CSCIP Body of Knowledge

Smart Card Fundamentals

• Basic smart card components, structure, functions
• IC types (memory, protected memory, microcontroller, RF)
• Card design and card body
• Formats (card, USB token, SIM, embedded, other)
• Communications interfaces (contact, contactless, dual interface)
• Memory size and types
• Operating systems (native, Java, Multos, other)
• Smart card system design features
• Manufacturing process
• Readers (POS, PC, access control)
• Relevant smart card standards
• Smart cards and biometrics
• Specifications

Security

• Certifications (FIPS, Common Criteria)
• IC level (anti-tampering, masking)
• Card edge interface
• Encryption algorithms
• Security at system level
• Physical
• Logical

Smart Card Application and Data Management

• Single application cards
• Multi-application cards
• Chip initialization
• Key management (symmetric, asymmetric)
• Issuance
• Card life cycle management
• Relevant standards

Smart Card Usage Models: Mobile and Near Field Communication

• Smart card drivers and benefits
• SIMs
• UICCs
• Near Field Communication
• Sample smart card mobile and subscriber models

Smart Card Usage Models: Identity and Security

• Smart card drivers and benefits
• Identity cards and tokens
• ePassports
• Physical/logical access
• Smart cards and biometrics
• Smart cards and digital certificates
• Sample smart card identity and security models
• Relevant standards
• Identity and security application examples
• Privacy

Smart Card Usage Models: Payments and Financial Transactions

• Smart card drivers and benefits
• Bank cards (credit, debit, prepaid, ATM)
• EMV credit/debit payment
• Contactless payments
• Mobile/NFC payments
• Secure remote transactions for online banking/retail e-commerce
• E-purse, stored value cards (open and closed loop)
• Transit payment
• Parking payment
• Sample smart card payment models
• Relevant standards

Other Topics: Technology Comparison and Implementation Considerations

• Contactless smart cards vs. RFID
• Other card technologies
• Project management considerations