, they can be used to add authentication and secure access to information systems that require a high security [2].

Smart Card Standardizations
An important feature of smart cards is that their properties are strongly based on international standards.This is fundamentally important with regard to the usually compulsory need for interoperability.
Unfortunately, these standards are often difficult to understand, and in some critical places they require outright interpretation.Sometimes only the members of the associated standardization group can explain the intention of certain sections [3].The venue of choice for establishing such standards is the International Standards Organization (ISO).In some fields of technical activity, the International Electro technical Commission (IEC) collaborates with the ISO in the development of standards [4].In this work the contact BasicCard was used so ISO 7816-4 was needed because it is used to Identify Integrated Circuit(s) Cards with Contacts.

Types of Cards
In general cards can be classified into four types according to time of appearance and the storage capacity [1]: a. Embossed Card Embossing is the oldest technique for adding machine-readable features to identification cards.The embossed characters on the card can be transferred to paper using simple, inexpensive devices, and they can also be easily read visually (by humans).The nature and location of the embossing are specified in the ISO 7811 standard.
PDF created with pdfFactory Pro trial version www.pdffactory.com

b. Magnetic -Stripe Card
The fundamental disadvantage of embossed cards is that their use creates a flood of paper exact shape and size of a credit card.Smart cards are particularly useful components of computer systems that need to address data security, personal privacy, and user mobility requirements.storing and processing data [1,2].The data can be transmitted using either contact on the surface of the card or electromagnetic fields, without any contacts.
The fundamental characteristics and functions of smart cards are specified in the ISO 7816.Smart cards offer several advantages compared with magnetic-stripe cards.The main important advantages are: First, the maximum storage capacity of a smart card is many times greater than that of a magnetic-stripe card.Second, of the most important advantages of smart cards is that their stored data can be protected against unauthorized access and manipulation [1].Since the data can only be accessed via a serial interface that is controlled by an operating system and security logic, confidential data can be written to the card and stored in a manner that prevents them from ever being read from outside the card.Such confidential data can be processed only internally by the chip's processing unit.2) The smart card encrypts the random number it receives, using a key known to both the card and the terminal.3) The card then returns the result of the encryption to the terminal (This is the response to the challenge).4) The terminal uses the secret key to decrypt the encrypted random number it has received, and then compares the result with the random number it originally sent.If the two numbers match, the terminal knows that the smart card is authentic.PDF created with pdfFactory Pro trial version www.pdffactory.com

Figure ( 1
Figure (1.1 in appendix A) shows the embossed card.b.Magnetic -Stripe Card The fundamental disadvantage of embossed cards is that their use creates a flood of paper exact shape and size of a credit card.Smart cards are particularly useful components of computer systems that need to address data security, personal privacy, and user mobility requirements.The amount of data processed by a smart card program is usually quite small and the computations performed are typically quite modest.Smart cards can be divided into two groups, which differ in both functionality and price they are: Memory cards and Microprocessor cards.Memory cards are much less expensive and much less functional than microprocessor cards.Memory card does not have the ability to process data (Memory card stores data while the Microprocessor can store and process data.)Microprocessor Card can have many functions such as storing data, make calculations, process data, manage files, and execute encryption algorithms.It makes possible sophisticated and portable data processing applications such as contact and contactless credit/debit cards, transit payment cards and GSM Subscriber Identity Modules [6].c.Smart Card The smart card is the youngest and cleverest member of cards.Its

.1 Physical Properties of the Smart Card Small card has a small gold chip about ½"in diameter on the front
PDF created with pdfFactory Pro trial version www.pdffactory.comPDF created with pdfFactory Pro trial version www.pdffactory.comPDF created with pdfFactory Pro trial version www.pdffactory.comPDF created with pdfFactory Pro trial version www.pdffactory.comPDF created with pdfFactory Pro trial version www.pdffactory.comPDF created with pdfFactory Pro trial version www.pdffactory.com

Response Mutual Authentication Procedure
PDF created with pdfFactory Pro trial version www.pdffactory.comPDF created with pdfFactory Pro trial version www.pdffactory.comPDF created with pdfFactory Pro trial version www.pdffactory.comPDF created with pdfFactory Pro trial version www.pdffactory.comPDF created with pdfFactory Pro trial version www.pdffactory.comPDF created with pdfFactory Pro trial version www.pdffactory.com