Page 1 of 1

What is SSD and how can I create it

Posted: Mon Sep 19, 2016 2:06 am
by aahmadzadeh
What is SSD? (abbreviation of what title? and functionality?)
Is it a java card applet? if yes, how can i create it?

Re: What is SSD and how can I create it

Posted: Mon Sep 19, 2016 3:38 am
by UNKNwYSHSA
From GlobalPlatform 2.2.1 specification:
Supplementary Security Domains are additional, optional on-card representatives of Application Providers or the Card Issuer; or their agents (e.g. service bureaus);


SSD is abbreviation of "Supplementary Security Domains".

You can creating an instance of an SSD with the Delegated Management privilege, like one JavaCard Applet instance.
Your card provider will offer you the AIDs of the SSD:
1 AID of Executable Load file;
2 AID of Module;
You can use them with INSTALL command to create SSD instance.

Re: What is SSD and how can I create it

Posted: Mon Sep 19, 2016 5:16 am
by aahmadzadeh
UNKNwYSHSA wrote:From GlobalPlatform 2.2.1 specification:
Supplementary Security Domains are additional, optional on-card representatives of Application Providers or the Card Issuer; or their agents (e.g. service bureaus);


SSD is abbreviation of "Supplementary Security Domains".

You can creating an instance of an SSD with the Delegated Management privilege, like one JavaCard Applet instance.
Your card provider will offer you the AIDs of the SSD:
1 AID of Executable Load file;
2 AID of Module;
You can use them with INSTALL command to create SSD instance.

Thank you so much
and some other questions

1. What is the difference between ISD and SSD? why we don't use ISD instead of SSD?
2. How many SSD can we have on a java card?
3. There is no need to Security Domain privilege for SSD?
4. There is no need to any special code or function in SSD applet?
5. There is separate keys for SSD? different from ISD keys.
6. Can we have some restriction on applets which users will install using SSD? such as file size?
7. So, i have to get special AID for my SSD from card provider company?

I'm waiting for your response

Re: What is SSD and how can I create it

Posted: Mon Sep 19, 2016 10:43 pm
by UNKNwYSHSA
What is the version of GlobalPlatform specification? I'll answer your questions following the specification.

Re: What is SSD and how can I create it

Posted: Tue Sep 20, 2016 3:13 am
by UNKNwYSHSA
These was i know:
1. What is the difference between ISD and SSD? why we don't use ISD instead of SSD?
They have different responsibilities and privileges; please read GlobalPlatform specification for more details.
2. How many SSD can we have on a java card?
Depend on your card free space.
3. There is no need to Security Domain privilege for SSD?
Need. Some GUI apdu tool, like pyApdutool, select Security Domain privilege automatically when you select Delegated Management privilege on the install parameters dialog;
4. There is no need to any special code or function in SSD applet?
No. (SSD applet? applet associated to SSD?)
5. There is separate keys for SSD? different from ISD keys.
Yes.
6. Can we have some restriction on applets which users will install using SSD? such as file size?
I did't found that util now. If you found one, tell me please.
7. So, i have to get special AID for my SSD from card provider company?
From "Mapping Guidelines of Existing GP v2.1.1 Implementation on v2.2.1":
"""
the AID for the installable Security Domain Executable Load File (package) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50' and the Executable Module AID (applet) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50 41'.
"""
Same as JCOP J3D081 card. Other card, you need to confirm this to your card provider.

Re: What is SSD and how can I create it

Posted: Wed Sep 21, 2016 2:14 am
by aahmadzadeh
UNKNwYSHSA wrote:What is the version of GlobalPlatform specification? I'll answer your questions following the specification.


GP version is 2.2.1
Did you have GlobalPlatform specification file for this version?

Re: What is SSD and how can I create it

Posted: Wed Sep 21, 2016 2:58 am
by aahmadzadeh
Excuse me, but i confused about SSD :?
Now i know that SSD is an applet, without any special code and programming!
So, I only need to create a new applet with a special AID and install it on card with Security Domain and Delegated Management privileges. That's all?!?

Re: What is SSD and how can I create it

Posted: Wed Sep 21, 2016 3:28 am
by UNKNwYSHSA
SSD is already implemented in the Card OS. You didn't need to and can't implement it yourself.
So if the card you got didn't support Delegated Management, you hava no SSD to use.
This is why Card Manual says their card support Delegated Management. J3D081: