English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Tools annual

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Presents the access of premium content as premium feature

Premium Content

Global: Zendy Plus annual

Global: Zendy Free Plan

Although smartcards are widely used, secure smartcard interoperability hasremained a significant challenge. Usually each manufacturer provides a closedenvironment for their smartcard based applications including the microchip,associated firmware and application software. While the security of this"package" can be tested and certified for example based on the Common Criteria,the secure and convenient interoperability with other smartcards and smartcardapplications is not guaranteed. Ideally one would have a middleware that cansupport various smartcards and smartcard applications. In our ongoing researchwe study this scenario with the goal to develop a way to certify securesmartcard interoperability in such an environment. Here we discuss andexperimentally demonstrate one critical security problem: if several smartcardsare connected via a middleware it is possible that a smartcard of type Sreceives commands that were supposed to be executed on a different smartcard oftype S'. Such "external commands" can interleave with the commands that weresupposed to be executed on S. Here we demonstrate this problem experimentallywith a Common Criteria certified digital signature process on two commerciallyavailable smartcards. Importantly, in some of these cases the digital signatureprocesses terminate without generating an error message or warning to the user.

Interleaving Commands: a Threat to the Interoperability of Smartcard Based Security Applications