- Email: [email protected]
…and Turks with mobile signature programme
news sim
in brief • A new report on smart cards and healthcare has been released by the Mercator Advisory Group. In ‘Smart Cards and Healthcare: An Opportunity for Payments’ Mercator Advisory Group examines various examples of healthcare smart card programs in France and Germany. In addition, a US-based pilot that involved two-factor patient authentication is reviewed as well as a current initiative to bring smart cards to healthcare in order to create a regional medical network. The report also discusses smart card manufacturers who are currently engaged in the healthcare market. • RSA and Hirsch Electronics are joining forces to converge their product lines. The RSA Card Manager smart card management solution, Hirsch’s Velocity physical access control system (PACS) and SCM Microsystems Physical Access Control Terminals (PACT) will be consolidated onto a single device designed to enable employees to access both secured areas and electronic resources. • The MULTOS Consortium has announced the entry of MULTOS into the US government market with the Hitachi dual-interface MULTOS smart card with StepNexus PIV Application. The MULTOS platform is already in use in several biometric ID card implementations worldwide, including the Hong Kong National ID, Japanese Residential ID and Turkish Military ID. Hitachi is the first MULTOS implementer to receive certification for FIPS 140-2 from the US government. • Unisys is to deploy 28,000 eToken smart cards supplied by Aladdin Knowledge Systems. Scheduled for eventual deployment at 300 of Unisys’ worldwide facilities, the smart cards will be used to provide employees with integrated physical/data access. The cards will allow employees to gain physical access to offices while also using the same eToken smart card for Windows Network Logon. • Collis and Aspects Tools have opened an office in Boston. Collis America has been established as a rapidly growing global customer base sees the need for a central office to service the strong growth and demand in the US and Canada. Collis will be providing testing tools, consultancy and training with a focus on smart card based, electronic transactions and identification, EMV, e-Passport and mobile technology to the US and Canadian markets. Aspects Tools, a Collis Company, is Collis’ mobile competence centre for all products and services offered to the mobile industry.
6
Gemalto provides Belgians with SMS payment method… French smart card manufacturer Gemalto has announced it is providing Belgian mobile operator BASE with a solution that allows its subscribers to perform a secure payment by sending an SMS. The company says this service is an extremely convenient alternative payment method, as it enables consumers to pay with their mobile phone anytime, anywhere, quickly and easily. Gemalto supplied BASE with a mobile payment application compatible with third generation SIM cards, incorporating m-banxafe technology designed by Banksys, the company behind the authorization, security and guarantee of electronic payments in Belgium. Gemalto also provided the specific personalization services required to guarantee the highest levels of security for SMS-based transactions. The service went live on 20 March 2007 and all new Base subscribers will be issued with the m-banxafe-enabled SIM card. This sort of mobile-payment capability targets all kinds of practical services, the supplier claims, such as home deliveries, taxi rides or baby-sitting. Through an easy-tonavigate menu, the payee enters a payment request into their mobile phone. The payer receives this request, specifying the amount and the name of the payee, on the handset screen and accepts the transaction by entering the secret code selected at service activation. Then both the customer and the merchant receive an SMS confirming the transaction. The m-banxafe technology enables a link between the SIM card and the subscriber’s banking card and account. During the activation process, the customer selects a mobile payment PIN code through the menu on the mobile phone. The subscriber then inserts their banking card into a point of sales terminal at a BASE shop or into an ATM. The subscriber then selects the activation option of the menu to create the link between his banking details and the PIN code on the SIM card.
…and Turks with mobile signature programme In another SIM-related deal, Gemalto announced that Turkcell, Turkey’s biggest mobile operator with more than 30 million subscribers, has selected its SIM-based identification solution to implement a largescale mobile signature program.
The solution will allow Turkcell subscribers to access services that require strong authentication, such as internet banking or e-government applications, and use their mobile phone to generate a legally binding electronic signature. Turkcell’s mobile signature program, claimed to be the largest in the world, will allow users to perform secure online transactions through their handset, anytime, anywhere. From their mobile phone, home PC, or from an Internet café, the subscriber accesses, for instance, the banking site and enters their customer ID for login or giving a transaction order. The bank then sends an authentication request that prompts the user to enter the secret code they chose when they activated the mobile signature service, using their GSM phone. The SIM card then checks the secret code, creates the digital signature and sends it back to the bank to enable the corresponding transaction on the banking account. Gemalto says this sort of two-factor authentication is secure and that Turkcell’s m-signature program is designed to work with any digital service or application that requires legally binding identity confirmation and approval. The program is based on qualified digital certificates by E-Guven, a Turkish Certificate Authority. Digital certificates are created under Turkish Digital Signature Law that is also in accordance with EU’s Digital Signature Directive. Gemalto says that upon the operator’s activation request, the SIM card itself creates the secret keys. This on-board key generation (OBKG) process is performed after personalization and issuance to the consumer. It allows Turkcell customers to generate secret keys based on their own secret code. Contact: Aline Borne at Gemalto, Tel: +33 1 55 01 51 05, Email: [email protected]
epassport/id card
Macedonia to roll out 1.5 m ePassports by 2009 says G&D Macedonia has become one of the first nonEU countries to equip its population with highly secure travel documents based on secure contactless chip technology. A total of 1.5 million passports should be issued by the end of 2009. A total of 45 data capturing and entry stations in 30 registration offices located throughout the country are now accepting applications from nationals for the ICAO and EU-compliant ePassports. Besides these 45 permanent stations, five mobile data entry stations will be supplied by Giesecke & Devrient (G&D). Like the fixed
Card Technology Today • April 2007
in brief • A new report on smart cards and healthcare has been released by the Mercator Advisory Group. In ‘Smart Cards and Healthcare: An Opportunity for Payments’ Mercator Advisory Group examines various examples of healthcare smart card programs in France and Germany. In addition, a US-based pilot that involved two-factor patient authentication is reviewed as well as a current initiative to bring smart cards to healthcare in order to create a regional medical network. The report also discusses smart card manufacturers who are currently engaged in the healthcare market. • RSA and Hirsch Electronics are joining forces to converge their product lines. The RSA Card Manager smart card management solution, Hirsch’s Velocity physical access control system (PACS) and SCM Microsystems Physical Access Control Terminals (PACT) will be consolidated onto a single device designed to enable employees to access both secured areas and electronic resources. • The MULTOS Consortium has announced the entry of MULTOS into the US government market with the Hitachi dual-interface MULTOS smart card with StepNexus PIV Application. The MULTOS platform is already in use in several biometric ID card implementations worldwide, including the Hong Kong National ID, Japanese Residential ID and Turkish Military ID. Hitachi is the first MULTOS implementer to receive certification for FIPS 140-2 from the US government. • Unisys is to deploy 28,000 eToken smart cards supplied by Aladdin Knowledge Systems. Scheduled for eventual deployment at 300 of Unisys’ worldwide facilities, the smart cards will be used to provide employees with integrated physical/data access. The cards will allow employees to gain physical access to offices while also using the same eToken smart card for Windows Network Logon. • Collis and Aspects Tools have opened an office in Boston. Collis America has been established as a rapidly growing global customer base sees the need for a central office to service the strong growth and demand in the US and Canada. Collis will be providing testing tools, consultancy and training with a focus on smart card based, electronic transactions and identification, EMV, e-Passport and mobile technology to the US and Canadian markets. Aspects Tools, a Collis Company, is Collis’ mobile competence centre for all products and services offered to the mobile industry.
6
Gemalto provides Belgians with SMS payment method… French smart card manufacturer Gemalto has announced it is providing Belgian mobile operator BASE with a solution that allows its subscribers to perform a secure payment by sending an SMS. The company says this service is an extremely convenient alternative payment method, as it enables consumers to pay with their mobile phone anytime, anywhere, quickly and easily. Gemalto supplied BASE with a mobile payment application compatible with third generation SIM cards, incorporating m-banxafe technology designed by Banksys, the company behind the authorization, security and guarantee of electronic payments in Belgium. Gemalto also provided the specific personalization services required to guarantee the highest levels of security for SMS-based transactions. The service went live on 20 March 2007 and all new Base subscribers will be issued with the m-banxafe-enabled SIM card. This sort of mobile-payment capability targets all kinds of practical services, the supplier claims, such as home deliveries, taxi rides or baby-sitting. Through an easy-tonavigate menu, the payee enters a payment request into their mobile phone. The payer receives this request, specifying the amount and the name of the payee, on the handset screen and accepts the transaction by entering the secret code selected at service activation. Then both the customer and the merchant receive an SMS confirming the transaction. The m-banxafe technology enables a link between the SIM card and the subscriber’s banking card and account. During the activation process, the customer selects a mobile payment PIN code through the menu on the mobile phone. The subscriber then inserts their banking card into a point of sales terminal at a BASE shop or into an ATM. The subscriber then selects the activation option of the menu to create the link between his banking details and the PIN code on the SIM card.
…and Turks with mobile signature programme In another SIM-related deal, Gemalto announced that Turkcell, Turkey’s biggest mobile operator with more than 30 million subscribers, has selected its SIM-based identification solution to implement a largescale mobile signature program.
The solution will allow Turkcell subscribers to access services that require strong authentication, such as internet banking or e-government applications, and use their mobile phone to generate a legally binding electronic signature. Turkcell’s mobile signature program, claimed to be the largest in the world, will allow users to perform secure online transactions through their handset, anytime, anywhere. From their mobile phone, home PC, or from an Internet café, the subscriber accesses, for instance, the banking site and enters their customer ID for login or giving a transaction order. The bank then sends an authentication request that prompts the user to enter the secret code they chose when they activated the mobile signature service, using their GSM phone. The SIM card then checks the secret code, creates the digital signature and sends it back to the bank to enable the corresponding transaction on the banking account. Gemalto says this sort of two-factor authentication is secure and that Turkcell’s m-signature program is designed to work with any digital service or application that requires legally binding identity confirmation and approval. The program is based on qualified digital certificates by E-Guven, a Turkish Certificate Authority. Digital certificates are created under Turkish Digital Signature Law that is also in accordance with EU’s Digital Signature Directive. Gemalto says that upon the operator’s activation request, the SIM card itself creates the secret keys. This on-board key generation (OBKG) process is performed after personalization and issuance to the consumer. It allows Turkcell customers to generate secret keys based on their own secret code. Contact: Aline Borne at Gemalto, Tel: +33 1 55 01 51 05, Email: [email protected]
epassport/id card
Macedonia to roll out 1.5 m ePassports by 2009 says G&D Macedonia has become one of the first nonEU countries to equip its population with highly secure travel documents based on secure contactless chip technology. A total of 1.5 million passports should be issued by the end of 2009. A total of 45 data capturing and entry stations in 30 registration offices located throughout the country are now accepting applications from nationals for the ICAO and EU-compliant ePassports. Besides these 45 permanent stations, five mobile data entry stations will be supplied by Giesecke & Devrient (G&D). Like the fixed
Card Technology Today • April 2007