1. Where is our
smart card
AppStore?
Eric Vétillard
Cardis 2010

2. SIM Toolkit
Menus & interactions
from the SIM card

3. Java Card 1.0
Platform interoperability
Application portability
But …
Applications are scripts

4. Java Card 2.1
Full-blown applications
Multi-application cards
Binary interoperability
…
But …
APDUs

5. Java Card 2.2
RMI
Hiding the low-level protocol
But …
not universal

6. Smart Card
Web Server
Based on standard protocols
HTTP, TLS, …
But …
Still APDUs
Many limitations

7. Java Card 3.0
Full blown Web Server
TCP/IP based
Ultimate
(2010)

8. OpenPlatform 2.0.1’
Interoperable card management
But …
One actor ?

9. GlobalPlatform 2.1
Supports multiple providers/roles
But …
not very SIM-oriented

10. GlobalPlatform 2.2
SIM-oriented
Full UICC profile,
Supports NFC
But …
APDU

11. GlobalPlatform 3.0
Fully IP-based
Supports SCWS
Ultimate
(2010)

12. Impressive
• Open
• Interoperable
• Interoperable app
• Multi-application management
• High-level protocols • Multiple providers
• Standard protocols • Works on UICC
• Full IP support • Manages Web
servers

13. But …

14. Who cares ?

15. Open
Not everybody cares about that
No Java Card in China
Proprietary frameworks
Operators are “big enough”

16. Interoperable
Yes, we all like that
But … we don’t get it easily
Functional interop takes years
No security interop (yet)

17. Multi-application
Few people really care
Applications are often tightly linked
( Some use cases in the SIM area )

18. Multi-provider
Nobody cares
In fact, it is mostly annoying
Before NFC, no multi-provider cards
It may still kill NFC

19. High-level protocols
Only developers care
Who cares about developers?

20. Standard Protocols
Standard? Not on cards!
Handset vendors are slow to react
SCWS support ?
USB SIM interface ?

21. Why?

22. Cards are Tokens
Programmable tokens
but still tokens

23. Wait !!

24. SIM cards !!
SIM cards are more than tokens
For the benefit of a single operator
Losing value in a connected world
Nice biz model (20th century)

25. NFC !!
NFC supports multiple providers
Have you seen NFC deployments ?
Have you seen NFC biz models ??
Back to the brand, plus revenues

26. No Future ?

27. Assets ?
Secure
Small = Personal
Cheap = Trusted
Manageable = Here
Personalizable

28. Environment ?
Cloud
Interconnection,
all data accessible
Identity?
Mobile
Here and Now
Generative, Interactive

29. Here
Me
You

30. Soooo what ??
(some) research issues

31. Open Card Platforms
The technology is there (almost)

32. Leveraging Locality

33. Think at the System Level

34. Think at the Human Level

35. Getting to Trust

36. Where is my App Store?
Most likely, it will not come
Smart cards are in the
infrastructure
Smart cards are lacking …

37. Where is my App Store?

38. Thank you!

39. For more information
• Sources of inspiration
– Usual suspects: Bruce, Ross, and friends
– More industrial: Ajit Jaokar, Umair Haque
– Compiled: http://javacard.vetilles.com
• Image credits from Flickr
culdesac par Gabba Gabba Hey! iconwall by liquidx
appstoreiphone by Lee Bennett fuzzyball by andymangold
androidmarket by Fragments of Eternity
neons_night by an untrained eye mom_child_trust by Isobel T
neons_toss by Neato Coolville Lightbulb by jamie hladky