Follow us on 
e-Smart Program

last update: September 21, 2011
Download the PDF program  
   Day 1 - Sept. 21  
DAY 1 – Wednesday Sept. 21 – Morning

09.00am – 10.30am: Badges delivery – Registration – Welcome Coffee
Smart Event 2011 Grand Opening Session

MOBILE SERVICES
THE NEW "CHIP-TO-CLOUD" CHALLENGE
Security, Privacy, Interoperability: which business models and strategies?

"Now all is in the cloud: the information haven’t to be stored anymore in the SIM card"
Eric Schmidt, Google CEO, February 18, 2010 Barcelona MWC

"The wallet is still in the cloud. It’s never in the mobile, but the phone is a point of entry to the cloud, which we have to trust."
Sébastien Taveau, Astronomer, PayPal Ecosystems and Technologies Integration (in SCT March-April Issue 2011)

"iCloud is more than an hard drive in the sky"
Steve Jobs, CEO of Apple

"Identity Access Management requires a number of technologies now applied to the rapidly growing domain of cloud computing the development of which is an urgent demand all over, to secure user access and segment their access rights."
Olivier Piou, CEO of Gemalto (in SCT November Issue 2011)

Cloud computing is ushering to a new era where security is no more a matter of firewalls and passwords for protecting and managing access to physical office networks. It is in the nature of cloud services to be accessed anytime and from anywhere thanks to chip-based devices we need to trust. But the need to shift from a simple IT security approach to a more complex “identity-proof“ security (strong authentication) model raises questions in terms of security, privacy and interoperability:
Are low security, critical privacy concerns and restricted interoperability featuring close "chip-to-cloud" ecosystems and big brand logic?
On the contrary, are high security and privacy protection, and large interoperability the distinctive attributes of the open chip-to-cloud ecosystems and coopetitive industrial initiatives?
How will they both coexist in the future?

Led by Jean-Paul Thomasson, e-Smart and Smart Mobility Program Committee Chair

• Part I: Research and industry leaders will address the various technological dimensions of the “cloud-to-chip” model and will draw future perspectives in their respective domains.
- Holger Lenz, Director Business Development, Cinterion, Germany
- Marc Muller, Head of Common Technologies, Gemalto, France
- Travis Spencer, Senior Technical Architect, Ping Identity, USA

• Part II: Panel debate on the different industrial approaches of the cloud-to-chip model: brand-based, ?coopetitive? or a new approach to be defined?
The panel will include:

- Yvon Avenel, Publisher of SmartCardsTrends, France
- Holger Lenz, Director Business Development, Cinterion, Germany
- Marc Muller, Head of Common Technologies, Gemalto, France
-
Travis Spencer, Senior Technical Architect, Ping Identity, USA
- Jörg Suchy, Group Leader, Strategic Business Development, Smart Card and NFC Products, Samsung Semiconductor Europe, Germany

in partnership with: 

12.30am – 2.00pm: Lunch – Networking – Exhibition

DAY 1 – Wednesday Sept. 21 – Afternoon

  Smart Grids Trusted Technologies for NFC & Contactless
 
Moderator: Jean-Paul Thomasson, e-Smart Program Committee Chair, Strategies Telecoms & Multimedia, France

To ensure smart grids reliability and dependability, a compromise need to be found between security, long operating time, interoperability and regulation challenges. Discover how in this session.

Moderator: J.M. Mulder, Sales Director Europe, Collis, The Netherlands

This session tackles the various means to secure contactless cards and NFC-enabled devices while ensuring users’ privac. From the low level of protocols and interfaces up to card-based programming, the state-of-the-art of trusted technologies is presented here.

2.00pm – 2.30pm
IT security in the smart grid with embedded devices Bullet Points:
- Smart Meter: State of the art for the prosumer of the Smart Grid
- Smartcards as a key technology for industrial embedded devices


Nils Tekampe, Product Manager; Markus Bartsch, Business Development (speaker), TUV Informationstechnik, Germany
NFC identity for mobile services Bullet Points:
- Why identity is the cornerstone of mobile services
- Identity for payment in an NFC context
- Identity for cloud computing in a smartphone environment

Pascal Urien, Professor at Telecom ParisTech and Founder of the EtherTrust company, France
2.30pm – 3.00pm
Java Card as a Privacy Enhancing Technology for Smart Meters Bullet Points:
- Status of the UK project to roll out smart meters to all 25 million UK households
- Using Java Card local processing in smart meters and home hubs to solve the smart meter privacy problem
- Dynamically and securely deploying telecare and metering software

Charles Palmer, Project Manager of “Project Hydra”, Acute Technology
COPRIM: Contactless privacy manager Bullet Points:
- Threats to the privacy of NFC users
- Technical solutions
- Sociological survey

Louis Goubin, Professor; Malika Izabachene, PhD – PRiSM Laboratory, Versailles St Quentin en Yvelines University; Olivier Lavoisy, Engineer, PhD, PACTE lab , Pierre Mendes-France University and CNRS; Pierre-Henri Thevenon, PhD student, CEA LETI, France (co-presenter); Vincent Verneuil, Cryptology Engineer, Inside Secure, France (co-presenter)
3.00pm – 3.30pm A holistic approach to protecting "Smart Grid" infrastructures
Laurent Sustek, Product Marketing Manager, Inside Secure, France
The case for more opacity – The open protocol for access control, identification and ticketing with privacy Bullet Points:
- A new set of contactless protocol, more secure and privacy aware
- Have convergence fully secure use cases with privacy protection over the contactless interface
- OPACITY is standard, free, and open source

Philip Hoyer, Director Strategic Solutions (speaker); Eric Le Saint Senior Director of Research IP and Security, ACTIVIDENTITY, UK
3.30pm – 4.15pm: Coffee & Refreshments Break – Free Exhibition & Live demos every afternoon, 2.30-6.30 pm
  Smart Security Pre-Competitive Research Projects
 
 
Get new perspectives with these projects just out from the labs. They exploit smart cards abilities or investigate new possibilities for mobile services and logistics monitoring.
4.15pm – 4.45pm Security by contract for open multi-application smart cards Bullet Points:
- Open multi-application smart cards require a policy enforcement mechanism for evolution
- Security-by-Contract framework certifies applications at the loading time
- Each application provider’s policy is respected across updates

Olga Gadyatskaya, Post Doctoral Fellow University of Trento Italy (speaker), Fabio Massacci, University of Trento Italy – Boutheina Chetali and Quang-Huy Nguyen, Trusted Labs France
Simple approach to bring NFC compliance to metal foil-sealed blister packs Bullet Points:
- NFC allows useful smart functions on medical blister packages
- But standard transponders do not work metal foil sealed blister packages
- The solution to make the blister “NFC-compliant”

Gernot Schmid, Project Manager, EMC Division, Seibersdorf Laboratories, Austria           
4.45pm – 5.15pm The uService Platform for realizing the mobile super prosumer concept Bullet Points:
- uService Platform
- Identity Management and Security
- uRun Application Scenario
- Business Analysis

Carsten Rust, Senior R&D Project Manager, Morpho e-Documents Division, Germany
Connection of the SD cards to the NFC ecosystem Bullet Points:
- NFC applications in a mobile: technologies to support service providers?
- What is the best host for your application?
- What SD cards can offer for your services?
- How to make this complex ecosystem work?

Denis Praca, Standardization Technical Marketing Manager, Gemalto, France
5.15pm – 5.45pm Wireless Sensor Networks in Secure Logistics Monitoring Bullet Points:
- Description of the logistics scenario and the application of WSN in this scenario
- Broadcast authentication with µTESLA
- The achievement of time synchronisation of the nodes in the network

Katharina Schulz, Technology Consultant (speaker), Walter Hinz, Giesecke & Devrient, Germany
Java Card 3.0 Classic, GP Amendment C and the ETSI HCI API and how they enable NFC service from the SIM card Bullet Points:
- The work for the Java CardPlatform in GlobaPlatform and ETSI
- Taking full advantage of the NFC interface, the mobile phone as an application platform and the Java Card platform
- Developing dynamic and high secure card application.

Sebastian Hans, Principal Java Card Standards and Direction, Oracle, USA
5.45pm – 6.15pm Smart Card based secure management of digital items in the future internet Bullet Points:
- Concepts and objectives of the CONVERGENCE project
- The Versatile Digital Item
- The CONVERGENCE Token for secure management of versatile digital items

Carsten Rust, Senior R&D Project Manager, Morpho e-Documents Division, Germany
GlobalPlatform system messaging specification in action: Deploying mobile-NFC services Bullet Points:
- NFC Services deployment using GlobalPlatform System Messaging Specification
- Implementation in different contexts: TSM-centric, MNO-centric or SP-centric
- Deployment whatever the Secure Element and whatever the Device

Laurence Bringer,Technical Marketing Standardization and Technology Department, Gemalto, France

   Day 2 - Sept. 22  
DAY 2 – Thursday Sept. 22 – Morning

 
Trusted Execution Environments
Cryptology Breakthroughs
 
Moderator: Serge Chaumette, Professor, LaBRI University of Bordeaux, France

The TEE offers an interoperable solution for securing trusted applications on mobile devices. Best examples to achieving its full potential are presented here.

Latest advances of cryptography research are presented here through their application based on chaotic-based key stream, on leakage resilience and protocol-level resilience.
9.00am – 9.30am GlobalPlatform: Supporting the use of trusted execution environments Bullet Points:
- The necessity of a Trusted Execution Environment
- The unknown security risks of mobile devices
- GlobalPlatform’s proposed work in this area

Gil Bernabeu, GlobalPlatform Technical Director
Smart-Card Authentication Scheme Based on Cahotic Keystream Cipher Bullet Points:
- Smart-cards are powerful enough to accommodate different authentication schemes
- Chaotic-based key stream is implemented easily on smart-cards
- Chaotic-based key stream performance lies between AES and ZKP schemes

Rui Gustavo Crespo, Lecturer & Researcher (speaker); Jose Rafael Carvalho Researcher, Instituto Superior Tecnico DEEC, Technical University of Lisbon, Portugal
9.30am – 10.00am How to generate qualified electronic signatures with the German e-ID and a smart phone Bullet Points:
- Qualified electronic signatures with smart phones
- The Trusted Execution Environment technology
- The German Identity Card “neuer Personalausweis”

Gisela Meister, Head of Technology Consulting R&D, Standardisation Manager C-TO; Jan Eichholz, Technology Consultant – Giesecke & Devrient, Germany
Leakage Resilient Cryptography – A new approach to ensure embedded cryptosystems security Bullet Points:
- The advantage of the Leakage Resilient Cryptography and its limitation
- Application: First leakage resilient primitives
- Perspectives for Leakage Resilient Cryptosystem

Soline Renner, PhD Student at Institut Mathématiques Bordeaux, Security Engineer at Oberthur Technologies, France
10.00am – 10.30am How to create trust in an un-personalized system Bullet Points:
- De-personalization concept implies trusted fundamentals
- Secure boot is key enabler to start chain of security
- Unified personalization services are the key for device personalization after issuance

Laurent Sustek, Product Marketing Manager (speaker); Jean-Charles Lesage, Inside Secure, France
Cryptographic protocols resilient to physical level attacks Bullet Points:
- Resilience as a smart alternative to brutal resistance, against implementation-level attacks
- Proven schemes, relying on standardized cryptography, are readily available
- We introduce protocol-level resilience by algorithmic interaction, which eases contamination
- Uses for identification protocols, such as e-passport, provided the protocol is enhanced

Sylvain Guilley, Scientific Advisor, Secure IC, France
10.30am – 11.15am: Coffee & Refreshments Break – Networking – Exhibition
  Identity & Privacy Protection  
 
The utilization and protection of users’ digital identity online is an exciting challenge addressed here in a smart security approach.
11.15am – 11.45am The European Citizen Card – Promising Security Anchor for the world of mobile transaction
Helmut Scherzer, Group Vice President, C-TO Technology Management, Giesecke & Devrient, Germany
Presentation to be confirmed

11.45am – 12.15am
Privacy preservation and low cost authentication in federated identity management Bullet Points:
- Transparent and interoperable Identity Management platform
- This platform allows to access secure electronic services
- New non hierarchical “user” PKI 2.0 protocol is proposed allowing low-cost user registration
- A privacy middleware that has been developed enables privacy contract negotiations to guarantee privacy

Samia Bouzefrane, Associate Professor, CNAM (speaker); Pascal Thoniel, Chairman Executive & CTO, NTX Research; Maryline Laurent, Professor and Kheira Bekara, PhD Student, Telecom SudParis, France
Presentation to be confirmed

12.15am – 12.45am
Seamless fusion of online authentication and digital identity services using smart cards Bullet Points:
- What are the hurdles to replacing online password authentication with smart card based solutions?
- Drawbacks of existing smart card based solutions.
- Designing online authentication that is secure, yet simple to deploy and use
- How to combine strong online authentication with additional smart card security services?

Karen Lu, Principal Engineer, Gemalto USA
Presentation to be confirmed

 
Presentation to be confirmed
Presentation to be confirmed

12.45am – 2.00pm: Lunch – Networking – Exhibition

DAY 2 – Thursday Sept. 22 – Afternoon

  Advances on Java Card Embedded Security Platforms
 
Moderator: Christian Goire, Java Card Forum President

Review the possibilities of Java Card in light of the latest specifications and get fresh perspectives on the new ways to design, develop, deploy and integrate smart card applications.

Moderator: Pierre Paradinas, Chair of Embedded Systems, CNAM, France

This session addresses the latest advances that move forward the security of embedded platforms. See state-of-the-art in Physical Unclonable Functions and embedded PKI, innovative hardware implementation of cryptography.

2.00pm – 2.30pm Keynote
Java Card Perspectives
(to be confirmed) Bullet Points:
- The latest Java Card market data
- Why Java Card remains leading security element software platform
- Oracle’s strategic initiatives related to Java Card platform

Jean-Yves Bitterlich, Principal Java Card Engineering, New Technologies, Oracle USA
Security in embedded public key cryptography Bullet Points:
- Background on Embedded Public Key Cryptography
- Side Channel Attacks
- Fault Attacks
- Perspectives and Conclusion

Benoit Feix, Product Security Engineer, Inside Secure, France
2.30pm – 3.00pm How to build flexible multi-application e-ID documents with Java Card Bullet Points:
- Java Card can respond to challenges of e-ID documents frequent changes
- Approach combining applets for standardized MRTD and e-ID applications
- Benefits and drawbacks of this flexible and modular approach

Benjamin Drisch, Product Manager, cv cryptovision, Germany
Growing roots of trust from physical unclonable functions Bullet Points:
- Physical Unclonable function technology is reliable and mature
- PUFs provide a trust anchor for any type of embedded security application
- They enable secure boot, hardware-software binding, content protection, trusted platforms
- They are inherently noisy and thus also allow generating truly random numbers

Helena Handschuh, Chief Technology Officer, Intrinsic-ID, USA
3.00pm – 3.30pm OPAL: an open-source global platform Java Library which includes the remote application management over HTTP Bullet Points:
- State of art of Smart Card management tools
- OPAL features
- SCP authenticate protocols and OPAL

Bkakria Anis, CRYPTIS Master degree student (speaker); Jean-Louis Lanet, Professor, Leader of the Smart Secure Device Team, Labs XLIM, University of Limoges, France
Enhancing secure access modules with physical unclonable functions Bullet Points:
- Be aware of state-of-the-art in Physical Unclonable Functions
- Learn how to enhance Secure Access Module security
- See an innovative approach to device authentication and dedicated protocol
- Understand applications and trends within Smart Card & PUF interaction

Claude Barral, Biometrics and Security Senior Scientist, Technology & Innovation, Security Labs, Gemalto, France
3.30pm – 4.15pm: Coffee & Refreshments Break – Free Exhibition & Live demos every afternoon, 2.30-6.30 pm
  Java Card Security
 
Java Card platform exploration continues here through innovative secure applications and security assessment.
4.15pm – 4.45pm Embedding Java Cards to secure communications and manage identities in a UAVnet (network of drones) Bullet Points:
- Secured fleets of mobile terminals
- Embedding a Java Card in a UAV (Drone)
- Distributed identity management

Serge Chaumette, Professor, Rémi Laplace, PhD Student, LaBRI, University of Bordeaux
Embedded UICC challenges and standardization status Bullet Points:
- Remote provisioning: the history
- Remote provisioning: the solutions
- Embedded SIM: the latest news from standard
- New opportunities or jump into the unknown?

Denis Praca, Standardization Technical Marketing Manager, Gemalto, France
4.45pm – 5.15pm Application replay attack on Java Card 3 – When the garbage collector gets confused Bullet Points:
- The Case of Orphan Objects on Java Card 3 Connected Edition
- Fault-Injection-Based Reference Prediction and Forgery.
- When the Garbage Collector Gets Confused: Preventing Object Deletion

Guillaume Barbu, PhD Student at Telecom Paris Tech, Innovation Group at Oberthur Technologies, France
Low power solutions for cryptography and security Bullet Points:
- Scalable, flexible and portable IP core design can lead to high performance and low power solutions
- Smart engine IP cores provide cost effective and easy-to-use functionalities with 100% CPU offload

Thierry Pauwels, Marketing & Sales support, IP products, Barco Silex, Belgium – Philippe Lorent, IP security product manager, Barco Silex, Belgium
5.15pm – 5.45pm JCSecure, for testing secure applet isolation Bullet Points:
- The need for high secure Java Card platforms for mobile payment
- Identify how the security of a Java Card/GP platform should be tested
- Demonstrate some interesting test cases against relevant security threats

Harko Robroch, Managing Director (speaker); Cees Bart Breunesse, Senior Security Analyst, Riscure, The Netherlands
FPGA Based Fast RSA Crypto module Bullet Points:
- Parallism through multiplication partition
- Pipelined FPGA – DSP architecture for RSA
- RSA 1024 bit signature generation time ~ 3.66 milliseconds on Xilinx FPGA
- Best of class in comparison to commercial RSA IP cores

Arijit Kumar Bose, Associate Scientist (speaker); Fernando Alvarez, Chief Architect, Mallikarjun Kande, Sanjeev Koul, Scientist, ABB, India
5.45pm – 6.15pm Automatic generation of vulnerability test suite for the Java Card verifier n Bullet Points:
- Verifying the Java byte code verifier
- Methodology to generate test cases
- Use of a formal model to generate faulty CAP file

Aymerick Savary, Marc Frappier, University of Sherbrooke Canada; Jean-Louis Lanet, Univ of Limoges, France

Secure Elements in Embedded Systems as Ubiquitous Hardware Trust Anchors
Prof. Georg Sigl, Technical University of Munich, Germany
8.00pm: Social Event – Gala Dinner (Secure your seat now, limited availabilities)

   Day 3 - Sept. 23   
DAY 3 – Friday Sept. 23 – Morning only

  Security Assurance & Certification: Methods & Schemes
  Along with analyses of attacks on smart cards and embedded systems in their complexity and variety, this session provides various levels of methods and schemes to counter them. It also explores certification processes applied to mobile device platforms.
9.00am – 9.30am Analysis of attacks on smart card chip active shields Bullet Points:
- Physical attacks on smart-card chip active shields
- Using voltage contrast to map active shield routing
- Using FIB to open active shields for probing attack
- Using backscatter electrons to detect tungsten plugs used in layer interconnects

John Walker, Principal Consultant, SiVenture a division of NDS Ltd, Uk
9.30am – 10.00am Test vehicle for smart cards attacks Bullet Points:
- Unify ITSEF competencies
- Assessment tool to evaluate security laboratories
- State of the art in the field of smart card attacks

Corentin Boe, Security Evaluator, Trusted Labs, France
10.00am – 10.30am Is Side Channel Attack a Regression? Bullet Points:
- New Side Channel Attack.
- On Attack Improvement
- Attack Demonstration
- Conclusion and perspectives

Emmanuel Prouff, Manager of the Security Research Activities (speaker); Julien Doget, Oberthur Technologies, France
10.30am – 11.00am: Coffee & Refreshments Break – Networking – Exhibition
11.00am – 11.30am Side channel and fault attacks on embedded systems Bullet Points:
- Judge the impact of side channel and fault attacks on embedded systems
- Understand differences of these attacks on smart cards vs. embedded systems
- Identify emerging threats and developments from these attacks on embedded systems
- Demonstrate specifics of applying side channel and fault attacks on embedded systems

Job de Haas, Director Embedded Technology, Riscure, The Netherlands
11.30am – 12.00am Simulating Physical Attacks in Smart Card C Codes: The Jump Attack Case Bullet Points:
- Is it possible to simulate physical attacks at software level?
- The jump attack case: the goto simulation
- Comparison of attacks against assembly code/binaries and high level attacks
- Application to vulnerable function identification

Xavier Kauffmann, Research Engineer, Oberthur Technologies, France
12.00m – 12.30am What type of certification to use for mobile devices security Bullet Points:
- Why is security certification important? Only to gain trust?
- Components of a mobile to be certified
- What approach to use in security certification of the components?

Christian Damour, Security Business Manager, FIME, France


Move the mouse over the symbol to view the Bullet Points of a presentation in the detailed program


Institutional Founding
Partner
 
 
Strategic Sponsor
 
 
Gold Sponsor
 
 
Silver Sponsors
 
 
Badge Sponsor
 
 
Institutional Partners
 
Editorial Partner
 
 
Media Partners