Page 1 of 1

Non identifiable Javacards

Posted: Mon Jun 19, 2017 7:40 pm
by Penneke
Hi,

I need to know if you can set a group of Javacards that you are going to use for an anonymous access application in a way that they can't provide explicit information to the reader that makes them completely identifiable. I mean, I want to know if you can tell the issuer not to include data that uniquely identifies each card you buy or if there is a way to prevent this data to be leaked to the reader.

Thanks in advance.

Re: Non identifiable Javacards

Posted: Tue Jun 20, 2017 11:29 pm
by UNKNwYSHSA
Not complete understanding your means.
As my understand, the card unique identifier can be set to random bytes and not the same for each communication with reader.

Re: Non identifiable Javacards

Posted: Mon Jun 26, 2017 7:01 am
by Penneke
I just want to know if, when buying smartcards for implementing a system, these smartcards are going to have an unique serial number or identifier that the reader can check because if so, there is no way to implement a secure anonymous authentication as long as the reader can just check the identifier and link the messages.

Re: Non identifiable Javacards

Posted: Mon Jun 26, 2017 10:38 pm
by UNKNwYSHSA
You can do it like that:
1. Reader and card are connected;
2. Reader verify the card;
3. Card verify the reader;
4. Reader send one command to get card identifier;
5. Reader do next step(s) according on the card identifier;