MULTOS: Certified Security OS
CrypToken M2048 with MULTOS, the Security Smart Card Operating System
MULTOS is the first, open, high security, multi-application operating system for smart cards. The beauty of this system is that diverse parties can develop applications that run on the same card and they all co-reside both independently and securely.
Furthermore MULTOS allows to add applications in the field over unsecure channels, utilizing the PKI of the MULTOS scheme. Any modification of the card requires an appropriate certificate. The loading process guarantees data integrity, authenticity and confidentiality.
This is beneficial for both, the cardholder and the card issuer.
How is this high security level achieved?
The security of MULTOS is ensured by a requirement in the MULTOS implementation license. All MULTOS silicon providers have to undergo a rigorous testing and evaluation process to prove interoperability, security and tamper resistance. No other available smart card platform can claim a similar level of security.
MULTOS applications run on a virtual machine. Therefore MULTOS provides a platform independent way to develop applications. Commonly used chips are manufactured by Infineon, Hitachi and Samsung. The virtual machine guarantees that an application developed on one card can be deployed on another.
A system of memory firewalls ensures that applications cannot access data without proper authorization. Card issuers and application providers establish their trust relation through certificates. Application providers can rely on MULTOS that no application can tamper with code of another application.
MULTOS meets the industry standards ISO 7816 and EMV2000.
PDF document 138 kB