(SC)²: A System to Secure Off-Card Contract-Policy Matching in Security-by-Contract for Open Multi-application Smart Cards

The Security-by-Contract (S×C) framework has recently been proposed to support software evolution in open multi-application smart cards. The key idea lies in the notion of contract, a specification of the security behavior of an application that must be compliant with the security policy of the smart card hosting the application. In this demonstration we show (SC)² (Secure Communication over Smart Cards), a system developed to address a key issue of the S×C framework, namely the secure outsourcing of the S×C contract-policy matching service to a Trusted Third Party (TTP). (SC)² secures the communication between a smart card and the TTP that provides the S×C matching service.