Java Card is the leading open, interoperable platform for secure elements, enabling smart cards and other tamper-resistant chips to host multiple applications using Java technology. Java Card is an execution platform that can store and update multiple applications on a single resource-constrained device, while retaining the highest certification levels and compatibility with standards.
Vendor
Oracle
Company Website
Java Card benefits
The Java Card platform is at its core a very minimal subset of Java, enriched with unique features catering to the needs of secure elements implementers and developers, specifically:
Interoperable
Applets developed with Java Card technology will run on any Java Card technology-enabled product, independently of the software vendor and underlying hardware. Java Card is available on a wide range of silicon form factors, including smart cards, embedded chips, secure enclaves within CPUs and MCUs, and removable SIMs. Applications can be reused across those form factors, enabling customers to maximize their security/cost ratio and supporting seamless migration if security requirements evolve.
Secure
Java Card technology relies on the inherent security of the Java programming language to provide a secure execution environment. An open design process, proven industry deployments, and high-level security evaluations make the Java Card platform one of the most capable and secure technology available today. Java Card also supports the latest security standards and is regularly updated with state-of-the-art cryptography algorithms, modes, and protocols.
Multi-application, multi-tenant
Java Card technology enables multiple applications from multiple vendors to coexist securely on a single secure element. For example, several payment schemes can be included in the same chip or a SIM application can be loaded alongside device security services in an embedded secure element.
Extensible and updatable
New services are developed using standards-based Java tools and can be created and deployed at any time during the life of a Java Card product. Remote management and upgrade of applications allows service providers to constantly adapt to security threats. Applets are updatable in the field, ensuring always-current device security to end users.
Certifiable design
Java Card– based products are certified at the highest level (e.g. EAL4+ to EAL7+) using the Java Card Protection Profile as the world wide reference provided by Oracle. Additionally, it reduces the time and cost and time is savedfor developers to certify applets using composition models.
Compatible with standards
The Java Card API is compatible with international standards for secure elements, such as ISO 7816 or mobile communication standards issued by ETSI/3GPP. Major industry-specific standards, such as EMVCo and GlobalPlatform refer to the Java Card API.