Updated : Tuesday
25 February 2003
25-02-03
| Protecting Identities and Privacy with
Smart Cards
News from the Mid-Winter Conference of the Smart Card Alliance
Princeton Junction,
NJ, February 24, 2003 - Speakers and attendees at the recently concluded
Smart Card Alliance Mid-Winter Conference were all in agreement that applying
technology to protect identities and the privacy of individuals presents
an excellent market opportunity.
"The Smart Card
industry is positioned ideally to address macro-trends in the growing
Smart Card market," said Paul Beverly, chairman of the Alliance and vice
president of Smart Cards and terminals, Schlumberger. "While not everyone
has settled on a direction, all agree the future is bright for Smart Cards
-- major industries like health care, transportation, financial/retail
and information systems are now looking in earnest for solutions to the
problems of privacy, identity verification and transaction integrity.
That bodes well for our industry, because trusted identity credentials
and trusted computing require exactly what Smart Cards deliver -- secure,
portable hardware."
At the conference,
speakers from enterprise IT, financial and retail, health care and government
explored the mounting pressures to update the ways in which identities
are created, recognized, delivered and protected. They also discussed
a range of technology options under consideration for solving these problems.
Privacy and Security
One of the important
themes reinforced by several speakers was the link between privacy and
security. "Privacy is much more than data confidentiality. Security is
a key component of privacy," said keynote speaker John Sabo, manager of
security, privacy and trust initiatives for Computer Associates.
That link was also
a central theme for the panel of speakers that presented the newest white
paper from the Smart Card Alliance, "Privacy and Secure Identification
Systems: The Role of Smart Cards as a Privacy-Enabling Technology." One
of the points stressed in the paper is that using Smart Cards to securely
limit access to information stored on information systems is an excellent
way to protect the privacy of personal information stored there. This
reduces the risks of relying solely on passwords, and facilitates limiting
information access to the minimum necessary.
"The fact is that
Smart Cards can be an excellent tool for protecting privacy," said Randy
Vanderhoof, executive director of the Smart Card Alliance. "A Smart Card
can be a personal, portable database, giving individuals control over
their personal information. The strong security provides a 'personal firewall'
that protects cardholder privacy by strictly limiting information access
based on the specific situation. With the growing problem of financial
identity protection and the need for increased privacy in healthcare,
the advantages of Smart Cards as a tool for privacy become compelling."
Financial and Retail
Presenters also
discussed retail perspectives on identifying consumers and on new technologies
that are expected to make inroads at physical stores. Jim Crawford, retail
analyst for Forrester Research, Inc. took the position that consumers
don't care about privacy, they care about the abuse of privacy. As proof
of his position, he pointed to how readily airline passengers will trade
identity information for security, or online shoppers will trade identity
for value in the form of coupons or "free" downloads. He further pointed
out that 85% of primary grocery shoppers would like to use their loyalty
card to get personalized promotions as they enter the grocery store.
Building on a holistic
view of consumer attitudes, payment trends and retailing, Crawford predicts
"a new concept of 'financial identification' will emerge in which payment
devices will be used for identification when you enter the store as well
as for payment when you leave." He is particularly enthusiastic about
RFID based payment solutions, calling it "a revolution in the making."
Citing the early
2003 planned rollout of ExxonMobil's Speedpass technology in the Stop
& Shop grocery chain and the enthusiasm around the introduction of MasterCard's
PayPass, Crawford sees RFID as the "evolution of Smart Cards." He also
predicts that biometrics will be the evolution of PIN numbers, because
tied to the card it enables payment providers to confirm that the card
bearer is who they claim to be. The increasing interest in contactless
RF-based payment was also the focus of the panel of speakers presenting
an upcoming white paper from the Smart Card Alliance, "Contactless Payment
and the Retail Point of Sale." This panel discussed successful implementations;
retailer and issuer business benefits and costs, and described the different
technologies that could be used to implement contactless payment. According
to Michael Madden, vice president of e-Business development for MasterCard
International, "Retailers see significant benefits with faster transaction
times, increased revenue and better customer information" when using contactless
payment. Ian Duthie, marketing manager of Atmel Smart Card ICs, described
how Smart Cards offer an excellent choice, providing the "strongest security
features versus all other contactless technologies."
George Wallner,
founder and chief strategist for Hypercom, also discussed the need for
biometrics to combat fraud and identity theft. He described how a "zero
knowledge" system could be implemented at the retail point-of-sale that
would provide an approach to identity verification that is more acceptable
to consumers. Comparing different options for applying fingerprint biometrics
to payment cards, Wallner pointed to an important advantage of putting
the biometric template on a Smart Card. "I believe storing biometrics
on cards will be more acceptable to the public," he said.
Healthcare
Two speakers from
the healthcare industry described emerging needs that can be addressed
by Smart Card technology. Dr. Archie Mays, founder of MedHealth, estimated
that $40 to $70 billion of the $1.4 trillion health care cost for Americans
is due to fraud. As the privacy and security laws surrounding the Health
Insurance Portability and Accountability Act of 1996 (HIPAA) go into effect
on April 15th, 2003, Dr. John Butterworth, president of Security Sciences,
Inc., predicts that medical industry companies will start asking for Smart
Cards. "I think Smart Cards will become the chosen option," he said.
Government
Mary Dixon, director
of the Department of Defense Access Card Office, presented an update on
the CAC program. The DoD has now issued 1.8 million Smart Cards, and is
issuing 9,000 to 12,000 per day from 1,300 issuance workstations in more
than 15 countries. More than 150,000 workstations have now been equipped
with readers and the software necessary to do logical access and log-on.
Other applications are food service, manifesting and PKI-based electronic
document signature and encryption.
Further demonstrating
the momentum that Smart Card technology has developed in the United States
government, Bill Holcombe of the GSA's Office of Governmentwide Policy
presented a list of more than 20 government Smart Card projects in various
stages of implementation. He identified as the main driver a new urgency
for better credentialing solutions as part of the post 9/11 need for greater
security.
About the Smart
Card Alliance
The Smart Card Alliance
is a not-for-profit, multi-industry association working to accelerate
the acceptance of Smart Card technology.
Through specific
projects such as education programs, market research, advocacy, industry
relations and open forums, the Alliance keeps its members connected
to industry leaders and innovative thought. The Alliance is the single
industry voice for Smart Cards, leading industry discussion on the impact
and value of Smart Cards in the U.S. For more information please visit
http://www.smartcardalliance.org.
26-04-02
| Advanced Card Award Winners 2002
The winners
of the Advanced Card Awards 2002 were announced at the Awards Ceremony
and Dinner, held at the Hotel Intercontinental in London this week.
The winners were:
Best Security
Product:
Top Secure Pin Protection Label from Schreiner GmbH
Most Innovative
Product of the Year:
Smart-Solution from Retail Logic Ltd.
Best Loyalty
Implementation:
Shetland Smart Card made by Gemplus Ltd. for ScotComms
Best Healthcare
Implementation:
NHS Occupational Health Smart Card Scheme made by TSSI for Department
of Health
Best Payments
Implementation:
Internet P.G. (Payment Gateway) made by KEBTechnology for MYbi, Pusan
Bank Credit Card Company, VAN Company, Internet Shoppingmall
Best Transport
or Travel Implementation:
Moscow Social Security Card from Rosan Group
MIPS Best Mobile
Commerce & Communications Implementation:
WIQ from ORGA Card Systems (UK) Ltd.
ActivCard Best
E-Business Implementation using Digital Identity:
Internet P.G. (Payment Gateway) made by KEBTechnology for MYbi, Pusan
Bank Credit Card Company, VAN Company, Internet Shoppingmall
Best Security
or Biometrics Implementation:
The Common Access Card Program at the U.S. Department of Defense made
by ActivCard with SchlumbergerSema for Department of Defense
Most Innovative
Implementation of the Year:
The Net1 'Malswitch' Project made by Net1 Applied Technology Holdings
Ltd APLITEC for Malswitch
RNIB Usability
Award:
Blatchford Adaptive Limb made by Flint for Blatchford
ORGA Advanced
Card Hall of Fame Award:
Dr Marc Lassus (Chairman, Gemplus)
The Judges'
Award:
The Common Access Card Program at the U.S. Department of Defense
20-02-02
| 3GSM Award Winners Announced
The 7th annual
GSM Association awards were presented at the 2002 3GSM World Congress
in Cannes yesterday. The winners were:
Category One
Technology Innovation: Best Infrastructure or Network Solutions product
- Wireless Online (USA) Best Wireless Handset/Terminal or Handheld
Device - NTT DoCoMo (Japan)
Category
Two Applications and Services: Best Corporate Wireless Application
or Service: Far EasTone Telecommunications Co., (Taiwan) Best
Consumer Wireless Application or Service: Codeonline (Finland) Best
Wireless Application Developer: Network 365 (Ireland)
Category
Three Marketing and Promotion: Best Television Commercial:
Sonera Corporation, Mobile Operations (Finland) Best Marketing Campaign:
Orange (France)
Category
Four GSM in the Community: Wireless Accessibility Award:
MTN Networks (Sri Lanka) Best use of Wireless for Emergency Situations:
Joint Winners: Polkomtel SA. Poland, and Ericsson (Sweden)
Category
Five GSM Association Gold Roll of Honour Winners: George
Schmitt, Currently Chairman and acting CEO of e.spire Communications
Inc Mauro Sentinelli, Managing Director of Telecom Italia Mobile (TIM)
Hans Snook, Formerly CEO and Group Managing Director of Orange
GSM
Association's Special Recognition Award Telecom Italia Mobile for
M-Services (Italy)
GSM
Association Chairman's Award NTT DoCoMo (Japan)
14-11-01
| SESAME Award Winners 2001
The winners of
the 2001 SESAME Smart Card Industry awards were announced at the CarteS
exhibition in October 2001. Smart Card News' Patsy Everett was once
again member of the judging panel.
The winners were:
SESAME for
the Best Software (New in 2001):
Proton World : CALC (Card Application & Life-Cycle Manager)
The Proton Prisma
Card and Application Life Cycle manager (CALC) is a spearhead implementation
of the Open Platform 2.1 specifications for card application management,
and is used to manage the life-cycle of multi-application Smart Cards,
including the personalisation of the cards and the dynamic downloading
of applications onto the cards. CALC is present on all Proton Prisma
cards, as all the standard applications and toolboxes rely on CALC for
personalisation, security and the downloading of new applications. CALC
improves the overall security and reduces the operational complexity
of large-scale Smart Card systems. CALC enables card issuers to : manage
Smart Card issuing in a multi-application environment ; manage the card
life-cycle; securely set and update the on-card parameters; manage what
applications are available and/or active on each of the cards; support
mass card personalisation; support dynamic downloading of applications.
Contact: Christopher
Bourne
Tel. +32 2 724 5028
Fax. +32 2 724 5060
Email: chris.bourne@protonworld.com
SESAME for
IT Security Application (New in 2001):
Schlumberger:
SSB (Schlumberger Smart Badge) for Royal Dutch Shell
SSB uses Smart
Cards to provide physical access to buildings, network access and corporate
ID. the cryptographic capabilities of the Smart Card are used by Shell
to authenticate end users to digitally sign and encrypt documents and
email and to provide non repudiation for digital transactions. The combination
of Smart Cards, the card management system and the thin client solution
all combined make this solution completely unique in the world today.
It is the first known Windows 2000 Smart Card solution.
Contact: Emmanuelle
Saby
Tel. +33 1 47 46 71 04
Fax. +33 1 47 46 68 66
Email: saby@montrouge.tt.slb.com
SESAME for
Transportation Application:
Ask: C. Ticket
C.Ticket is a
paper contactless Smart Card enabling contactless secured transactions.
Public transport networks have been expanding contactless Smart Cards
for subscribers worldwide. Those cards are cost effective for regular
travellers but too expensive for occasional travellers using single
ride tickets or ticket books. Networks have had to invest into two technologies
and manage them so far that is contactless for subscribers and another
one, more traditional such as barcode, magstripe and so on for occasional
travellers. C.Ticket now able to manage all travellers with contactless
Smart Cards and thus save costs compared to a bi-technology solution.
Contact: Emeric
d'Argoeuves
Tel. +33 4 97 21 40 00
Fax. +33 4 92 38 93 21
Email: eda@ask.fr
SESAME for
Banking/Finance Application:
Schlumberger:
Lloyds TSB Key Online Banking
UK bank Lloyds
TSB is using Schlumberger expertise to implement a Smart Card-based
PKI system for an Internet based business to bank service. Within this
program, business costumers of the bank will be able to access their
bank account online and undertake transactions and a full range of activities
using a Smart Card holding the public and private keys to encrypt information
and to generate digital signatures. Initially the system will allow
customers to view balances and statements, user administration, two-to-sign
transactions and make BACS payments. In the future customer demand will
determine what other functionalities will be added including inter-account
transfers, high value payments, international payments, etc. The project,
currently in its pilot stage, is the first large-scale Smart Card-enabled
Internet banking project in the UK available for 750.000 potential business
customers.
Contact: Emmanuelle
Saby
Tel. +33 1 47 46 71 04
Fax. +33 1 47 46 68 66
Email: saby@montrouge.tt.slb.com
SESAME for
Health Care Application:
MoneyLine - Migrantis: Assiha, The Health Card
This service takes
the form of a Smart Card credited or prepaid by the Third paying Party
who has emigrated and living in Europe, and debited for the profit person
staying in the country of origin who buys the medication or receives
the health services in the chemistries, hospitals or doctors equipped
with Migrantis terminals. Thanks to the new technologies of payment
and the data sources transfers, the objective of this project is to
make easier, more rational and secure this help in a view of health
cares.The ASSIHA health card enables the virtual association of persons
geographically far away and anonymous in one or more securised credit/debit
transactions, so one of them accesses to the medications and the health
cares.
Contact: Joseph
Noumazalayi
Tel. +33 1 53 40 93 92
Fax. +33 1 53 40 93 89
Email: joseph.noumazalayi@migrantis.com
SESAME for
GSM Application:
Banksys: Banxafe Mobile
Banxafe Mobile
is a new security label for e-commerce/m-commerce enabling portable
phone users to make Internet purchases, banking operations and pre-paid
card reloads in a totally secure manner. The system encompasses all
existing debit and credit payment card systems and makes their use possible
in the virtual world (the mobile is used to secure Internet and mobile
transactions). Banxafe relies on the Smart Card technology and is fully
compatible with the Secure Electronic Transaction (SET) standard. By
means of a secured banking application installed on a chipcard and a
banking PIN, the users access a virtual wallet containing duplicates
of their physical cards and thus have access to their financial resources
on the Web without ever typing in a bankcard number. No sensitive information
is kept at the merchant site, and merchants have an insured guarantee
that they will be paid by the bank.
Contact: Caroline
Duterme
Tel. +32 2 727 65 21
Fax.+32 2 727 67 67
Email: caroline.duterme@banksys.be
SESAME for
Electronic Commerce Application:
AmaTech USA: The WavePass Internet Smart Card network
The product is
an integrated system that allows consumers to make purchases on the
Internet and immediately load the purchase value, via a low cost home
reader onto a WavePass contactless Smart Card. It provides a bridge
between the Inernet and the brick and mortar world, allowing purchases
initiated online to be completed at home and the stored values used
at the business location. This is the first use of contactless cards
in the e-commerce arena.
Contact: Alicia
Espericueta
Tel.+1 480 722 3017
Fax. +1 480 722 3039
Email : aespericueta@amatechusa.com
SESAME for
Loyalty Application:
TeleCash GmbH: P.S.K. / Post Kundenkarte
The PSK/POST Kundenkarte
is a chip-based loyalty card offering functionalities in : personal
identification of costumers/clients in the post office by PIN verification
; bonus system by Post AG; PoS payments in post offices and on PoS terminals
at co-branding partners' site ; cash advance in post offices and branches
of Bawag ; payment function for e-government solutions (digital signature)
; administration of savings account on the chip (Bawag) ; deposits.
Contact: Judith
Heide Haeublein
Tel. +49 711 162 64 891
Fax. +49 711 22 11 29
Email: heide.haeublein@telecash.de
The best among
those 7 applications has received the SESAME for the Best Application:
Ask: C. Ticket
Contact: Emeric
d'Argoeuves
Tel. +33 4 97 21 40 00
Fax. +33 4 92 38 93 21
Email : eda@ask.fr
SESAME for
the Best Technological Innovation:
Infineon Technologies: 32 BIT Chip Card Controller SLE88CX720P
It will be the
first product of the complete new 32 bit chip card controller family,
the 88 family. The whole product package consists of a bondout device
with integrated debug interface (DIM) module for easy to use SW debugging,
a high volume product and a complete SW package, incl. A development
environment (C Compiler, Assembler, Simulator etc.) and a so called
Platform Support Layer (PSL) whiwh provides the SW developer with all
required low level drivers. The product is based on an Infineon own
32 bit RISC processor, the TriCore, which was adapted to the chip card
specific security performance and power consumption requirements. The
main features are 144 Kbyte EEPROM, 160, Kbyte ROM, 8 Kbyte RAM, Crypto
Co-Processors for RSA, ECC and 3DES, Virtual Language Acceleration for
Java SC, Multos and WPSC and an integrated Security Concept. The product
is designed to fit into all the high volume applications in the chip
card world, like GSM SIM, USIM, m-commerce, e-commerce, payment and
security access.
Contact: Bernd
Meier
Tel. +49 89 234 25166
Fax. +49 89 234 22214
Email : bernd.meier2@infineon.com
23-03-01 | Advanced
Card Awards Winners
Most Innovative
Products of the Year were awarded jointly to Omnikey for CardMan
Dongle, the smallest Smart Card reader for any Smart Card in GSM/SIM
format; and Bull for Oversoft Technology - iSimplify! which transforms
a Smart Card into a true Internet node.
Card Technology
Most innovative Implementation went to easi Solutions for e@si Card,
a system allowing hoteliers to offer guests high-speed Internet access,
e-mail and MS Office.
Best Loyalty
Implementation went to Schlumberger for the UK's first live multi-application
Smart Card with innovative co-branding between Internet bank Egg and
Boots the Chemist and combining loyalty points and credit.
Best Payments
Implementation went to KEB Technology for the Digital Pusan Card
issued by Korea's Pusan Bank to offer customers contactless payment
for travel expenses such as fares, parking or tolls, and the security
of a contact card for purchases at shops or online.
Best Transport
or Travel Implementation went to ASK for e-Ticket, the first disposable
contactless ticket for many different requirements for access control
and ticketing.
Best Communications
Implementation went to Schlumberger for its Simera Airflex Smart
Card produced for Korea Telecom Freetel to make it the first mobile
operator to give its subscribers the ability to roam between CDMA and
GSM networks.
Mondex International
Best e-Business Implementation went to Banksys for Banxafe, a new
security label for e-commerce payments encompassing all existing payment
card systems (credit, debit, purse) and creating a ‘virtual wallet'
duplicating the cards the customer already uses for other types of transactions.
Digital certificates ensure no sensitive information is kept at the
merchant site, and the merchant is guaranteed payment from the issuing
banks.
MIPS Technologies
Best m-Commerce Implementation went to Entrust Technologies for
its getAccess Mobile Server used by Internet bank Egg to provide a secure
portal accessible with multiple wired and/or wireless devices.
Smart Card
2001 Best Security or Biometric Implementation went to STMicroelectronics
for its ST19 Smart Card IC platform, the first to be certified to new
ISO 15408 standard.
Oberthur Card
Systems Best New Chip award went to Atmel Smart Card ICs for its
latest AT90SC6464C-USB Flash microcontroller providing direct high-speed
connection to any PC or Internet appliance.
STMicroelectronics
Best Security Product went to Raytheon Company for Secure IT - a
set of specialised circuit layout methodologies using standard CMOS
processing to make chips ‘functionally invincible' to reverse engineering.
RNIB Usability
Award went to Gemplus for GemUtilities designed to simplify personal
access to favourite Internet sites and provide ‘one-click' convenience
in e-commerce through intelligent form-filling.
The Judges'
Award went to American Express for Amex Blue, their Smart payment
card.
|