Mobile Code Protection with Smartcards Position Paper

This paper addresses mobile code security with respect to potential integrity and privacy violations originating from the runtime environment. The suggested solution requires a trusted hardware with limited capacity like a smartcard and assures the security of a program executed on untrusted runtime environments by means of some interactions between the program and the trusted hardware. The security of this scheme is based on an extension of function hiding using error correcting codes. Unlike prior function hiding schemes, the proposed technique allows multi-step execution and the delivery of cleartext output at the remote site.