Eduard de Jong

How the King returns: A digital future for cash

<self published>, 2024

Electronic cash (e-cash) is a form of money with all the features of traditional cash including p... more Electronic cash (e-cash) is a form of money with all the features of traditional cash including privacy protection, immediate settlement and no fees. E-cash can be deployed as CBDC enabling identity-free payments of any amount by anone to anyone at any timem and anywhere, face to face or online. Citizens, businesses, banks and government agencies store e-cash in dedicated IT devices with scalable levels of physical security. Aggregating Receipt Tokens (ART) technology, presented here, enables an e-cash system that provides society with a highly scalable, very resilient payment infrastructure with fully decentralised, secure digital payments with payer anonymity while enforcing AML with strong protection of payee privacy. This infrastructure consists of two principal components i) an electronic purse (e-purse) as a digital bearer payment instrument to store, pay and receive e-cash and ii) an issuer as the provider of e-cash liquidity as a type of money fully integrated in a monetary system and the guarantor of its value and security. The IT architecture presented here can realise a continental-scale e-cash system to enable a cash-like, digital economy.

Download

Towards testability in smart card operating system design

Smart Card Research and Advanced Application Conference, Oct 1, 1994

... respectively. The IP Open command is parameterised with the names of the CSA and the CTA to b... more

Visualising the structure of an IC-card security architecture

ABSTRACT

Methods and apparatus for deployment of high integrity software using static procedure return addresses

Structuring and Visualising an IC-card Security Standard

Smart Card Research and Advanced Application Conference, Sep 1, 1996

The standard way of visualising protocols using pictures with boxes and arrows is insu cient to s... more The standard way of visualising protocols using pictures with boxes and arrows is insu cient to study the protocols in detail. The problem is that the structuring of the protocols relies on elements not explicit in the usual visual rendering. To solve the problem one should visualise not only the operations and the messages but also the state and the security. This paper presents a system which can be used to visualise a protocol, and is applied to some of the protocols in the load purse transaction of the CEN Inter-sector electronic purse draft standard as an example. The resulting conformant prototype provides abstract and concrete views on the system at all signi cant levels. The prototype supports animation of the standard, giving the protocol designer feedback on design decisions.

Download

A Programming and a Modelling Perspective on the Evaluation of Java Card Implementations

Lecture Notes in Computer Science, 2001

Download

Java Card†: An analysis of the most successful smart card operating system to date

CTIT technical report series, Oct 1, 2005

To explain why the Java Card operating system has become the most successful smart card operating... more To explain why the Java Card operating system has become the most successful smart card operating system to date, we analyze the realized features of the current Java Card version, we argue it could be enhanced by adding a number of intended features and we discuss a set of complementary features that have been suggested. No technology can be successful without the right people and the right circumstances, so we provide some insights in the personal and historical historic aspects of the success of Java Card † Sun, Sun Microsystems, the Sun logo, Java and Java Card are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries.

Download

Cash: The once and future king

self, 2023

It's time to bring order to digital money through the proper issuance of Central Bank Digital Cur... more It's time to bring order to digital money through the proper issuance of Central Bank Digital Currency (CBDC). While many financial services moved to the digital realm based on centralised account ledgers, there remains an unmet need for a cash-like, distributed, digital, bearer payment instrument. A hodgepodge of existing proprietary electronic cash (e-cash) products have shown this need can be met, but only in fragmented, disconnected walled gardens. Only a central bank can be the issuer of an e-cash instrument that brings the traditional benefits of cash to the digital world. Every economy in the world will benefit when its central bank issues a digital currency. To enable reaching this goal, I have developed a formal model for money as an information system. This model includes Cash as one form of distributed money. Based on this model I have developed aggregating token technology as an e-cash implementation to deliver the key benefits of physical cash to the digital world. It supports online and offline transactions that can be securely received with a software-only implementation. A money system based on this technology supports both monetary and security management. This aggregating token e-cash solution is the only technology that meets all of the key requirements for CBDC.

Download

Systems

Using formal methods to cultivate trust in smart card operating systems

Protection de la confidentialite renforcee lors de l'identification dans un reseau de transmission de donnees

L'invention concerne un procede permettant de renforcer la protection de la confidentialite l... more L'invention concerne un procede permettant de renforcer la protection de la confidentialite lors de l'identification dans un reseau de transmission de donnees. Ce procede consiste a s'inscrire a un service sur le reseau de transmission de donnees; a recevoir un identifiant aleatoire (ID) en reponse a l'inscription; a stocker l'identifiant aleatoire, puis a l'utiliser pour obtenir des services sur le reseau de transmission de donnees. L'invention concerne egalement un dispositif permettant d'obtenir un service sur un reseau de transmission de donnees; lequel dispositif comprend une autorite d'inscription configuree pour accepter une demande d'inscription et pour renvoyer les resultats de l'inscription en reponse a la demande d'inscription. Les resultats d'inscription contiennent les donnees utilisateur; ces resultats d'inscription peuvent etre utilises pour obtenir un service chez un prestataire de services.

Smart cards and card operating systemsPieter

The operating system of an IC card should provide an appropriate interface to applications using ... more The operating system of an IC card should provide an appropriate interface to applications using IC cards. An incorrect choice of operations and data renders the card inefcient and cumbersome. The design principles of the UNIX operating system are most appropriate for IC card operating system design. The actual design that we recognise as UNIX (or any other current operating system for that matter) is not appropriate for IC cards.

Java Card: An analysis of the most successful smart card operating system to date

To explain why the Java Card operating system has become the most successful smart card operating... more To explain why the Java Card operating system has become the most successful smart card operating system to date, we analyze the realized features of the current Java Card version, we argue it could be enhanced by adding a number of intended features and we discuss a set of complementary features that have been suggested. No technology can be successful without the right people and the right circumstances, so we provide some insights in the personal and historical historic aspects of the success of Java Card † Sun, Sun Microsystems, the Sun logo, Java and Java Card are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries.

Download

ElectronIc Money: From cryptography and smart cards to BItcoIn and beyond

Fraunhofer Smart Card Workshop, 2017

This paper describes the emergence of electronic money since the early nineteen-nineties from the... more This paper describes the emergence of electronic money since the early nineteen-nineties from the perspective of one of the people involved in the early stages in its development. It presents never before published details of the first version of an electronic money system implemented in 1990 by DigiCash. It also describes a number of other electronic money systems created later.

Download

Transacted Memory for Smart Cards

Lecture Notes in Computer Science, 2001

Download

Techniques for implementing security on a small footprint device using a context barrier

Using formal methods to cultivate trust in smart card operating systems

To be widely accepted, smart cards must contain completely trustworthy software. Because smart ca... more To be widely accepted, smart cards must contain completely trustworthy software. Because smart cards contain relatively simple computers, and are used only for a specific class of applications, it is feasible to make the language used to program the software components focused and tiny. Formal methods can be used to precisely specify this language and to reason about properties of the language, which results in more trustworthy software. We explore this process by specifying the core of a proprietary systems programming language for smart card operating systems. We show how the specification obtained is used in proofs, and in the development of tool support.

Download

A Java Reference Model of Transacted Memory for

Transacted Memory o#ers persistence, undoability and auditing. We present a Java/JML Reference Mo... more Transacted Memory o#ers persistence, undoability and auditing. We present a Java/JML Reference Model of the Transacted Memory system on the basis of our earlier separate Z model and C implementation. We conclude that Java/JML combines the advantages of a high level specification in the JML part (based on our Z model), with a detailed implementation in the Java part (based on our C implementation).

A Java Reference Model of Transacted Memory for Smart Cards

Transacted Memory offers persistence, undoability and auditing. We present a Java/JML Reference M... more Transacted Memory offers persistence, undoability and auditing. We present a Java/JML Reference Model of the Transacted Memory system on the basis of our earlier separate Z model and C implementation. We conclude that Java/JML combines the advantages of a high level specification in the JML part (based on our Z model), with a detailed implementation in the Java part (based on our C implementation).

Download

Provisioning for digital content access control

A Java Reference Model of Transacted Memory for Smart Cards

Permission is granted for noncommercial reproduction of the work for educational or research purp... more

Download

Uploads

Papers by Eduard de Jong

Log In