Re: [Globalplatform-developers] Global Platform and Off-Card Entity communication with SMS

[Karsten O. <wid...@t-...>]

Hi,

1. In theory, the GET DATA, MANAGE CHANNEL, SELECT and INITIALIZE UPDATE
command can be executed by an off card entity without authentication?


Yes. MANAGE CHANNEL, SELECT can always be executed without any security.
GET DATA AFAIR also does not required a mutual authentication also when
the card is personalized. Of course INITIALIZE UPDATE is also running on
an insecure channel because it is the first command to establish a
secure channel.


2. When sending a SMS-PP Data Download envelope, which is not formatted
according to the 23.048 specification, which component (SD or app)
process it?

This depends on the UICC implementation. But if it is not formatted
correctly the message will fail. Could have to format it correctly. To
talk to your applet you can use the STORE DATA for PERSONALIZATION
command structure and implement the org.globalplatform.Application
interface in your applet. The STORE DATA command is wrapped in a SMS-PP
then.

3. I got a strange behavior (in my opinion) - for every SMS I sent to my
SIM card with an APDU without the 23.048 headers, I got the 9000
response. Why does it happening?

Not within an ENVELOPE command? Maybe the command is matching a
supported command, maybe the card is ignoring the unknown command, so a
bug in the card OS.

BR,
Karsten


Am 07.02.2017 um 16:36 schrieb גל ברק:
>
> 	
>
> 	
> 	
>
> Hello Global Platform mail list,
>
> I'm a student and I'm studying about UICC and OTA.
>
> I got some questions and it will be awesome if someone would answer me :
>
> 1. In theory, the GET DATA, MANAGE CHANNEL, SELECT and INITIALIZE
> UPDATE command can be executed by an off card entity without
> authentication?
>
> 2. When sending a SMS-PP Data Download envelope, which is not
> formatted according to the 23.048 specification, which component (SD
> or app) process it?
>
> 3. I got a strange behavior (in my opinion) - for every SMS I sent to
> my SIM card with an APDU without the 23.048 headers, I got the 9000
> response. Why does it happening?
>
> Many thanks in advance!
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>
>
> _______________________________________________
> Globalplatform-developers mailing list
> Glo...@li...
> https://lists.sourceforge.net/lists/listinfo/globalplatform-developers