A New Kind of Security Communication Mechanism with Security Sessions

For the smart card, the existing security system does not establish a secure communication with the terminal application, which makes the possibility of being attacked by intercepted, modified or forged orders. In this paper, the definition of security session is given. Through a combination of the original concept of security state and security attributes, security session can set up secure communication channel between the smart card and the applications on terminals, which form a new smart card security communication mechanism.