Skip to Main content Skip to Navigation

Analyse forensique de la mémoire des cartes à puce

Thomas Gougeon 1
1 Equipe Monétique & Biométrie - Laboratoire GREYC - UMR6072
GREYC - Groupe de Recherche en Informatique, Image, Automatique et Instrumentation de Caen
Abstract : In our increasingly connected world, smart cards are involved in any everyday activity, and theygather and record plenty of personal data. The need to interpret the raw data of smart card memoryhas never been stronger. However, without the knowledge of the specifications, it is difficult toretrieve what are the information stored, their location, and the encoding used to store them.The objective of this thesis is to propose a method retrieving the stored information in thenon-volatile memory of smart cards. This information include dates (e.g., birth date or event date)and textual information (e.g., name, address). In order to retrieve these information, it is possibleto perform an exhaustive decoding of the data with several decoding functions. Unfortunately,this technique generates a lot of false positives. Indeed, a false positive occurs when a decodingfunction is applied to data that have been encoded with another function. This thesis proposesthree contributions exploiting smart cards specificities to eliminate the false positives. The firstcontribution identifies cryptographic material in these non-volatile memories in order to preventthe false positives generated by the decoding of these cryptographic objects. The two otherscontributions retrieve respectively textual information and dates in these memories. In order tovalidate these methods, they are applied on 371 memory dumps of real-life smart cards.
Complete list of metadatas

Cited literature [59 references]  Display  Hide  Download
Contributor : Abes Star :  Contact
Submitted on : Monday, December 11, 2017 - 10:43:47 PM
Last modification on : Monday, February 10, 2020 - 5:10:56 PM


Version validated by the jury (STAR)


  • HAL Id : tel-01661305, version 1


Thomas Gougeon. Analyse forensique de la mémoire des cartes à puce. Ingénierie, finance et science [cs.CE]. Normandie Université, 2017. Français. ⟨NNT : 2017NORMC221⟩. ⟨tel-01661305⟩



Record views


Files downloads