IAS ECC
The French trade association for electronic components, systems, and smart card industries, GIXEL, created a common smart card specification IAS-ECC (Identification Authentication Signature – European Citizen Card) that will be used to develop the next French National Identity Card.
IAS-ECC cards comply with the Advanced Electronic Signature EU Directive 1999/93/EC and the European Citizen Card specification created by CEN in June 2007 to ensure interoperability of e-Services cards throughout Europe. The interoperability of the cards means that every card is compatible with all IAS-ECC middleware, including middleware developed for the French government.
The base of the IAS-ECC technical specification contains multiple ISO-7816 series, including ISO-7816-15. The specification anticipates the coexistence of multiple cryptographic card (PKCS#15) applications. (see Note 01).
- IAS/ECC card manufacturer independence
- compatibility with existing IAS/ECC card middleware
- independence from personalization profile in card usage and easy configuration for the particular personalization profile in card administration
- Secure Messaging for the administration of “protected” applications, “Qualified Signature,” and PIN operations
- PIN-pad support
- support for External Authentication
- Gemalto MultiApp ID IAS ECC
- Oberthur ID-ONE IAS-ECC
- Sagem “ypsID S3 IAS/ECC – PKCS#15”
- Oberthur “COSMO v7” with PKI applet “AuthentIC v3”
- Amos “IOP-V6 IAS/ECC”
- IAS/ECC cards with three “Adele” profiles (from Gemalto)
The IAS/ECC card from Gemalto thoroughly implements specification IAS/ECC v1.0.1. The card is formatted with generic PKI application and SM protected application eID.
(Some notes, that concerns the usage of this card.)
IAS/ECC card from Oberthur is formatted with one generic PKI application.
The “ypsID S3 IAS/ECC – PKCS#15” is the multi-application card from Sagem and contains two profiles, Generic and protected ECC-eID. The second one contains one slot for the Qualified Signature.
Oberthur’s Java-card “COSMO v7” with PKI applet “AuthentIC v3” is not an IAS/ECC card, but native format of this card, based on PKCS#15 specification, is not far from the IAS/ECC.
Global Platform Secure Messaging can be used to protect the access to the on-card objects.
One of the motivations to support this card here is an attempt to generalize implementation of SM and External Authentication – both differ from the definitions in the IAS/ECC specification.
IAS/ECC cards with “Adele” profiles are not general purpose cards. They were produced for the interoperability tests of the IAS/ECC cards and middleware from the different producers.
Tested compatibility with the PKCS#11 and CSP from the other middlewares :
IAS ECC Middleware v2.0.20 from ANTS
Classic Client 6.2 005 from Gemalto
AWP 4.4 from Oberthur
Smart Security Interface 4.9.1 from Charismathics
git clone https://github.com/viktorTarasov/OpenSC-SM.git
# use 'secure-messaging' branch
can be found on the dedicated CI Jenkins server, OpenSC-SM projects.
Coming soon the packages for different Linux distributions.
For the interoperability tests, the three IAS/ECC card producers have used ‘Adele personalization profiles’ where three profiles are defined. For the first Generic profile, the administration and usage of the cryptographic objects is protected by User PIN. For the next two profiles, Administration-2 and Administration-1, all operations that change the card content are protected by Secure Messaging. The Administration-1 application holds the non-repudiation sign key for which the ‘COMPUTE SIGNATURE’ operation is protected by Sign PIN and Secure Messaging.
Warning: Due to attempts to plant malicious links to our wiki, it is no longer open to anyone to edit. If you want to contribute to this, wiki, please open a pull request here: https://github.com/OpenSC/Wiki