Smartspace Software Share Discussion Threads

[garth] 22/11/2006 12:55

Sorry, hitting posting overload. This piece by Peter Stoddart from "Joined up Strategic Thinking for Government Online (JUSTGO) hints at the significance of a possible introduction of concessionary travel in England to match the schemes in Scotland and Wales. Such a move would seem to hit a real point of critical mass for more widespread ITSO adoption. At that point all UK buses would have ITSO compliant smartcard readers that would also be in use in some authorities as library and leisure cards....

A journey through ITSO
Tuesday, January 03, 2006
Peter Stoddart, Head of Marketing at ITSO, talks about ITSO and the development of smartcards.
The end of 2005 brings with it some significant milestone achievements for ITSO and not only ensures its place as the industry standard for transport applications on smartcards but also provides an environment for others to share – the true start of the citizen smartcard.

These milestones are:
• Common Criteria Certification to level 4 high. At long last, the actual certificate from the French Government that validates the high level of security provided by the ISAM (ITSO secure application module), which will sit in every Point of Service and back office, has arrived. This level ensures that the ISAM is fit for such products as e-money – a fact also borne out by a recent independent analysis of security provided by schemes, carried out by Consult Hyperion for the DfT, in which ITSO came out top;
• Security delivered. The final link in the ITSO security environment has now been commissioned and the first schemes can now establish their own security environments;
• First Operating Licence signed. Cheshire CC have become the first scheme operator to take out an ITSO Operating Licence. Impressive demonstrations of their end-to-end scheme have taken place recently and included all of their main suppliers;
• NSCWP endorse ITSO. The software developed by the National Smartcard Working Party (sponsored by the ODPM) now contains modules to generate ITSO shells on cards and is to be certified by Integri. This is attracting a lot of attention in local authorities as it helps them achieve their e-GIF requirements for Priority Outcome G12;
• Scheme forecasts! The major schemes in Scotland, Merseytravel, GMPTE, Southampton, Wales, Nowcard and Notts CC, which will be implemented or upgraded in 2006, are now forecasting over three million ITSO-based cards before the end of 2006.

What is ITSO?
The primary focus of ITSO was the creation of a specification for interoperable smartcards for transport applications. Today, that specification rests at version 2.1 published in March 2004 and as Crown Copyright is available to all.

The specification is unique is a number of ways:
• It supports a wide range of smart media, whereas other specifications usually support only one. In ITSO, the choice ranges from low cost disposable cards to top of the range microprocessor cards. The specification recognises current popular contactless media such as Mifare 1K & 4K, and Calypso. But all are interoperable, giving schemes a choice of card that is more appropriate to their application – low cost for single journeys, higher specification for concessionary travel cards – which may also be citizen cards;
• It covers the whole life journey of transport applications and so specifies card data, card formats, point of service activities, transaction formats and back office processing – providing a complete end-to-end specification for interoperable smart media;
• It supplies the security environment specification for key management. This again is unique, as other schemes provide usually only a card key. ITSO provides card, shell and product keys;
• It provides the security architecture for both the card and back office transactions necessary for the secure transmission of data amongst interoperable schemes. This includes the architecture for the authority levels of operators' points of service. It enables interoperability;
• It allows non-transport applications to sit alongside the ITSO application on the card or to sit inside the ITSO application as 'private' applications using data structures that are not defined in ITSO but utilising all the ITSO facilities, such as the security environment;
• ITSO is mandated by the DfT for any smartcard scheme requiring financial support from them;
• ITSO is highly recommended by e-gov for ticketing and would have had a higher standing if there had been active schemes at the time of recommendation.

Most of the schemes being implemented are schemes where the card is issued for concessionary travel, and Free Local Concessionary Travel, which was announced in the last Budget, has coincidentally encouraged more schemes to consider smartcards (increased risk of fraudulent use that can only be resolved by the use of smartcards). Free Concessionary Travel, should this be extended nationwide (as per Scotland and Wales) can only be achieved if those smartcards provide that necessary interoperability through an industry specification. ITSO is that standard specification.

ITSO as a specification is unique in terms of interoperability, and it is the range of cards that is both impressive and gives schemes enormous potential – ranging from small memory low cost cards through some of the ones we have known for some years, such as Mifare, Desfire, JCOP and Calypso, to the top end microprocessor cards. This gives scheme designers a wider choice of cards to suit their application, which may even include a number of types within one scheme. For example, a campus may choose to use a Mifare 4K or even higher for its students to cater for the core applications such as transport, cashless environment, library, leisure and access. But for the outside visitor who comes to a two day course, perhaps a low cost card will identify them and give them free lunch.

The same type of example could apply in, say, a local authority. Residents get a more powerful card with multiple services on it; tourists have simpler cards. For the one-off event, such as a concert in the park, residents could have their ticket added to their card whilst 'in-comers' would be given a low cost card just for the event.

But is it a card? To be politically correct, CEN now refers to Customer Media – so it is anything you can put a chip into. We have already seen watches used on the Hong Kong Metro to great success, but the obvious candidate is the mobile phone. Nokia (amongst others) have a model with a built-in chip that can 'impersonate' a number of the Customer Media definitions in ITSO.

That is the end of our journey so far, but really we have just reached the first interchange (sorry!). I can see so many strands in the smartcard world coming together now –and I do believe that ITSO was the (unknowing) catalyst.

For more details of ITSO, please visit the ITSO website on www.ITSO.org.uk, or contact us at [e-mail]

Peter Stoddart is an Independent Smartcards and Business Development Consultant, previously contracted as ITSO General Manager during the development period, now contracted as Head of Marketing. Peter is also joint partner in SEDNA – a consultancy aimed at helping all to implement the interoperable dream.

[garth] 22/11/2006 12:23

Just looking back over the last announcement from SMRT - I had read it as being an ITSO contract. But looking again the NOVACARD element (1-3 million cards) is described as 'multefile'. That might imply greater margin for Ecebs?

The Aberdeen council element is definitely ITSO and there is more background info available here:

[garth] 22/11/2006 11:12

This is the initial framework agreement from this summer. Source ERG website:

Date Of Media Release 09/05/2006
Title ERG Transit Systems Selected as Preferred Supplier of Electronic Ticket Machines to Stagecoach Scotland
Contact Glen Smith
Phone [phone]
Fax [phone]
Email [e-mail]
Division ERG Group

--------------------------------------------------------------------------------
ERG Transit Systems Selected as Preferred Supplier of Electronic Ticket Machines to Stagecoach Scotland
ERG Transit Systems (UK) Ltd announced today that it has been selected as preferred supplier by Stagecoach to supply ERG's ITSO conditionally certified fare collection solution for Stagecoach bus operations in Scotland, in a deal expected to be worth more than £2.3 million.

After an extensive appraisal process of all potential vendors, ERG's TP5000 Electronic Ticketing Machine and TRACS Depot software, including wireless LAN capability, were selected.

In late 2005 ERG was included in the framework agreement by the Scottish Executive to be an official supplier of ticketing equipment to operators taking part in the Scottish National Concessionary Travel Scheme.

"I am delighted with this news so soon after the announcement concerning our conditional ITSO certification. We will continue to provide the highest level of service and support as a key supplier to Stagecoach in Scotland", said Jay Prothero, Managing Director of ERG Transit Systems (UK) Ltd.

The roll out of approximately 1,600 ticket machines and 40 depots will take place across Scotland during the remainder of 2006.

[garth] 22/11/2006 11:04

Sorry WJ, its just Scotland again ;0) But it is to be rolled out right across Scotland:

New high-tech equipment for Scotland's bus fleet

Publisher: Ian Morgan
Published: 07/11/2006

The technology could soon be
rolled out across Scotland A pilot of new high-tech equipment for Scotland's bus fleet has been launched in Shetland.

The new ticketing machines on mainline buses will require cardholders to place their smartcards on a machine reader instead of the previous 'show and go' process.

Once trialled in Shetland the technology will roll out across Scotland, with the aim of paving the way for a system of having just one smartcard usable on all forms of transport.

The introduction of the new technology will be a world first - the first scheme of its kind to be introduced into an entire country rather than a city.

The only similar schemes in scale are in cities such as Hong Kong and London.

Transport Minister Tavish Scott said: "This devolved government is committed to improving public transport across Scotland. We want more frequent and reliable public transport services, equipped with the very latest in technology.

"Last week, I launched WiFi internet technology on our trains, and this week, I am pleased to see the pilot of new high tech equipment on our buses.

"This technology will improve efficiency and tackle potential fraud. The smartcard systems being tested on Shetland have the potential to cut costs, and in the future we hope to see passengers using just one card to access all forms of public transport. That is great news for people across the country."

Councillor Jim Irvine, Chairman of the Shetland Transport Partnership said: "Once again this re-affirms Shetland's ability to be at the forefront of transport developments and technology, meeting National initiatives and ensuring accessible and affordable local transport services are provided."

The equipment is initially for use with the older and disabled person's concessionary travel scheme but in the future will also be used for the younger person's concessionary fares scheme.

Alongside the trial of electronic ticket machines on buses, Shetland will also be carrying out a live proving trial of new back office technology which will enable concessionary data to be transferred via a bus operators back office to Transport Scotland.

Shetland was chosen because it is a self contained area ideal to test the technology and systems, before it is rolled out to larger areas of the country. Shetland Islands Council's chosen ETM supplier, ERG, was also the first of the four ETM suppliers ready to start testing in a live environment.

[garth] 22/11/2006 09:57

Pyman,

thanks for coming back and sharing that - its nice to hear it from the horses mouth so to speak. I think there are quite few little things going on that they have a finger in.... As the original article said - the aim is to roll out nationally.

You've done well with IGP. All the best with them both!

Kind regards,

G.

[pyman] 22/11/2006 09:47

garth. yu are absolutely correct re erg contract- just heard back from smrt and they are delighted with the erg contract as ecebs participate. Very happy holding both smrt and IGP for the the next 2 years.

[garth] 21/11/2006 13:17

WJ,

when I spoke to David Braddock earlier this year he stated that the massive uplift in forecasts for 2008 was because that was the point at which the royalties on all of their development work would begin to flow in. Now I have no idea what those royalties relate to.

WRT biometrics, Multefile is already used on an ICAO compliant MULTOS based smart passport and they are involved in the voice-rec VOCALID project for Card authentication.

G.

[wjccghcc] 21/11/2006 12:49

I don't disagree with you Colsmith. I suppose what I'm looking for is something to convince me SMRT can be a big player outside Scotland with the commensurate increase in revenue and, with operational gearing, multiple in profits.

I built up a large stake in IGP over the last 18 months because (1) Predicted 5x growth in smart card convergence market in 3 years (2) Their OEM partner list read like a who's who of the smart card and security industry (3) Their revenue is on a per card issued license basis.

I know SMRT receive revenue per ISAM but their margins must be pretty low on those. Otherwise, most of their contracts seem to be fixed price/consultancy based. Where do you see the operational gearing kicking in?

[colsmith] 21/11/2006 11:47

WJ - take your point implicitley advising on competiton; however, this market will only flourish with many vendors using standards developed interperable protocols; so surley the interesting aspect for us (accepting ecebs wont be the only product)is that the market size may well be huge permitting many compnaies to feed off it; and as any market, which is not supportrd by a monopoly, the winners will be those who can convince the user community thier'has an advantage over others - such as credible cost, facilties and software properly tested and maintained. (MSFT would have lost out hands down if it hadn't the monopoly advantage of first to product - users were/are the test bed). We have interoperable standards of course - so the base is in place and ecebs is an early mover in product, standrds and as we see from below R&D for the next step, which may come quicker than we think.

The link with Glasgow Caledonian I suggest is a relevent one for anyone interested in this company as biometrics seem the next step to ensure only the "owner" of the card can use it. The UK ain't good at much these days in product (City aside) but its academic establishment properly linked to commerce can win out - ARM being an example. Extract from garth's in this respect is interesitng at least I suggest it is:
------
"Ecebs found the process very straightforward and used the KTP structure to sponsor research at Glasgow Caledonian on the use of biometrics as a more sophisticated smartcard security system than chip-and-pin. Ecebs was so pleased with the outcome of the KTP that it is now looking at ways to expand the relationship with Glasgow Caledonian."

[garth] 21/11/2006 11:05

WJ,

I did track that down at one point but can't remember. I'll try to check at some point.

G.

[wjccghcc] 21/11/2006 10:40

Garth, all the major smartcard companies offer smartcards which can be updated in situ now. However the cryptographic software contract is nice.

Do you know who actually provides the current Oyster cards?

[garth] 21/11/2006 10:35

Col,

One of the important aspects of Multefile is the ability to add, edit and remove applications after issue with no need to recall the cards. In that respect they become future-proof and are extrememly synergistic for Councils (who have also been told that they have to adopt ITSO) We already know that Ecebs have been in library card and car parking trials.

G.

[colsmith] 21/11/2006 10:05

garth - thanks comment on other thread. Agree the fire is getting hotter for this.

[colsmith] 21/11/2006 09:45

Garth - looks like another smoke signal and envelopes ecebs. The two below (one from each of the reports) seem to suggest an interesitng interdependency:

- "The trial will initially include an Oyster card, parking and leisure centre applications but over time we will be able to download new applications to the card." and

"an initiative to turn the London Transport Oyster Smartcard into an 'open system' capable of a wider set of applications."

PS - new applications should of course be seen as software generation updates - not much software developed that doesn't need updates for bug fixes or enhancement. So this is a crucial feature of any smartcard other wise it ain't so smart.

[garth] 21/11/2006 09:34

Some news just out on a "Super-Oyster" ;0)

What do you make of these two items read together?

"Published: 18/11/2006 12:00 AM (UAE)

Oyster 'supercard' trials next year
Evening Standard



London: A card dubbed "super- Oyster" because it can be used to pay for parking and other council services across London is to be launched next year.

It will work in the same way as the existing Oyster travel card and councils supporting the scheme will simply have to install a card reader on parking meters and at leisure centres to allow people to pay for services.

The card will also be able to be used as proof of age, to pay for entry to some events as well as travel and will be linked to supermarket loyalty schemes.

It is to be tested in Kingston in January and 10 boroughs will be signed up to it before the end of next year, it was announced.

"The idea is to have a single, pan-London card," said Gregory Everett of London Connect, the Greater London Authority and council-funded project behind the scheme.

"A lot of councils and organisations are working on smartcards for applications such as parking and access to libraries and leisure centres. We want to bring them all together.

"The trial will initially include an Oyster card, parking and leisure centre applications but over time we will be able to download new applications to the card."

One side of the card will be used for its applications and the other will have a picture and details of the owner.

London Connect hopes to sign up pubs and clubs to use the card as proof of customers' age and new applications, such as tickets to the Olympics, will be added in time."



And:

Ecebs
6.45 Founded in 2000, Ecebs is an independent specialist smartcard software company based in East Kilbride. RBS is a major customer and the two entities are partners in the ITSO (Integrated Transport Smartcard Organisation) consortium, an initiative to turn the London Transport Oyster Smartcard into an 'open system' capable of a wider set of applications.
Ecebs has won the contract from the Department for Transport to develop the cryptographic software and RBS will act as guardian of the security keys.
6.46 Ecebs undertakes 80-90% of its own R&D but has developed a close link with Glasgow Caledonian University through a Knowledge Transfer Partnership (KTP). The arrangement was brokered by the West of Scotland KTP Advisor who heard of Ecebs through the Local Enterprise Company. Ecebs found the process very straightforward and used the KTP structure to sponsor research at Glasgow Caledonian on the use of biometrics as a more sophisticated smartcard security system than chip-and-pin. Ecebs was so pleased with the outcome of the KTP that it is now looking at ways to expand the relationship with Glasgow Caledonian."

[garth] 21/11/2006 09:33

Thanks Col. Some news just out on a "Super-Oyster" ;0)

What do you make of these two items read together?

"Published: 18/11/2006 12:00 AM (UAE)

Oyster 'supercard' trials next year
Evening Standard



London: A card dubbed "super- Oyster" because it can be used to pay for parking and other council services across London is to be launched next year.

It will work in the same way as the existing Oyster travel card and councils supporting the scheme will simply have to install a card reader on parking meters and at leisure centres to allow people to pay for services.

The card will also be able to be used as proof of age, to pay for entry to some events as well as travel and will be linked to supermarket loyalty schemes.

It is to be tested in Kingston in January and 10 boroughs will be signed up to it before the end of next year, it was announced.

"The idea is to have a single, pan-London card," said Gregory Everett of London Connect, the Greater London Authority and council-funded project behind the scheme.

"A lot of councils and organisations are working on smartcards for applications such as parking and access to libraries and leisure centres. We want to bring them all together.

"The trial will initially include an Oyster card, parking and leisure centre applications but over time we will be able to download new applications to the card."

One side of the card will be used for its applications and the other will have a picture and details of the owner.

London Connect hopes to sign up pubs and clubs to use the card as proof of customers' age and new applications, such as tickets to the Olympics, will be added in time."



And:

Ecebs
6.45 Founded in 2000, Ecebs is an independent specialist smartcard software company based in East Kilbride. RBS is a major customer and the two entities are partners in the ITSO (Integrated Transport Smartcard Organisation) consortium, an initiative to turn the London Transport Oyster Smartcard into an 'open system' capable of a wider set of applications.
Ecebs has won the contract from the Department for Transport to develop the cryptographic software and RBS will act as guardian of the security keys.
6.46 Ecebs undertakes 80-90% of its own R&D but has developed a close link with Glasgow Caledonian University through a Knowledge Transfer Partnership (KTP). The arrangement was brokered by the West of Scotland KTP Advisor who heard of Ecebs through the Local Enterprise Company. Ecebs found the process very straightforward and used the KTP structure to sponsor research at Glasgow Caledonian on the use of biometrics as a more sophisticated smartcard security system than chip-and-pin. Ecebs was so pleased with the outcome of the KTP that it is now looking at ways to expand the relationship with Glasgow Caledonian."

[colsmith] 20/11/2006 19:42

Seems there's a growing interest in card use for simple (what does that mean?)purchases!
------------------
U.S. Bank to Launch Contactless Credit Card Pilot in Denver


A group of U.S. Bank customers in the Denver area will soon be able to
use a new "contactless" feature with their U.S. Bank Visa Credit Cards that allows them to quickly pay for purchases by holding their card in very close proximity to a secure reader at checkout instead of swiping it or handing it to a cashier.


The new contactless technology makes it easy for consumers to use their
credit cards to quickly and securely pay for simple purchases – such as fast food, movie tickets, or convenience items – and carry less cash. More than 600 merchant locations in the Denver area are ready to accept payments with contactless cards. Consumers can identify whether a merchant has a contactless reader by the symbol on the machine.


Merchants like contactless cards because it expedites the transaction
and allows their employees to focus more on customer service. Visa
estimates that the average transaction is 25 percent faster than using
cash.


"U.S. Bank, through its partnership with Visa,
has long been at the forefront of innovation in the area of cards and
payments. This latest innovation and introduction of contactless is a
reflection of our consumer and merchant customers'
desire to pay and go quickly and securely,"
said Patrick Coll, executive vice president of retail payments at U.S.
Bank. "We anticipate enthusiastic acceptance
in Denver and look forward to expanding the program."


Cards must be held within two inches of the reader to be accepted and
data is protected with encryption technology that reduces the risk of
fraud. Contactless cards will carry the same zero liability protection
and will have the same behind-the-scenes fraud monitoring that is
standard with Visa credit cards.


Customers in the pilot will receive their new contactless credit cards
in November. Customers who receive the contactless card will also be
able to continue swiping the card at merchants that don't
have the contactless feature. U.S. Bank expects to make the feature
available to more of its credit card customers in the near future.


U.S. Bancorp (NYSE:USB), with assets of $217 billion, is the 6th largest
financial holding company in the United States. The company operates
2,467 banking offices and 4,943 ATMs, and provides a comprehensive line
of banking, brokerage, insurance, investment, mortgage, trust and
payment services products to consumers, businesses and institutions.
U.S. Bancorp is the parent company of U.S. Bank. Visit U.S. Bancorp on
the web at www.usbank.com.

[garth] 20/11/2006 07:32

For anyone wanting to do some detail reading on the UK National ID card. Ecebs are listed as one of the companies involved in the consultation process as part of the Security Systems seminar.

House of Commons Science and Technology Committee
Identity Card Technologies:
Scientific Advice, Risk and Evidence
Sixth Report of Session 2005–06

[garth] 19/11/2006 19:54

Ecebs have won a contract from the Department of Transport to convert Oyster to a more open system that would allow the addition of other applications....

"Patterns in business R&D
A series of working papers prepared for the Scottish Science Advisory Committee
in support of its study R&D: Science Base to Business
October 2006

Example 1: Ecebs
6.45 Founded in 2000, Ecebs is an independent specialist smartcard software company based in East Kilbride. RBS is a major customer and the two entities are partners in the ITSO (Integrated Transport Smartcard Organisation) consortium, an initiative to turn the London Transport Oyster Smartcard into an 'open system' capable of a wider set of applications.
Ecebs has won the contract from the Department for Transport to develop the cryptographic software and RBS will act as guardian of the security keys.
6.46 Ecebs undertakes 80-90% of its own R&D but has developed a close link with Glasgow Caledonian University through a Knowledge Transfer Partnership (KTP). The arrangement was brokered by the West of Scotland KTP Advisor who heard of Ecebs through the Local Enterprise Company. Ecebs found the process very straightforward and used the KTP structure to sponsor research at Glasgow Caledonian on the use of biometrics as a more sophisticated smartcard security system than chip-and-pin. Ecebs was so pleased with the outcome of the KTP that it is now looking at ways to expand the relationship with Glasgow Caledonian."



G.

[garth] 19/11/2006 19:51

Old news. Tried to dig around to get any feedback but couldn't find anything:

07/09/2006
ITI TECHMEDIA TO REVEAL FUTURE OF BRAND PROTECTION TECHNOLOGY AT PISEC 06 EVENT

Machine-readable secure tagging R&D programme investigates what brand managers need to tackle forgery, fakes and fraud

ITI Techmedia today announced that Dr Scott Freeborn, R&D Programme Manager, is confirmed to speak on brand protection for brand owners at PISEC 06, to be held in Barcelona on 3 and 4 October 2006.

Dr. Freeborn will discuss new developments in machine-readable security tagging and authentication technology, focusing on the key requirements of brand protection based on ITI Techmedia's extensive research with c60 global brand owners.

As the Programme Manager for ITI Techmedia's £5.2m machine-readable secure tagging (MST) R&D programme and an expert in optoelectronics and laser engineering, Dr Freeborn has a strong track record in technology R&D and commercialisation, having worked for organisations such as Alcatel Optronics and Heriot-Watt University.

The 7th PISEC event, this year titled 'Counterfeit Business: Fighting fraud, fakes and forgery' is a major two day conference and exhibition exploring opportunities and threats in the global product and image security marketplace. Dr Freeborn's presentation to the PISEC 06 audience takes place on Day 1 of the conference at 4.25 pm and forms part of the session devoted to creating a climate for active product authenticity.

ITI Techmedia, the organisation which invests in technology-based R&D to develop market-driven intellectual property for the benefit of Scotland, initiated the MST R&D programme to address the global market need for brand protection systems and solutions. The programme's aim is to develop a brand protection system capable of providing secure authentication and traceability of products at multiple locations in the supply chain.

The programme is fully funded by the ITI with an investment of £5.2m over two years and has used the services of more than 15 expert organisations, including Axess Technologies, Plexus, Mindhseet and Ecebs.

[garth] 17/11/2006 00:42

Smartcard update
"SmartConnect has issued its first site licence outside local government.
In a significant vote of confidence in the versatility of the registration tool, Sunderland University has signed a SmartConnect Site Licence agreement, and from the Autumn intake 2006, has registered new students using SmartConnect.

Bracknell Forest BC, owner of the SmartConnect product developed by the National Smartcard Project, has also signed an Integrator Licence with e-Cebs, which plans to develop an integrated SmartConnect/Multefile offering. Multefile is an on-card management system allowing issued cards to be re-configured or to have stored data amended or changed. "

[niggle] 16/11/2006 18:15

Sorry mate, I couldn't resist! :O)