如何使用 java 或 java Applet 以编程方式加载 Java 卡小程序（.cap 文件）

Posted

技术标签:

【中文标题】如何使用 java 或 java Applet 以编程方式加载 Java 卡小程序（.cap 文件）【英文标题】：How to programmatically load a Java card applet ( .cap file ) using java or java Applet 【发布时间】：2015-11-20 14:26:55 【问题描述】：

。

I'm trying to install an applet (.cap file) into a smart card. I read that can be done using APDU. I created my applet using Netbeans.

我已经使用 Netbeans 为我的小程序创建了一个 .CAP 文件，现在我想将其安装/加载到物理智能卡中。我将不胜感激有关如何或使用什么工具将 .CAP 文件安装到卡上的帮助。另外，我还需要在卡中安装什么。 我有两个设备 HID OMNIKEY CARDMAN 5x21 1 和 HID OMNIKEY CARDMAN 3x21 0 java 智能卡读卡器，还有两种卡，如 java 卡（J2A.. 或 J3A..）和基本卡（ZC..） 注意：我不想使用任何第三方软件或工具 我的小程序代码是： 包装智能卡； 导入 javacard.framework.*;

/** * * @作者帕蒂达 */ 公共类 SmartCard 扩展 Applet 

/**
 * Installs this applet.
 * 
 * @param bArray
 *            the array containing installation parameters
 * @param bOffset
 *            the starting offset in bArray
 * @param bLength
 *            the length in bytes of the parameter data in bArray
 */
/**
 * Only this class's install method should create the applet object.
 */
protected SmartCard() 
    register();

/**
 * Processes an incoming APDU.
 * 
 * @see APDU
 * @param apdu
 *            the incoming APDU
 */
/* constants declaration */
// code of CLA byte in the command APDU header
final static byte Wallet_CLA =(byte)0x80;
// codes of INS byte in the command APDU header
final static byte VERIFY = (byte) 0x20;
final static byte CREDIT = (byte) 0x30;
final static byte DEBIT = (byte) 0x40;
final static byte GET_BALANCE = (byte) 0x50;
// maximum balance
final static short MAX_BALANCE = 0x7FFF;
// maximum transaction amount
final static byte MAX_TRANSACTION_AMOUNT = 127;

// maximum number of incorrect tries before the
// PIN is blocked
final static byte PIN_TRY_LIMIT =(byte)0x03;
// maximum size PIN
final static byte MAX_PIN_SIZE =(byte)0x08;

// signal that the PIN verification failed
final static short SW_VERIFICATION_FAILED =
0x6300;
// signal the the PIN validation is required
// for a credit or a debit transaction
final static short SW_PIN_VERIFICATION_REQUIRED =
                                        0x6301;
// signal invalid transaction amount
// amount > MAX_TRANSACTION_AMOUNT or amount < 0
final static short SW_INVALID_TRANSACTION_AMOUNT = 0x6A83;

// signal that the balance exceed the maximum
final static short SW_EXCEED_MAXIMUM_BALANCE = 0x6A84;
// signal the the balance becomes negative
final static short SW_NEGATIVE_BALANCE = 0x6A85;

/* instance variables declaration */
OwnerPIN pin;
short balance;
private SmartCard (byte[] bArray,short bOffset,byte bLength) 
    // It is good programming practice to allocate
    // all the memory that an applet needs during
    // its lifetime inside the constructor
    pin = new OwnerPIN(PIN_TRY_LIMIT,   MAX_PIN_SIZE);

    byte iLen = bArray[bOffset]; // aid length
    bOffset = (short) (bOffset+iLen+1);
    byte cLen = bArray[bOffset]; // info length
    bOffset = (short) (bOffset+cLen+1);
    byte aLen = bArray[bOffset]; // applet data length

    // The installation parameters contain the PIN
    // initialization value
    pin.update(bArray, (short)(bOffset+1), aLen);
    register();

 // end of the constructor

public static void install(byte[] bArray, short bOffset, byte bLength) 
    // create a Wallet applet instance
    new SmartCard(bArray, bOffset, bLength);
 // end of install method

public boolean select() 

    // The applet declines to be selected
    // if the pin is blocked.
    if ( pin.getTriesRemaining() == 0 )
       return false;

    return true;

// end of select method

public void deselect() 

    // reset the pin value
    pin.reset();



public void process(APDU apdu) 

    // APDU object carries a byte array (buffer) to
    // transfer incoming and outgoing APDU header
    // and data bytes between card and CAD

    // At this point, only the first header bytes
    // [CLA, INS, P1, P2, P3] are available in
    // the APDU buffer.
    // The interface javacard.framework.ISO7816
    // declares constants to denote the offset of
    // these bytes in the APDU buffer

    byte[] buffer = apdu.getBuffer();
    // check SELECT APDU command

    if (apdu.isISOInterindustryCLA()) 
        if (buffer[ISO7816.OFFSET_INS] == (byte)(0xA4)) 
            return;
         else 
            ISOException.throwIt (ISO7816.SW_CLA_NOT_SUPPORTED);
        
    

    // verify the reset of commands have the
    // correct CLA byte, which specifies the
    // command structure
    if (buffer[ISO7816.OFFSET_CLA] != Wallet_CLA)
        ISOException.throwIt(ISO7816.SW_CLA_NOT_SUPPORTED);

    switch (buffer[ISO7816.OFFSET_INS]) 
    case GET_BALANCE:
        getBalance(apdu);
        return;
    case DEBIT:
        debit(apdu);
        return;
    case CREDIT:
        credit(apdu);
        return;
    case VERIFY:
        verify(apdu);
        return;
    default:
        ISOException.throwIt(ISO7816.SW_INS_NOT_SUPPORTED);
    

   // end of process method

private void credit(APDU apdu) 

    // access authentication
    if ( ! pin.isValidated() )
        ISOException.throwIt(SW_PIN_VERIFICATION_REQUIRED);

    byte[] buffer = apdu.getBuffer();

    // Lc byte denotes the number of bytes in the
    // data field of the command APDU
    byte numBytes = buffer[ISO7816.OFFSET_LC];

    // indicate that this APDU has incoming data
    // and receive data starting from the offset
    // ISO7816.OFFSET_CDATA following the 5 header
    // bytes.
    byte byteRead =
        (byte)(apdu.setIncomingAndReceive());

    // it is an error if the number of data bytes
    // read does not match the number in Lc byte
    if ( ( numBytes != 1 ) || (byteRead != 1) )
        ISOException.throwIt(ISO7816.SW_WRONG_LENGTH);

    // get the credit amount
    byte creditAmount = buffer[ISO7816.OFFSET_CDATA];

    // check the credit amount
    if ( ( creditAmount > MAX_TRANSACTION_AMOUNT)
         || ( creditAmount < 0 ) )
        ISOException.throwIt(SW_INVALID_TRANSACTION_AMOUNT);

    // check the new balance
    if ( (short)( balance + creditAmount)  > MAX_BALANCE )
       ISOException.throwIt(SW_EXCEED_MAXIMUM_BALANCE);

    // credit the amount
    balance = (short)(balance + creditAmount);

 // end of deposit method

private void debit(APDU apdu) 

    // access authentication
    if ( ! pin.isValidated() )
        ISOException.throwIt(SW_PIN_VERIFICATION_REQUIRED);

    byte[] buffer = apdu.getBuffer();

    byte numBytes =
        (byte)(buffer[ISO7816.OFFSET_LC]);

    byte byteRead =
        (byte)(apdu.setIncomingAndReceive());

    if ( ( numBytes != 1 ) || (byteRead != 1) )
       ISOException.throwIt(ISO7816.SW_WRONG_LENGTH);

    // get debit amount
    byte debitAmount = buffer[ISO7816.OFFSET_CDATA];

    // check debit amount
    if ( ( debitAmount > MAX_TRANSACTION_AMOUNT)
         ||  ( debitAmount < 0 ) )
       ISOException.throwIt(SW_INVALID_TRANSACTION_AMOUNT);

    // check the new balance
    if ( (short)( balance - debitAmount ) < (short)0 )
         ISOException.throwIt(SW_NEGATIVE_BALANCE);

    balance = (short) (balance - debitAmount);

 // end of debit method

private void getBalance(APDU apdu) 

    byte[] buffer = apdu.getBuffer();

    // inform system that the applet has finished
    // processing the command and the system should
    // now prepare to construct a response APDU
    // which contains data field
    short le = apdu.setOutgoing();

    if ( le < 2 )
       ISOException.throwIt(ISO7816.SW_WRONG_LENGTH);

    //informs the CAD the actual number of bytes
    //returned
    apdu.setOutgoingLength((byte)2);

    // move the balance data into the APDU buffer
    // starting at the offset 0
    buffer[0] = (byte)(balance >> 8);
    buffer[1] = (byte)(balance & 0xFF);

    // send the 2-byte balance at the offset
    // 0 in the apdu buffer
    apdu.sendBytes((short)0, (short)2);

 // end of getBalance method

private void verify(APDU apdu) 

    byte[] buffer = apdu.getBuffer();
    // retrieve the PIN data for validation.
    byte byteRead = (byte)(apdu.setIncomingAndReceive());

    // check pin
    // the PIN data is read into the APDU buffer
    // at the offset ISO7816.OFFSET_CDATA
    // the PIN data length = byteRead
    if ( pin.check(buffer, ISO7816.OFFSET_CDATA,
        byteRead) == false )
        ISOException.throwIt(SW_VERIFICATION_FAILED);

 // end of validate method

// 智能卡类结束

有了这些信息，任何人都可以帮助我构建正确的 APDU 以将我的 cap 文件安装到真正的智能卡中吗？ 谢谢。

【问题讨论】：

【参考方案1】：

我也遇到了同样的问题，我找到了我将与您分享的解决方案。

请按照以下步骤操作：

1：请点击这里下载gp.exe

2：打开您的 Windows 命令提示符。

3：转到包含gp.exe 文件的location/directory。

4：现在将您的读卡器连接到机器并将卡插入读卡器。

5：比键入

cmd > gp.exe
cmd > gp –help

如果一切正常，您将看到那里列出的所有支持的命令：

一个 cmd &gt; gp –info 这将列出所有卡信息。

b cmd &gt; gp –list 这将列出卡中安装的所有小程序。

c: cmd &gt; gp –delete AID(of applet ) 这将删除已安装的小程序。

d: cmd &gt; gp –install xyz.cap（将.cap文件复制到gp.exe所在的同一目录中并选择xyz.cap） 这会将您的小程序安装到物理智能卡上。

现在您需要 APDU 命令与卡进行通信。

【讨论】：

感谢 Jariya S 对我的帮助非常充分。再次感谢 干得好伙计

以上是关于如何使用 java 或 java Applet 以编程方式加载 Java 卡小程序（.cap 文件）的主要内容，如果未能解决你的问题，请参考以下文章

java卡的简介

Java applet使用智能卡实现数字签名

如何使用 Java Access Bridge 自动化 Java Applet？

将Applet应用程序迁移到Java 11

如何在IE11运行Java小程序（Applet）

JAVA中的applet是啥?