A Methodology for UICCBased Security Services in Pervasive Fixed Mobile Convergence Systems - Advanced Design Approaches to Emerging Software Systems - page 182

UICC-Based Stock Service For this, applet implements the functionalities

to store the bank account number and PIN safely
and perform security protocol between ATM for
the safety of the information exchanges. Currently,
in the Republic of Korea, this service has been
commercialized since 2008. This service named
by “UbiTouch” provided by KFTC (KOREA
FINANCIAL TELECOMMUNICATIONS &
CLEARINGS INSTITUTE) can also support to
store the one hundred bank account information
of multiple banks. Figure 3 depicts the concep-
tualized flow of UICC-based debit card service.
The service scenario is as follows: First, the
user interacts with the ATM to enter the UICC-
based debit card service mode where RF reader
attached to the ATM can be activated. Then, the
user touches his/her own mobile terminal to the
RF reader of the ATM. The preferred bank account
number configured by the mobile terminal previ-
ously is transferred to the ATM with encryption.
The encrypted bank account number is recognized
by the banking system and the user can perform
the rest of his/her transactions such as deposit the
money, withdraw the money, etc. In the middle
of the transaction, there should be the user au-
thentication by entering the PIN on the ATM.

UICC-based stock service is to store the sensitive
user account information on the UICC securely.
The information is encrypted and access to that
information is protected by PIN, which is also
entered by user when the service is activated in the
stock office. When user wants to use the UICC-
based stock service, he (she) can launch the ap-
plication installed on the mobile terminals. Then,
the application tries to access the PIN-protected
stock account stored on the UICC by sending the
specific APDUs. The application needs to display
the input UI for acquiring the PIN from user. After
user inputs the PIN and it is matched with the
one stored in UICC, the stock account data can
be utilized by the application to authenticate the
user to the stock service servers and provide the
stock services. Figure 4 depicts the conceptualized
flow of UICC-based debit card service.

UICC-Based Network Authentication
Service

UICC-based network authentication service is
widely used in Republic of Korea, currently. The
mechanisms implemented in the USIM applica-

Figure 3. The Conceptualized flow of UICC-based Debit Card Service