<P><FONT SIZE="+1"><B>M</B></FONT></P>
<DL>
<DD><B>MACs (message authentication codes), 215, 327</B>
<DD><B>magnetic stripe cards, distribution state, 39-40</B>
<DD><B>Make Debit command, 265</B>
<DD><B>Manage Channel command (ISO/IEC 7816-4), 75, 80, 287-288</B>
<DD><B>Management utility, 242-247</B>
<DD><B>manufacturers</B>
<DL>
<DD>chips, 136
<DD>compilers, 137
<DD>debuggers, 138-139
<DD>emulators, 140
<DD>simulators, 138-139
<DD>smart card operating systems, 141
<DD>software
<DL>
<DD>operating systems, 141
<DD>tools, 142-143
</DL>
<DD>testers, 140
</DL>
<DD><B>MAOS (multiapplication operating system), 327</B>
<DD><B>masks, 327</B>
<DL>
<DD>developing, 30
<DD>soft, 31, 331
</DL>
<DD><B>master file, 327</B>
<DL>
<DD>characteristics, 73
<DD>file controls, 86-87
</DL>
<DD><B>MasterCard email address, 147</B>
<DD><B>MD5 algorithm, 215</B>
<DD><B>memory, 15</B>
<DL>
<DD>cards, 5, 327
<DL>
<DD>circuitry, 22
<DD>integrated circuit chips, 23
</DL>
<DD>chipcards, 327
<DD>EEPROM (electrically erasable programmable read-only memory), 25, 63
<DD>FLASH, 324
<DD>FRAM (ferroelectric memory), 324
<DD>NVM (nonvolatile memory), 15, 172-173, 328
<DD>RAM (random access memory), 16, 26, 172
<DD>ROM (read-only memory), 15, 25
<DL>
<DD>shelf life, 173-174
</DL>
<DD>smart cards, 25-26
<DD>software, 172-174
<DD>zeroization, 333
</DL>
<DD><B>merchants</B>
<DL>
<DD>cardholders, frequent buyer points, 241
<DD>directories, 231
<DD>files
<DL>
<DD>cumulative purchases, 233-234
<DD>external authentication, 232
<DD>frequent buyer points, 232-233
<DD>managing, 236-237
<DD>sizes, 234-235
<DD>want lists, 233-234
</DL>
<DD>Harvest Festival, 227-229
<DL>
<DD>application programs, 240
<DD>updating Smart Shopper cards, 241
</DL>
<DD>loyalty programs, 225-229, 231
<DD>purchasing programs, 227-229
<DD>Scrivener&#146;s Corner, 227-229, 240-242
<DD>Smart Shopper cards, 227-229
<DD>Web sites, 238
</DL>
<DD><B>message authentication codes, <I>see</I> MACs</B>
<DD><B>MF (master files), 327</B>
<DL>
<DD>characteristics, 73
<DD>file controls, 86-87
</DL>
<DD><B>MFC (multifunction card), 327</B>
<DD><B>microcontrollers, 135</B>
<DD><B>Microsoft CAPI (Cryptographic application programming interface), 147, 164</B>
<DD><B>MIP (million instructions per second), 327</B>
<DD><B>modules, 327</B>
<DD><B>Mondex, 147, 327</B>
<DD><B>monitors, FlexCash cards</B>
<DL>
<DD>commands, 252
<DD>implementing, 252-255
</DL>
<DD><B>Montgomery multiplication, 327-328</B>
<DD><B>Mor&#233;no, Roland, 328</B>
<DD><B>MoreTime function, 182</B>
<DD><B>mother cards, 91, 328</B>
<DD><B>MPCOS64K cards, 13</B>
<DD><B>Multiflex</B>
<DL>
<DD>cards, 13, 83-84
<DL>
<DD>ATR (answer to reset), 84
<DD>authentication states, 108-109
</DL>
<DD>commands
<DL>
<DD>Change PIN, 103-104, 292
<DD>Create File, 87, 98, 104, 293-294
<DD>Create Record, 104, 294-295
<DD>Decrease, 103-104, 295-297
<DD>Delete File, 104, 297-298
<DD>Directory, 86, 89
<DD>External Authentication, 98, 104, 298-299
<DD>fields, 291
<DD>Get Challenge, 104-105, 299-300
<DD>Get Response, 86-88, 90-92, 99, 103, 105, 300-301
<DD>Increase, 103, 105, 301-302
<DD>Internal Authentication, 105, 302-303
<DD>Invalidate, 87, 105, 304-305
<DD>protected-mode, 105-106
<DD>Read Binary, 92, 105, 305-306
<DD>Read Record, 102, 105, 306-307
<DD>Rehabilitate, 87, 105, 307-309
<DD>Seek, 105, 309-310
<DD>Select, 105
<DD>Select File, 85, 91, 310-311
<DD>Unblock PIN, 105, 311-312
<DD>Update Binary, 99-100, 105, 312-314
<DD>Update Record, 105, 314-315
<DD>Verify Key, 98, 105, 316-317
<DD>Verify PIN, 94, 100, 105, 315-316
</DL>
<DD>directories, 85-89
<DD>EEPROM, 111
<DD>files, 87-88, 95
<DL>
<DD>Seek, 100, 102
<DD>Seek instruction, 101
</DL>
<DD>hierarchical access control, 111
<DD>key files, 94-98
<DD>keys, 94-98
<DD>Not Found error, 102
<DD>NVM (nonvolatile memory), 111
<DD>personalizaton, 94
<DD>SCOS (Schlumberger Customer Oriented System), 182-183
<DD>Seek instruction, 101
<DD>serial number files, 90
<DD>stamped variants, 103
<DD>transport keys, 90
</DL>
<DD><B>MULTOS (Mondex), 328</B>
<DL>
<DD>application segregation, 183
<DD>licensed application developer, 184
<DD>Nick Habgood, 184
<DD>obtaining a copy, 156
<DD>URL (Uniform Resource Locator), 147
</DL>
</DL>
<P><FONT SIZE="+1"><B>N</B></FONT></P>
<DL>
<DD><B>NACCU (National Association of Campus Card Users), 328</B>
<DD><B>NAD byte, 67</B>
<DD><B>networks</B>
<DL>
<DD>applications, adding smart cards, 124-125
<DD>security, 208
</DL>
<DD><B>NIST (U.S. National Institute for Standards and Testing), 55</B>
<DD><B>non-stomic write, 175</B>
<DD><B>nonrepudiation, 204</B>
<DD><B>nonvolatile memory (NVM), <I>see</I> NVM</B>
<DD><B>Not Found error (Multiflex cards), 102</B>
<DD><B>NULL byte, 64-65</B>
<DD><B>NVM (nonvolatile memory), 15, 111, 328</B>
<DL>
<DD>data, overwriting, 175-176
<DD>programming
<DL>
<DD>card-side, 172-173
<DD>power loss, 175
</DL>
<DD>shelf life, 173
<DD>smart cards, adding code, 174
</DL>
</DL>
<P><FONT SIZE="+1"><B>O</B></FONT></P>
<DL>
<DD><B>OC100 cards, 13</B>
<DD><B>one-way hash code, 214-216</B>
<DD><B>Open Card Framework (IBM), 147, 157</B>
<DD><B>Open function, 151</B>
<DD><B>Open Group, 147</B>
<DD><B>Open Technology Platform, <I>see</I> OTP</B>
<DD><B>operating systems, 12-13</B>
<DL>
<DD>code, <I>see</I> code
<DD>manufacturers, 141
<DD>MULTOS, <I>see</I> MULTOS
</DL>
<DD><B>optical cards, 328</B>
<DD><B>OSI (Open Systems Interconnect) Reference Model, 58-59</B>
<DD><B>OTP (Open Technology Platform), 162</B>
<DD><B>overriding</B>
<DL>
<DD>card manager, 183
<DD>I/O interrupt function, 183
<DD>loop elements, 183
<DD>receive function, 183
<DD>transmit function, 183
</DL>
<DD><B>ownership of smart cards, 177-178</B>
</DL>
<P><FONT SIZE="+1"><B>P</B></FONT></P>
<DL>
<DD><B>page size, 328</B>
<DD><B>pass-along readers, 128</B>
<DD><B>paths, 328</B>
<DD><B>PC/SC (personal computer/smart card), 150, 328</B>
<DL>
<DD>architecture, 148-152
<DD>SSPs (Smart Card service providers), 150-152, 250
<DD>URL (Uniforma Resource Locator), 147
</DL>
<DD><B>PCs (personal computers), security, 207</B>
<DD><B>personal identification numbers, <I>see</I> PINs</B>
<DD><B>Personal Security Module, <I>see</I> PSM</B>
<DD><B>personalization of cards, 29, 94, 238, 328-329</B>
<DD><B>phone cards, 329</B>
<DD><B>physical security, 208-209</B>
<DD><B>PINs (personal identification numbers), 7, 78, 195, 329</B>
<DL>
<DD>authentication
<DL>
<DD>directory variable, 109
<DD>procedures, 111
</DL>
<DD>cardholders, 205-206
<DD>Change/Unblock command, 160
<DD>CHVERIFICATION functions, 151
<DD>codes, 94
<DD>entry and checking, 211
<DD>files
<DL>
<DD>creating, 98-100
<DD>format, 96
</DL>
<DD>security, 207
</DL>
<DD><B>PKA (public key algorithm), 329</B>
<DD><B>PKCS#11, 147</B>
<DD><B>PKI (public key infrastructure), 329</B>
<DD><B>PlayTone function, 182</B>
<DD><B>plug-ins</B>
<DL>
<DD>EZ Component, 126-128
<DD>software, 124
</DL>
<DD><B>PollInterval function, 182</B>
<DD><B>POS (point of sale), 149, 329</B>
<DD><B>power loss when programming, 175</B>
<DD><B>pre-personalization, 29</B>
<DD><B>printing smart cards, 29</B>
<DD><B>privacy, 203, 220-221</B>
<DD><B>private keys, 164, 213-214, 329</B>
<DD><B>Process button, 122</B>
<DD><B>processor cards, 26</B>
<DD><B>programming, 3-5, 170</B>
<DL>
<DD>interfaces, 169-180
<DD>languages, 146, 329
<DD>non-atomic write, 175
<DD>power loss, 175
<DD><I>see also</I> applications; software
</DL>
<DD><B>protected-mode commands, 105-106</B>
<DD><B>protocols</B>
<DL>
<DD>APDUs (application protocol data units), 58
<DD>APIs (application programming interfaces), 58
<DD>application-level, 67-71
<DD>between smart cards and readers, 52
<DD>designations, 52
<DD>e-cash, 262-265
<DD>layering, 59-60
<DD>link-level, 57-60
<DD>OSI Reference Model, 58-59
<DD>secure messaging, 59
<DD>synchronous, 331
<DD>T=0, 57-60, 331
<DL>
<DD>command header fields, 61-62
<DD>command header parameters, 64-65
<DD>error detection, 60-61
</DL>
<DD>T=1, 57-59, 65, 331
<DL>
<DD>blocks, 66-67
</DL>
<DD>transport keys, 90
</DL>
<DD><B>PSM (Personal Security Module), 165-166</B>
<DD><B>public keys, 213-216, 329</B>
<DL>
<DD>cryptography, 26
<DD>cryptology, <I>see</I> asymmetric key encryption
<DD>DCE PSM (Personal Security Module), 165-166
<DD>digital certificates, 160-161
</DL>
<DD><B>purses</B>
<DL>
<DD>electronic, 102-104
<DD>files, 13-14, 329
</DL>
<DD><B>Put Data command (ISO 7816-4), 78, 282-283</B>
<DD><B>PVC (polyvinyl chloride), 329</B>
</DL>
<P><FONT SIZE="+1"><B>Q-R</B></FONT></P>
<DL>
<DD><B>RAM (random access memory), 15-16, 26, 329</B>
<DL>
<DD>programming, card-side, 172
</DL>
<DD><B>Read Binary command</B>
<DL>
<DD>ISO 7816-4, 75, 92, 105, 273-274
<DD>Multiflex, 305-306
</DL>
<DD><B>Read function, 151</B>
<DD><B>Read Record command</B>
<DL>
<DD>ISO 7816-4, 76-77, 102, 105, 160, 277-278
<DD>Multiflex, 306-307
</DL>
<DD><B>read-only memory, <I>see</I> ROM</B>
<DD><B>readers, 206</B>
<DL>
<DD>Advanced Card Systems ACR20 functions, 132
<DD>Aladdin ASESoft Microprocessor API functions, 130
<DD>APIs (application programming interfaces), 130, 145-147
<DD>Cherry G80-1500 keyboard functions, 133-135
<DD>descriptions, 123
<DD>interfaces, 128
<DL>
<DD>devices, 32
<DD>software, 129-135
</DL>
<DD>pass-along, 128
<DD>Prolekila Smart Card Reader library functions, 133
<DD>reset sequence, 48
<DD>smart cards
<DL>
<DD>bit ordering, 49
<DD>communicating, 45
<DD>data transfer, 48
<DD>data transmission, 49
<DD>diagrams, 47
<DD>protocols, 52
<DD>swallowing, 175
</DL>
<DD>software (card-side), 179-180
<DD>Tritheim SmartPort, 130-132
</DL>
<DD><B>reading smart cards, 152</B>
<DD><B>Receive function, overriding, 183</B>
<DD><B>Receive Ready block (T=1 protocol), 66-67</B>
<DD><B>Reconnect function, 150</B>
<DD><B>record files, 74</B>
<DL>
<DD>lengths, 100
<DD>Seek, 100, 102
<DD>Seek instruction, 101
</DL>
<DD><B>recording techniques, encoding characters, 38</B>
<DD><B>Regulation E, 329</B>
<DD><B>Rehabilitate command (Multiflex), 87, 105, 307-309</B>
<DD><B>Rehabilitate function, 151</B>
<DD><B>relative path, 329</B>
<DD><B>replay attacks, 104</B>
<DD><B>Request Credit command, 265</B>
<DD><B>Request Debit command, 265</B>
<DD><B>Reset function, 182</B>
<DD><B>ResetSecurityState function, 151</B>
<DD><B>resetting readers, 48</B>
<DD><B>retention time, 330</B>
<DD><B>return cards, 40</B>
<DD><B>RF/DC (radio frequency/direct communication), 330</B>
<DD><B>RF/ID (radio frequency/identification), 330</B>
<DD><B>RFU (reserved for future use) field, 291</B>
<DD><B>rogue cards, 105</B>
<DD><B>rogue terminals, 105</B>
<DD><B>ROM (read-only memory), 15, 25, 330</B>
<DL>
<DD>programming, card-side, 173-174
</DL>
<DD><B>routines, FILEACCESS functions, 151</B>
<DD><B>RSA, 330</B>
<DL>
<DD>algorithm, 12
<DD>URL (Uniform Resource Locator), 147
</DL>
<DD><B>RST, 330</B>
</DL>
<P><FONT SIZE="+1"><B>S</B></FONT></P>
<DL>
<DD><B>SAD byte (Source address), 67</B>
<DD><B>SCARD interface functions, 150</B>
<DD><B>Schlumberger</B>
<DL>
<DD>Cryptoflex cards, 147, 165
<DD>Cyberflex
<DL>
<DD>1.0 cards, 184-185
<DD>2.0 Core API, 192-196
<DD>Web site, 191
</DL>
<DD>interpreter, 184
<DD>Java Card version 1.0 API (listing 8.l), 186-192
<DD>Multiflex smart cards, <I>see</I> Multiflex, cards
<DD>Pont Audemer factory, 90
<DD>SCOS (Schlumberger Customer Oriented System), 182
<DL>
<DD>commands, activating, 183
<DD>loops, overriding elements, 183
</DL>
<DD>SOLO software, 141
<DD>virtual machine, 184
<DD><I>see also</I> FlexCash cards
</DL>
<DD><B>screens, Borland Delphi code control, 127</B>
<DD><B>scripting</B>
<DL>
<DD>debugging or testing, 177
<DD>software, card-side, 177
</DL>
<DD><B>Scrivener&#146;s Corner, 227-229, 240-242</B>
<DD><B>SDKs (software development kits), 125-128, 145, 330</B>
<DD><B>secrets, shared, 211-212</B>
<DD><B>secure electronic transactions, <I>see</I> SET</B>
<DD><B>secure messaging, 59</B>
<DD><B>security, 4</B>
<DL>
<DD>ACLs (Access Control Lists), 218-219
<DD>Adaptive Security Framework, 125
<DD>applications, 208
<DD>architecture, 209
<DD>asymmetric key encryption, 212-214
<DD>authentication, 209-214
<DD>authorization, 218-220
<DL>
<DD>capabilities list, 219-220
<DD>certifying authorities, 216-218
</DL>
<DD>cardholders, 205-206
<DD>cards, 205-209
<DD>CAs (certificate authorities), 217
<DD>certificates, 217-218
<DD>chain of trust, 216-217
<DD>checksum, 214-215
<DD>chips, tamper-resistant, 209
<DD>code, 215-216
<DD>commands, protected-mode, 105-106
<DD>counterfeit cards, 170-171
<DD>cryptography, 11-12
<DD>cryptology, public keys, 216
<DD>Cyberflex 2.0 Core API, 195
<DD>data security, 18
<DD>Diffie-Hellman protocol, 220
<DD>digital signatures, 214-215
<DD>E-Bucks e-cash protocol, 263-265
<DD>encryption, 12
<DD>government entities, 204
<DD>induced error attach, 325
<DD>integrity, 214-218
<DD>ISO 7816-4, 284
<DD>keys