ECC RSA2048 USB Key Java Card – eJava Token (A1+) Specifications

The eJava Token (A1+) ECC RSA2048 USB Key is a high-security Java Card–based USB token cryptographic designed for secure authentication, PKI applications, digital signatures, and encryption. Built on a secure Infineon microcontroller, the device is certified with Common Criteria EAL6+ and EMVCo security standards, ensuring strong protection against physical and logical attacks.

The token supports Java Card USB Token technology and GlobalPlatform standards, allowing secure deployment of multiple applications (applets) simultaneously within the same device.

ECC RSA2048 USB Key Java Card EJava Token – A1+ fully compliant with Global Platform and Java Card specification, it is one type of USB Key Java card. Built-in Java Card Virtual Machine, supports multiple applications, and download different Applets at the same time.

These functions marked * are not supported by default. If you need these functions, please contact us before placing order of USB Key Java Card – eJava Token (A1+).

Chip Model	Infineon
Chip Certification	CC EAL6+, EMVCo
CPU	16bit
Physical Storage
NVM Type	Flash(SOLID FLASH)
Total NVM Size	500K
Total ROM Size	N/A
Total RAM Size	16K
Code Area	FLASH
User NVM Size	186K
User RAM size	8.9K
Algorithm
RSA 2048	Yes
AES	Yes
SHA-1	Yes
SHA-256	Yes
SHA-384	Yes
SHA-512	Yes
MD5	Yes
3DES (ECB, CBC)	Yes
ECC	Yes
Standard Compliance
Java Card™ 2.2.2	Yes
Java Card™ 3.0.5	Yes
GlobalPlatform 2.1.1	Yes
GlobalPlatform 2.2.*	Optional
Communication Protocol
ISO7816 T=0	Yes
ISO7816 T=1	Yes
CCID	Yes
USB	Yes
JCRE Features
APDU Buffer Size	261 bytes
Transaction Size	512 bytes
Extended APDU	Yes
RMI	No
Logical Channels	20
Garbage Collector	Yes
Applet deletion	Yes

Overview

The eJava Token A1+ is a USB security token containing a Java Card–based secure element. It integrates a Java Card Virtual Machine (JCVM) and a secure microcontroller that enables developers to deploy and manage multiple security applications (applets) inside the token.

Unlike simple USB tokens, a Java Card USB token works like a miniature secure computer capable of running multiple Java applets simultaneously.

Key design concept:

• Hardware security module in USB form
• Programmable using Java Card technology
• Supports strong cryptography (ECC, RSA2048)

The token follows Java Card USB Token and GlobalPlatform standards, which means it supports secure lifecycle management and applet loading.

Advantages of eJava Token (A1+)

Key advantages:

• ✔ Hardware key protection
• ✔ Multiple applets in one token
• ✔ Strong ECC and RSA cryptography
• ✔ Cross-platform support
• ✔ Secure key storage (non-exportable keys)
• ✔ Compatible with PKI and identity systems

EJava Token Typical Applications

Digital Identity & Authentication

• PKI login
• Windows smart card logon
• VPN authentication
• SSL client authentication

Digital Signature

• e-Government signing
• e-Invoicing
• document signing

Enterprise Security

• secure system login
• database authentication
• administrator authentication

Secure Key Storage

• certificates
• encryption keys
• private keys

Interface and Compatibility

EJava Token USB Interface

The token connects via:

• USB 2.0 CCID interface
• Plug-and-play operation

Many tokens do not require drivers because CCID is supported by operating systems.

EJava Token Supported Operating Systems

Typical compatibility includes:

• Windows (32 / 64 bit)
• Linux
• macOS

This enables integration into enterprise authentication systems.

EJava Token Multi-Application Capability

One of the most important features is multi-applet support.

Because it includes a Java Card USB Token Virtual Machine, the token can run several applications simultaneously.

Examples of applets:

• PKI authentication applet
• FIDO authentication
• OTP generator
• Payment applet
• eID applet

Developers can download different applets to the token at the same time using GlobalPlatform commands.

This allows one Java Card USB Token to perform multiple security functions.

Cryptographic Capabilities

The eJava Token A1+ supports strong public-key and symmetric encryption.

These algorithms enable:

• Digital signatures
• Authentication
• Secure key exchange
• Data encryption

Hardware execution ensures keys never leave the secure chip.

GlobalPlatform Compliance

The token is compliant with GlobalPlatform, which is the industry standard for secure application management on smart cards.

GlobalPlatform enables:

• Secure loading of applets
• Secure channel communication (SCP)
• Application lifecycle control
• Remote management of card applications

Example operations supported:

• Load
• Install
• Make selectable
• Delete applications

---

Java Card Platform

The token contains a Java Card Runtime Environment (JCRE).

Java Card allows:

• Running Java applets on smart cards
• Secure isolation between applications
• Secure memory management

This enables multiple security applications on one token, such as:

• PKI authentication
• Digital signature
• OTP authentication
• Secure login

---

Core Technology Architecture

Secure Hardware Layer

The token includes a tamper-resistant secure element chip that stores keys and performs cryptographic operations internally.

Typical hardware features:

• Secure microcontroller
• Hardware crypto engine
• True random number generator
• Side-channel attack protection
• Secure memory for keys

Such secure elements often include protections against DPA (Differential Power Analysis) and fault injection attacks.