- Email: [email protected]
Lockheed Martin wins US$70m TWIC contract
news id card
in brief • Infineon Technologies says it has been providing contactless chips for one of the world’s largest contactless payment programs initiated by MasterCard Worldwide. Infineon supplies its highly-secure contactless smartcard microcontrollers to most of MasterCard’s PayPass deployments in 13 countries worldwide, including Taiwan, Malaysia, Australia and the US. Currently, there are more than two billion debit, credit and other payment cards in circulation worldwide. In 2006, at least 400 million chipbased payment cards were expected to be issued on a worldwide basis with MasterCard and Visa programs alone accounting for about 17 million contactless chip cards. According to market research company Frost & Sullivan, the conventional contactless payment smart card market is expected to see a compound annual growth rate of 63% over the next five years. • One of the Netherlands’ largest banks plans to launch a trial allowing 100 supermarket shoppers to use contactless mobile phones to pay for purchases and store cash discounts electronically. Rabobank and its mobile phone network unit, Rabo Mobiel, along with the Netherlands largest mobile network operator KPN, plans to launch the trial in the third quarter with other partners, including the C1000 supermarket chain. The phones will have a contactless chip that supports Near Field Communication technology. Rabo Mobiel is a mobile virtual network operator the bank launched recently to promote mobilebanking services. The trial will uniquely allow users to store their savings from merchant discounts on the phones themselves. These savings can be deposited into the customers’ Rabobank accounts or used for paying for groceries or buying ring-tones, wallpapers or other mobile-phone media, according to RFID Platform Nederland. • HID Global has announced the launch of its Crescendo series smart cards designed to provide out-of-the box, standards-compliant support for logical and physical access control applications. Crescendo supports Microsoft Identity Lifecycle Manager 2007 (ILM 2007) and the Windows Smart Card Framework, enabling organizations to deploy, configure, manage, maintain, and audit smart card-based infrastructures. Designed to meet the growing demand for a single card for logical and physical access control, Crescendo smart cards incorporate HID’s industry standard proximity technology (HID or Indala), iCLASS, and other 13.56 MHz contactless smart card technologies. The cards can be personalized with employee name, photo, and other identification information. When using Crescendo smart cards there is no additional per-seat middleware license and the cards are supplied pre-initialized with the required on-card software, including all required drivers and middleware.
4
Conservatives pledge to scrap ID card The UK’s Conservative party has said it will immediately scrap the proposed national ID card scheme if it wins at the next general election. The party said that the current Labour government could create financial dangers if it signs contracts to set up the ID card scheme when it faces cancellation if the Conservatives are returned to power. In a formal letter to cabinet secretary Gus O’Donnell, the Conservatives asked what provision, if any, has been made in the relevant contractual arrangements to protect the Government – and public funds – against the costs that would be incurred as a result of early cancellation of the scheme. Additionally the Conservatives said they have fired off a similar letter to likely major contractors, warning them of the Party’s intentions. Defending the ID cards scheme Home Office minister Liam Byrne said that cancelling plans for ID cards would render Britain “defenceless in the war against illegal immigrants”. Byrne told MPs that 70% of the cost of introducing the ID card system would have to be spent on new biometric passports. He said: “If we were to cancel the system that underpins
Foreign nationals to need biometric ID in UK A new bill has been published in the UK aimed at helping Immigration Officers deter, detect and deport those breaking the rules and ensure that foreign nationals in the UK play their part in upholding the rules by holding biometric-based smart ID cards. The bill is part of an ongoing reform of the Immigration and Nationality Directorate that will ultimately see the directorate spin off from the Home Office as a more independent agency, called the Border and Immigration Agency (BIA). Among numerous additional powers, the bill places more obligations on foreign nationals who are benefiting from the right to live in the UK by requiring them to apply for and carry a biometric immigration ID. This, it is hoped, would help the government prevent fraud and illegal employment, and make it harder for immigrants to adopt multiple identities. Immigrants who fail to acquire a biometric ID and keep it up to date could lose their right to live in the country, and face fines of up to £1000. Immigration Minister Liam Byrne said: “In the last six months I have met hundreds of front line staff and these are the measures they say they need. They don’t stand alone. They are part of a radical shake-up of immigration, which includes £100 million extra for enforcement, new technology to count people in and out of Britain and new biometric ID cards for foreign nationals.”
ID cards we would be cancelling the system that underpins biometric visas, ID cards for foreign nationals and biometric passports too.” Byrne added that the ID scheme would disrupt terrorism activities, saying al Qaeda training manuals instructed terrorist to adopt multiple identities.
epassports
UK ePassport project under scrutiny The UK’s National Audit Office (NAO) has issued a report on the introduction of ePassports by the country’s Identity and Passport Service (IPS). Parts of it make uncomfortable reading for the government, but on the positive side it does highlight that the project was delivered on time and on budget. According to the report, the IPS managed the implementation project successfully, delivering it within budget and to a timescale that ensured the UK’s continued participation in the US Visa Waiver Program. The report also acknowledges that UK ePassports meet international standards for ePassport design and have demonstrated their interoperability in international tests. On the negative side the report expressed concerns about the robustness of the chip unit. According to the report: “Although it has been tested in laboratory conditions, the ability of the chip unit to withstand real-life passport usage is unknown. The chip units have a two-year warranty but British ePassports are intended to last 10 years.” CTT has learned that a new chip contract with a second chip supplier is much tighter in terms of guarantees, although the exact terms of the new contract were not revealed.
worker id
Lockheed Martin wins US$70m TWIC contract The Department of Homeland Security (DHS) has awarded Lockheed Martin a US$70 million contract for the initial deployment of the Transportation Worker Identification Credential (TWIC) card. The smart card is designed to enhance port security by requiring all workers (estimated to be in the region of 750,000) to complete a security threat assessment and carry a biometric (fingerprint) credential before they are allowed unescorted access to secure areas of vessels and maritime facilities. Under the terms of the contract, Lockheed Martin will establish enrolment centres within close proximity of port facilities, where applicants will provide certain biographic information and fingerprints to conduct a
Card Technology Today • February 2007
news security threat assessment and produce the biometric credential. The threat assessment, conducted by the Transportation Security Administration (TSA), includes a check of criminal history, immigration, and intelligence databases. Once a worker successfully completes the threat assessment process, Lockheed Martin will issue the credential to the worker. A potential fly in the ointment could arise as one of the bidders – Integrated Biometric Technology (part of the L-1 group) – filed a formal protest to the Transportation Security Administration about the award of the contract. IBT said it feels it offered better services for the programme than Lockheed Martin. Robert LaPenta, CEO of L-1, said: “TSA must have misread key aspects of the proposal.” The final rule for the TWIC programme - which describes the enrolment process, disqualifying crimes, fees and other requirements for workers, port owners, and operators - was recently published in the Federal Register and becomes effective on 26 March 2007. At this time, TWIC enrolment will at select ports and will then proceed to ports throughout the nation over the next 15 months. The fee for obtaining a TWIC will be US$137.25 and will be valid for five years. This amount is below the estimate of $139 to $159 that the federal government had anticipated charging for the credential. Workers with current, comparable background checks including a hazardous materials endorsement on a commercial driver’s license, merchant mariner document or Free and Secure Trade (FAST) credential will pay a discounted fee of US$105.25. On 25 September 2008, all mariners and workers requiring unescorted access to secure areas will require a TWIC. Contact: TSA, Tel: +1 571 227 2829, www.tsa.gov/twic
id card
RAIC smart card now operational The Canadian Air Transport Security Authority (CATSA) has announced that its dual-biometric airport identification programme is now operational at Canada’s 29 largest airports. The programme includes the use of a Restricted Area Identity Card (RAIC) by approximately 100,000 airport personnel who work in restricted areas of the airports. These people include caterers, ground crews, maintenance workers, pilots and flight attendants. According to Jacques Duchesneau, CATSA president and CEO of CATSA: “CATSA is proud of this latest milestone in improving security. In partnership with Transport Canada and the airport authorities, we have created an
Card Technology Today • February 2007
innovative biometric program that leads the world in airport security for non-passengers.” The RAIC smart card stores the biometric fingerprint and iris templates and includes a tamper-proof hologram and printed expiry date. The smart card is one component of the project which also comprises fingerprint and iris readers and infrastructure linking the 29 airports to a secure central database. The Restricted Area Identity Card not only verifies that the person who was issued the card is the same person presenting the card at a restricted area access point in the airport, but it also verifies whether or not the card is still valid and that the individual has a current security clearance. An airport worker is granted a biometric smart card only after receiving security clearance from Transport Canada. Transport Canada conducts an extensive background check in cooperation with RCMP and CSIS. This initial phase has focused on areas within Air Terminal buildings. A second phase to address all other areas within the airport’s security perimeter, including vehicle gates, fixed base operations and tenant facilities, is being planned. To enter a restricted area, the airport worker swipes the RAIC in front of the reader, then uses either their fingerprint or iris. The iris or fingerprint must match the encrypted template embedded in the RAIC chip. The process reportedly takes three seconds. Before the introduction of the RAIC, restricted area passes were validated manually by a guard at the entrance of the secure zone. Contact: CATSA Tel: +1 613 998 4527, Web: www.catsa.gc.ca
nfc
NXP Semiconductors withdraws its DIOCTL proposal NXP Semiconductors has announced it is retracting its recent proposal to ETSI-SCP for a one-wire connection named DIOCTL. This decision means that SWP (Single Wire Protocol) is steadily becoming the de facto standard interface to link the SIM card and the NFC front end in the next generation of handsets. NXP made its announcement at ETSI SCP TEC#11 meeting in La Ciotat, France. NXP said: “As the co-inventor of Near Field Communication (NFC), NXP is extremely pleased to see strong market demand from telecom operators for the technology. Regarding this development, we expect a significant part of NFC mobile phone applications, such as payment and ticketing, to be based on the SIM-Card. “Concerning the connection between the SIMCard and the NFC chip, NXP has looked at many
in brief • Gemalto has completed the purchase from Leigh Mardon Group Pty Ltd of its 50% interest in LM Gemplus Pty Ltd, a joint venture the two companies set up in 2000 to address the Australian and New Zealand smart card markets. Gemalto plans to combine the LM Gemplus team with its existing wholly owned business to address the telecom, IT security and identity markets. Gemalto says its long standing relationship with Leigh Mardon will continue, with Leigh Mardon’s decision to select Gemalto as its strategic supplier of smart card modules for its banking business. Leigh Mardon, Australia’s leading provider of conventional magstripe banking cards and secure printing/logistics solutions, will be launching smart banking cards in Australia this year in response to Australian and New Zealand Banks indicating their intentions to transition to EMV. According to Richard Taylor, managing director, Leigh Mardon: “We welcome this opportunity to simplify the JV structure, while at the same time continue our relationship with Gemalto. This transaction enables both parties to focus on their core strengths.” • Nedbank, a leading bank in South Africa, is to provide its clients with high-end personal devices for secure online transactions. The USB token, supplied by Gemalto, embeds the software that automatically sets up once the user connects the device to their PC. Gemalto also supplies training services to support Nedbank in putting the solution into use and ensures its maintenance. Commercial rollout has already started and Nedbank corporate clients have been benefiting from secure access to financial services through the “Netbank Business” Internet channel since end 2006. Deployment of all 80,000 tokens will be completed over the first half of 2007. • On Track Innovations has announced that its new contactless reader, the Saturn 6000, has been approved by MasterCard after rigorous testing for the latest versions of PayPass: EMV M/Chip Version 1.3 and Magnetic Stripe Version 3.2 contactless payment programs which allows the reader to support the global contactless payments market. The reader is also approved for MasterCard PayPass ISO 14443 Implementation Specification, Version 1.1 required by MasterCard for all products starting this year. In addition, the supplier claims that the Saturn 6000 supports contactless payments programs from other major financial institutions, including Visa contactless program, ExpressPay from American Express and Discover Zip as well as programs for mass transit ticketing, MIFARE, loyalty, third party applications, and more. The reader can be placed on the countertop, it can be wall-mounted or it can lie flat.
5
in brief • Infineon Technologies says it has been providing contactless chips for one of the world’s largest contactless payment programs initiated by MasterCard Worldwide. Infineon supplies its highly-secure contactless smartcard microcontrollers to most of MasterCard’s PayPass deployments in 13 countries worldwide, including Taiwan, Malaysia, Australia and the US. Currently, there are more than two billion debit, credit and other payment cards in circulation worldwide. In 2006, at least 400 million chipbased payment cards were expected to be issued on a worldwide basis with MasterCard and Visa programs alone accounting for about 17 million contactless chip cards. According to market research company Frost & Sullivan, the conventional contactless payment smart card market is expected to see a compound annual growth rate of 63% over the next five years. • One of the Netherlands’ largest banks plans to launch a trial allowing 100 supermarket shoppers to use contactless mobile phones to pay for purchases and store cash discounts electronically. Rabobank and its mobile phone network unit, Rabo Mobiel, along with the Netherlands largest mobile network operator KPN, plans to launch the trial in the third quarter with other partners, including the C1000 supermarket chain. The phones will have a contactless chip that supports Near Field Communication technology. Rabo Mobiel is a mobile virtual network operator the bank launched recently to promote mobilebanking services. The trial will uniquely allow users to store their savings from merchant discounts on the phones themselves. These savings can be deposited into the customers’ Rabobank accounts or used for paying for groceries or buying ring-tones, wallpapers or other mobile-phone media, according to RFID Platform Nederland. • HID Global has announced the launch of its Crescendo series smart cards designed to provide out-of-the box, standards-compliant support for logical and physical access control applications. Crescendo supports Microsoft Identity Lifecycle Manager 2007 (ILM 2007) and the Windows Smart Card Framework, enabling organizations to deploy, configure, manage, maintain, and audit smart card-based infrastructures. Designed to meet the growing demand for a single card for logical and physical access control, Crescendo smart cards incorporate HID’s industry standard proximity technology (HID or Indala), iCLASS, and other 13.56 MHz contactless smart card technologies. The cards can be personalized with employee name, photo, and other identification information. When using Crescendo smart cards there is no additional per-seat middleware license and the cards are supplied pre-initialized with the required on-card software, including all required drivers and middleware.
4
Conservatives pledge to scrap ID card The UK’s Conservative party has said it will immediately scrap the proposed national ID card scheme if it wins at the next general election. The party said that the current Labour government could create financial dangers if it signs contracts to set up the ID card scheme when it faces cancellation if the Conservatives are returned to power. In a formal letter to cabinet secretary Gus O’Donnell, the Conservatives asked what provision, if any, has been made in the relevant contractual arrangements to protect the Government – and public funds – against the costs that would be incurred as a result of early cancellation of the scheme. Additionally the Conservatives said they have fired off a similar letter to likely major contractors, warning them of the Party’s intentions. Defending the ID cards scheme Home Office minister Liam Byrne said that cancelling plans for ID cards would render Britain “defenceless in the war against illegal immigrants”. Byrne told MPs that 70% of the cost of introducing the ID card system would have to be spent on new biometric passports. He said: “If we were to cancel the system that underpins
Foreign nationals to need biometric ID in UK A new bill has been published in the UK aimed at helping Immigration Officers deter, detect and deport those breaking the rules and ensure that foreign nationals in the UK play their part in upholding the rules by holding biometric-based smart ID cards. The bill is part of an ongoing reform of the Immigration and Nationality Directorate that will ultimately see the directorate spin off from the Home Office as a more independent agency, called the Border and Immigration Agency (BIA). Among numerous additional powers, the bill places more obligations on foreign nationals who are benefiting from the right to live in the UK by requiring them to apply for and carry a biometric immigration ID. This, it is hoped, would help the government prevent fraud and illegal employment, and make it harder for immigrants to adopt multiple identities. Immigrants who fail to acquire a biometric ID and keep it up to date could lose their right to live in the country, and face fines of up to £1000. Immigration Minister Liam Byrne said: “In the last six months I have met hundreds of front line staff and these are the measures they say they need. They don’t stand alone. They are part of a radical shake-up of immigration, which includes £100 million extra for enforcement, new technology to count people in and out of Britain and new biometric ID cards for foreign nationals.”
ID cards we would be cancelling the system that underpins biometric visas, ID cards for foreign nationals and biometric passports too.” Byrne added that the ID scheme would disrupt terrorism activities, saying al Qaeda training manuals instructed terrorist to adopt multiple identities.
epassports
UK ePassport project under scrutiny The UK’s National Audit Office (NAO) has issued a report on the introduction of ePassports by the country’s Identity and Passport Service (IPS). Parts of it make uncomfortable reading for the government, but on the positive side it does highlight that the project was delivered on time and on budget. According to the report, the IPS managed the implementation project successfully, delivering it within budget and to a timescale that ensured the UK’s continued participation in the US Visa Waiver Program. The report also acknowledges that UK ePassports meet international standards for ePassport design and have demonstrated their interoperability in international tests. On the negative side the report expressed concerns about the robustness of the chip unit. According to the report: “Although it has been tested in laboratory conditions, the ability of the chip unit to withstand real-life passport usage is unknown. The chip units have a two-year warranty but British ePassports are intended to last 10 years.” CTT has learned that a new chip contract with a second chip supplier is much tighter in terms of guarantees, although the exact terms of the new contract were not revealed.
worker id
Lockheed Martin wins US$70m TWIC contract The Department of Homeland Security (DHS) has awarded Lockheed Martin a US$70 million contract for the initial deployment of the Transportation Worker Identification Credential (TWIC) card. The smart card is designed to enhance port security by requiring all workers (estimated to be in the region of 750,000) to complete a security threat assessment and carry a biometric (fingerprint) credential before they are allowed unescorted access to secure areas of vessels and maritime facilities. Under the terms of the contract, Lockheed Martin will establish enrolment centres within close proximity of port facilities, where applicants will provide certain biographic information and fingerprints to conduct a
Card Technology Today • February 2007
news security threat assessment and produce the biometric credential. The threat assessment, conducted by the Transportation Security Administration (TSA), includes a check of criminal history, immigration, and intelligence databases. Once a worker successfully completes the threat assessment process, Lockheed Martin will issue the credential to the worker. A potential fly in the ointment could arise as one of the bidders – Integrated Biometric Technology (part of the L-1 group) – filed a formal protest to the Transportation Security Administration about the award of the contract. IBT said it feels it offered better services for the programme than Lockheed Martin. Robert LaPenta, CEO of L-1, said: “TSA must have misread key aspects of the proposal.” The final rule for the TWIC programme - which describes the enrolment process, disqualifying crimes, fees and other requirements for workers, port owners, and operators - was recently published in the Federal Register and becomes effective on 26 March 2007. At this time, TWIC enrolment will at select ports and will then proceed to ports throughout the nation over the next 15 months. The fee for obtaining a TWIC will be US$137.25 and will be valid for five years. This amount is below the estimate of $139 to $159 that the federal government had anticipated charging for the credential. Workers with current, comparable background checks including a hazardous materials endorsement on a commercial driver’s license, merchant mariner document or Free and Secure Trade (FAST) credential will pay a discounted fee of US$105.25. On 25 September 2008, all mariners and workers requiring unescorted access to secure areas will require a TWIC. Contact: TSA, Tel: +1 571 227 2829, www.tsa.gov/twic
id card
RAIC smart card now operational The Canadian Air Transport Security Authority (CATSA) has announced that its dual-biometric airport identification programme is now operational at Canada’s 29 largest airports. The programme includes the use of a Restricted Area Identity Card (RAIC) by approximately 100,000 airport personnel who work in restricted areas of the airports. These people include caterers, ground crews, maintenance workers, pilots and flight attendants. According to Jacques Duchesneau, CATSA president and CEO of CATSA: “CATSA is proud of this latest milestone in improving security. In partnership with Transport Canada and the airport authorities, we have created an
Card Technology Today • February 2007
innovative biometric program that leads the world in airport security for non-passengers.” The RAIC smart card stores the biometric fingerprint and iris templates and includes a tamper-proof hologram and printed expiry date. The smart card is one component of the project which also comprises fingerprint and iris readers and infrastructure linking the 29 airports to a secure central database. The Restricted Area Identity Card not only verifies that the person who was issued the card is the same person presenting the card at a restricted area access point in the airport, but it also verifies whether or not the card is still valid and that the individual has a current security clearance. An airport worker is granted a biometric smart card only after receiving security clearance from Transport Canada. Transport Canada conducts an extensive background check in cooperation with RCMP and CSIS. This initial phase has focused on areas within Air Terminal buildings. A second phase to address all other areas within the airport’s security perimeter, including vehicle gates, fixed base operations and tenant facilities, is being planned. To enter a restricted area, the airport worker swipes the RAIC in front of the reader, then uses either their fingerprint or iris. The iris or fingerprint must match the encrypted template embedded in the RAIC chip. The process reportedly takes three seconds. Before the introduction of the RAIC, restricted area passes were validated manually by a guard at the entrance of the secure zone. Contact: CATSA Tel: +1 613 998 4527, Web: www.catsa.gc.ca
nfc
NXP Semiconductors withdraws its DIOCTL proposal NXP Semiconductors has announced it is retracting its recent proposal to ETSI-SCP for a one-wire connection named DIOCTL. This decision means that SWP (Single Wire Protocol) is steadily becoming the de facto standard interface to link the SIM card and the NFC front end in the next generation of handsets. NXP made its announcement at ETSI SCP TEC#11 meeting in La Ciotat, France. NXP said: “As the co-inventor of Near Field Communication (NFC), NXP is extremely pleased to see strong market demand from telecom operators for the technology. Regarding this development, we expect a significant part of NFC mobile phone applications, such as payment and ticketing, to be based on the SIM-Card. “Concerning the connection between the SIMCard and the NFC chip, NXP has looked at many
in brief • Gemalto has completed the purchase from Leigh Mardon Group Pty Ltd of its 50% interest in LM Gemplus Pty Ltd, a joint venture the two companies set up in 2000 to address the Australian and New Zealand smart card markets. Gemalto plans to combine the LM Gemplus team with its existing wholly owned business to address the telecom, IT security and identity markets. Gemalto says its long standing relationship with Leigh Mardon will continue, with Leigh Mardon’s decision to select Gemalto as its strategic supplier of smart card modules for its banking business. Leigh Mardon, Australia’s leading provider of conventional magstripe banking cards and secure printing/logistics solutions, will be launching smart banking cards in Australia this year in response to Australian and New Zealand Banks indicating their intentions to transition to EMV. According to Richard Taylor, managing director, Leigh Mardon: “We welcome this opportunity to simplify the JV structure, while at the same time continue our relationship with Gemalto. This transaction enables both parties to focus on their core strengths.” • Nedbank, a leading bank in South Africa, is to provide its clients with high-end personal devices for secure online transactions. The USB token, supplied by Gemalto, embeds the software that automatically sets up once the user connects the device to their PC. Gemalto also supplies training services to support Nedbank in putting the solution into use and ensures its maintenance. Commercial rollout has already started and Nedbank corporate clients have been benefiting from secure access to financial services through the “Netbank Business” Internet channel since end 2006. Deployment of all 80,000 tokens will be completed over the first half of 2007. • On Track Innovations has announced that its new contactless reader, the Saturn 6000, has been approved by MasterCard after rigorous testing for the latest versions of PayPass: EMV M/Chip Version 1.3 and Magnetic Stripe Version 3.2 contactless payment programs which allows the reader to support the global contactless payments market. The reader is also approved for MasterCard PayPass ISO 14443 Implementation Specification, Version 1.1 required by MasterCard for all products starting this year. In addition, the supplier claims that the Saturn 6000 supports contactless payments programs from other major financial institutions, including Visa contactless program, ExpressPay from American Express and Discover Zip as well as programs for mass transit ticketing, MIFARE, loyalty, third party applications, and more. The reader can be placed on the countertop, it can be wall-mounted or it can lie flat.
5