Design of Objects Sharing Mechanism with Security Domain in Java Smart Card

This paper presents a medium attack to current shareable interface object mechanism. This method can invoke the shareable interface service functions without triggering the security checks in the Applet. Then a trust model is used to clarify the relationship of the inter-Applet shareable objects. According to the constraint of trust transfer we infer that a global security policy of card is necessary to prevent the unauthorized information flow in addition to the Applet level access controls. Finally we design an implementation of the global security mechanism based on the security domain in the card.