The Aegis: UICC-Based Security Framework

The mobile network operators (MNOs) would like to ensure the high level of security of their services to their customers without any inefficiency and protect their own business models from any adversary. However, due to the constraints of the mobile handsets, the dreams had seemed to be difficult to be realized till now. As the 3G mobile network has spread out widely and the technologies of smart cards have been improved drastically, the UICC arose as the personal security infrastructure to realize the dreams of MNOs. This ideal medium possesses lots of the inherent security features and also is owned and issued by MNOs.In this paper we propose a novel UICC-based security framework named by the Aegis. The architecture of the Aegis was designed and are now being developed to support the security technologies such as DRM, PKI and TLS/SSL based on Java Card Platform (JCP), the de-facto smart card platform. We described the architecture and the applications of the Aegis in detail.