Java Card Tabanlı Platform Bağımsız Mobil İmzalama Sistemi

Öz

Günümüzde dijital varlıkların korunması ve güvenli işlemlerin gerçekleştirilmesi, donanımsal güvenliğe sahip, esnek ve taşınabilir çözümlere duyulan ihtiyacı artırmaktadır. Bu çalışmada, Java Card üzerinde çalışan ve mobil cihazlarla NFC aracılığıyla etkileşim kuran güvenli bir dijital imzalama sistemi sunulmaktadır. Sistem, NDEF mesajlarını ayrıştıran bir kontrol bileşeni ve kriptografik işlemleri donanım üzerinde yürüten kripto işlemci bileşeni olmak üzere iki katmanlı bir mimariye sahiptir. NDEF tabanlı iletişim altyapısı, sürücü gerektirmeden çalışmaya olanak tanımakta ve platformlar arası taşınabilirliği desteklemektedir. React Native ile geliştirilen istemci uygulaması sayesinde sistemin Android ve iOS ortamlarında sorunsuz çalıştığı doğrulanmıştır. Sunulan mimari, açık standartlara dayalı, donanımsal güvenlik özellikleriyle uyumlu dijital imzalama senaryoları için uygulanabilir bir referans çözüm niteliği taşımaktadır.

Anahtar Kelimeler

• Java Card
• Dijital İmza
• NFC Tabanlı İletişim
• Güvenli Donanım Birimi
• Platformlar Arası Güvenlik

Java Card-Based Platform-Independent Mobile Signing System

Öz

Secure digital signature mechanisms that combine hardware-level protection with mobile accessibility are essential for modern applications requiring the protection of sensitive assets. This paper presents a Java Card-based signing architecture that enables driverless and platform-independent communication with mobile devices via NFC. The system follows a layered design consisting of a control component that parses NDEF messages and a cryptographic processor component that executes core ECC-based operations on secure hardware. Cross-platform functionality is ensured through a React Native client application, with verified support on both Android and iOS devices. Relying on open standards communication protocols, the proposed architecture serves as a practical reference for mobile-compatible, secure digital signing solutions with strong portability and usability characteristics.

Anahtar Kelimeler

• Java Card
• Digital Signature
• NFC Communication
• Secure Element
• Cross-Platform Security

Kaynakça

1. Ledger SAS, “Ledger Nano X Security Target,” ANSSI, Security Target, 2023. Available: https://cyber.gouv.fr/sites/default/files/document_type/ANSSI-cible-CSPN-2023_17en.pdf
2. C. Christen and M. Lafon, “Why Secure Elements Make a Crucial Difference to Hardware Wallet Security,” Ledger Donjon, Tech. Rep., 2025.
3. Oracle Corporation, “Java Card Platform Security – Technical White Paper,” Oracle Corporation, 2001. Available: https://www.oracle.com/a/otn/docs/java/javacardsecuritywhitepaper-149957.pdf
4. H. Rezaeighaleh, “Improving Security of Crypto Wallets in Blockchain Technologies,” Ph.D. dissertation, Dept. of Computer Science, Univ. of Central Florida, Orlando, FL, 2020.
5. S. Suratkar, M. Shirole, and S. Bhirud, “Cryptocurrency Wallet: A Review,” in Proc. 2020 4th Int. Conf. Computer, Communication and Signal Processing (ICCCSP), Chennai, India, 2020, pp. 1–7.
6. H. Rezaeighaleh and C. C. Zou, “New Secure Approach to Backup Cryptocurrency Wallets,” in Proc. 2019 IEEE Global Communications Conf. (GLOBECOM), Waikoloa, HI, USA, 2019, pp. 1–6.
7. D. Bamert, C. Decker, R. Wattenhofer, and S. Welten, “BlueWallet: The Secure Bitcoin Wallet,” in Proceedings of the 3rd IEEE International Conference on Mobile Secure Systems, 2020.
8. M. Popchev, I. Mirchev, and T. Stoyanova, “Towards Blockchain Wallets Classification and Implementation,” in Proceedings of the 17th International Conference on Computer Science and Education in Computer Science (CSECS), 2023.

9. S. Houy, P. Schmid, and A. Bartel, “Security aspects of cryptocurrency wallets—A systematic literature review,” ACM Computing Surveys, vol. 56, no. 1, pp. 1–31, 2023.
10. I. Homoliak and M. Perešíni, “SoK: Cryptocurrency Wallets–A Security Review and Classification Based on Authentication Factors,” in Proc. 2024 IEEE Int. Conf. Blockchain and Cryptocurrency (ICBC), Dubai, UAE, 2024, pp. 1–8.
11. M. Elo and J. Nikander, “Decentralized Authorization with ECDSA on a Java Smart Card,” Helsinki Univ. of Technology, Telecommunications Software and Multimedia Laboratory, Tech. Rep. TML-C5, 2000.
12. N. Sejfuli-Ramadani, F. Idrizi, V. Angelkoska, and A. Risteski, “A comparative analysis of offline wallets and their integration with NFC for practical offline payments,” J. Nat. Sci. Math. UT, vol. 9, no. 17–18, pp. 354–360, 2024.
13. N. Lehto, K. Halunen, O.-M. Latvala, A. Karinsalo, and J. Salonen, “CryptoVault–A Secure Hardware Wallet for Decentralized Key Management,” in Proc. 2021 IEEE Int. Conf. Omni-Layer Intelligent Systems (COINS), Barcelona, Spain, 2021, pp. 1–4.
14. P. Urien, “Crypto Terminal: A New Open Device for Securing Blockchain Wallets,” in Proc. 2020 IEEE Int. Conf. Blockchain and Cryptocurrency (ICBC), Toronto, Canada, 2020, pp. 1–3.
15. H. Rezaeighaleh and C. C. Zou, “Deterministic Sub-Wallet for Cryptocurrencies,” in Proc. 2019 IEEE Int. Conf. Blockchain (Blockchain), Atlanta, GA, USA, 2019, pp. 419–424.
16. N. Duif, Smart card implementation of a digital signature scheme for Twisted Edwards curves, M.S. thesis, Dept. of Mathematics and Computer Science, Technische Universiteit Eindhoven, Eindhoven, Netherlands, 2011.
17. A. Tanrıkulu, H. Yüce, and E. Ölçer, “Blokzincir Tabanlı Donanımsal Cüzdan ve Akıllı Kartlar,” Afyon Kocatepe Üniversitesi Uluslararası Mühendislik Teknolojileri ve Uygulamalı Bilimler Dergisi, vol. 4, no. 1, pp. 37–48, 2021.
18. R. V. Fritsche, L. M. Palma, and J. E. Martina, “Recommendations for Implementing a Bitcoin Wallet Using Smart Card,” Tech. Rep., Dept. of Informatics and Statistics, Federal University of Santa Catarina (UFSC), Florianópolis, Brazil, 2020.
19. NFC Forum, “NFC Forum Type 4 Tag Operation Specification,” NFC Forum, Inc., Technical Specification, 2021. Available: https://nfc-forum.org/build/specifications/type-4-tag-specification
20. NFC Forum, “NFC Data Exchange Format (NDEF) Technical Specification,” NFC Forum, Inc., Technical Specification, 2020. Available: https://nfc-forum.org/build/specifications/data-exchange-format-ndef-technical-specification/
21. D. J. Bernstein, N. Duif, T. Lange, P. Schwabe, and B.-Y. Yang, “High-Speed High-Security Signatures,” J. Cryptographic Eng., vol. 2, no. 2, pp. 77–89, 2012.
22. Oracle Corporation, “Java Card 3 Platform: Version 3.0.5 Classic Edition – Specification,” Oracle Corporation, Technical Specification, 2019. Available: https://docs.oracle.com/en/java/javacard/3.0.5/index.html
23. NXP Semiconductors, “P71D321 Secure Element for eID and Mobile ID,” NXP Semiconductors, Fact Sheet, 2022. Available: https://www.nxp.com/docs/en/fact-sheet/P71D321.pdf
24. NXP Semiconductors, “JCOP 4 Secure Identification Platform,” NXP Semiconductors, Tech. Rep., 2020. Available: https://www.nxp.com/docs/en/brochure/JCOP4SECIDAPPA4.pdf