- Email: [email protected]
New York and Michigan driving licences awarded
NEWS “The BART trial results show that transit payment is a killer application for NFC mobile phones providing convenience and speed to customers who take transit and other public transportation frequently,” said Michael Mullagh, ViVOtech CEO. “We are also encouraged to see that merchant card payments and opt-in smart poster applications enabled by ViVOtech software through the same NFC mobile phone were also highly used by the trial participants.” ViVOtech developed the wallet software for the NFC mobile phones and the OTA card provisioning servers that Sprint used for the trial. This enabled participants to remotely download their BART fare and Jack Ca$h gift cards onto their mobile phones, check their card balances, review previous transactions, automatically top up their cards and use their phones to pay for BART fares and Jack in the Box food. ViVOtech also provided the contactless payment devices that read the NFC-enabled chips at Jack in the Box restaurants
epassport
Second generation ePassports put through their paces
R
esults from a critical industry testing event that put new fingerprintbased ePassports through their paces have been mixed. While the ePassport conformity and PKI testing parts of the trials went well, the experiments looking at interoperability between different nation’s ePassports and readers fell well short of the mark. Looking back, all EU member states have introduced passports featuring Basic Access Control (BAC), typically containing an RFID chip which stores a photo of the passport holder, along with the holder’s personal details. Now European countries are working to a June 2009 deadline for the incorporation of fingerprint data into second-generation electronic passports. The second-generation framework is underpinned by Extended Access Control (EAC), a complex mechanism that involves establishing chains of trust between ePassports, the reader infrastructure and the issuing nations. Taking place in Prague over five days, one of the key objectives of the tests was for European countries to prove that their passports conform to the required standards. The results in the part of the test were deemed to be “fairly good”.
October 2008
A second objective was to verify crossover interoperability between EAC inspection systems and ePassports from different countries. And this is where the packed conference hall became tense…A matrix was displayed on the conference hall screen showing green boxes for successful reads and red boxes for failures. It was plain for all to see that there was a distinctive red hue to the diagram. There was a silver lining to the tests however. The Prague organisers were the first to attempt to verify EAC PKI operation in accordance with the European Union Certificate Policy, including bilateral exchange of EAC certificates. Twelve of the 27 participating countries completed the first PKI test round, and four countries participated in all four phases of the PKI testing, demonstrating a complete end-to-end system. The tests were facilitated by a consortium of the European Commission, Brussels Interoperability Group (BIG) and the European Commission Joint Research Centre. “The rigorous testing in Prague was a critical step in the European deployment of second-generation ePassports,” said Chairman of the Brussels Interoperability Group, Bob Carter, who also represents the United Kingdom Identity and Passport Service. “All countries that participated in this first test of the Extended Access Control PKI infrastructure successfully completed the tests, and with that success, the vision for an EAC-enabled ePassport deployment is becoming a reality.”
driving licence
New York and Michigan driving licences awarded
D
e La Rue Identity Systems has announced that it is supplying the New York State Department of Motor Vehicles with the solution to issue its new WHTI compliant Enhanced Driver License (EDL). The EDL includes a range of pre-printed security features on both the front and back of the card and incorporates a radio frequency identification tag (RFID) and antenna. The EDL will be issued alongside the existing New York State driver license which is also supplied by De La Rue Identity Systems. The existing license is one of the top three contracts in terms of issuing volumes in the United States. The EDL will be issued from 16 October 2008 to US citizens with New York State residency. It is expected to be the largest EDL scheme, in terms
IN BRIEF • A mobile, contactless, multi-application solution for secure access and payment transactions has been unveiled by SCM Microsystems. The company has introduced @MAXX prime, the first product of a new family of portable USB devices that enable secure electronic transactions, secure data storage and secure access. The entire range of new SCM @MAXX devices are expected to include secure smart card functionality alongside flash storage to provide strong, mobile authentication for a range of electronic applications, including financial services, transportation, e-payment, PC and physical access, digital signature and public key infrastructure (PKI). SCM’s @MAXX prime is a device that offers a combination of fixed and expandable memory space along with a reader for small SIM-sized dual interface smart cards (ID-000), with a built in antenna and supporting both contact and contactless technology. @MAXX prime also includes on-board flash memory, a microSD card reader and expansion capabilities via a female USB connector. • Entrust has announced it is growing its trusted ePassport partner network by teaming up with GET Group, a supplier of ePassport and identification solutions and technologies. GET Group will integrate Entrust’s ePassport public key infrastructure (PKI) capabilities – based on both Basic Access Control (BAC) and Extended Access Control (EAC) technology – to help complete a comprehensive end-to-end ePassport solution. • Clear, the largest provider of airport security fast pass lanes in the USA, and Vigilant Solutions, the second largest provider, have announced that the companies have signed a reciprocal fee agreement. The agreement will allow cardholders from Vigilant’s two programs in Florida and Mississippi to use their cards at Clear’s 17 airports and for Clear members to be able to use their cards at the Jacksonville and Gulfport-Biloxi airports. The agreement provides that each company will pay the other an Interoperability Cost Sharing Fee (ICSF) each time one of their cardholders uses a lane operated by the other company. Both companies’ kiosks at the RT lanes are programmed to record the company that issued the card being used. The fee and the details of the agreement are being kept confidential between companies.
Card Technology Today
5
NEWS
IN BRIEF • Identification and verification devices from Datastrip can now be enabled with a scanner and supporting software to use iris biometrics. The iris scan technology is available for all of Datastrip’s handheld biometric terminals. In adding the iris scanner to its existing product line, Datastrip says it is allowing existing and future customers to build and buy products that grow as their application needs change. Datastrip claims that its military and law enforcement customers have asked for this new capability and will have the option to expand their current Datastrip product or buy a costeffective device to satisfy their demands. • iDcentrix, a provider of secure ID cards and card issuance systems, has announced its partnership with Carnets, Tarjetas y Tecnología (CardTech) based in Guatemala. CardTech has experience as a systems integrator for plastic card solutions and Pointof-Sales (POS) transaction systems, and expertise in providing identity solutions to the Federal and Municipal branches of Guatemala. With its deep-welding technology that welds the ID data to the card body, iDcentrix provides CardTech with a means to create highly secure government-issued credentials. The partnership calls for both companies to jointly consider bids for ID cards in the country. • Intercede has announced that it has signed a subcontract agreement with Lockheed Martin. This contract, in support of an existing programme, has an initial value of US$1million, of which Intercede will receive immediate advance payments of more than US$500,000 for products, support services and software maintenance. Intercede’s MyID enables organizations to securely manage the identities of people and their associated identity credentials within a single, integrated, workflow driven platform. This includes enabling and managing: secure registration, biometric capture, application vetting and approval through to smart card personalization, issuance and management. • Advancing its commitment to the transit payment system market, INSIDE Contactless has demonstrated how its MicroPass intelligent contactless payment platform can be applied to transit payment systems. Working together with Cubic Transportation Systems and Visa, INSIDE has previewed a multifunction contactless payment card that supports both a type-approved Visa payWave payment application and Cubic’s NextPASS fare collection software that is compliant with APTA’s Contactless Fare Media Standard (CFMS).
6
Card Technology Today
of volumes, in the country. It can be used in place of passports for travel by land or sea to Canada, Mexico, the Caribbean and Bermuda. The EDL will be valid for a period of eight years from the date of issue, subject to the type of license, with combined volumes of around five million per year expected for the EDL and existing license. Other US States that have committed to produce EDL’s are Washington, Vermont and Arizona. Meanwhile, in the last few weeks, the US Department of Homeland Security (DHS) reached an agreement with the state of Michigan to enhance the security features of its state driver’s licence. The enhanced driver’s licence will cost slightly more than a standard Michigan state driver’s licence and will include security features similar to a US passport and passport card. Applicants for the enhanced driver’s licence must provide proof of citizenship, identity, and residence. The licences will be designed consistent with the requirements of REAL ID. Under WHTI, , all citizens of the United States, Canada, Mexico, and Bermuda must have a passport or other accepted document that establishes the bearer’s identity and nationality to enter or depart the United States from within the Western Hemisphere.
id card
UK ID card takes next steps
D
espite being under fire from numerous quarters the UK’s controversial ID card has taken its next tentative steps. The first UK Identity Card – to e issued to foreign nationals – was unveiled by the Home Secretary. The new credit-card sized document will show the holder’s photograph, name, date of birth, nationality and immigration status. A secure electronic chip will also hold their biometric details, including fingerprints, and a digital facial image. Home Secretary Jacqui Smith said: “ID cards will help protect against identity fraud, illegal working, reduce the use of multiple identities in organised crime and terrorism, crack down on those trying to abuse positions of trust and make it easier for people to prove they are who they say they are. “ID cards for foreign nationals will replace old-fashioned paper documents, make it easier for employers and sponsors to check entitlement to work and study, and for the UK Border Agency to verify someone’s identity. This will provide identity protection to the many here legally who
contribute to the prosperity of the UK, while helping prevent abuse.” Compulsory identity cards for foreign nationals will kick start the National Identity Scheme, with the first applicants having to apply for cards from 25 November. Within three years all foreign nationals applying for leave to enter or remain in the UK will be required to have a card, with around 90 per cent of foreign nationals in Britain covered by the scheme by 2014/15. To ensure the benefits of the programme are felt from the start, the UK Border Agency will start with categories that have been targeted by those wanting to abuse our immigration system, including students and people seeking leave to remain on the basis of marriage. The introduction of the first card supports the Government’s tough new Australian-style Points Based System for managed migration. To earn and retain their licence as a sponsor businesses and education providers must keep records of the migrants they have sponsored including, in time, a copy of a migrant’s identity card. Businesses found employing illegal workers face fines of up to £10 000 per person. The introduction of cards for foreign nationals will be followed by the first ID cards for British citizens, targeting workers in sensitive roles and locations like airports from 2009. Then, from 2010, ID cards will be available to young people who want them and from 2011/12 cards will be available to the general population. The measures were back by a raft of senior British officials. Julian Gravatt, Association of Colleges’ Director of Funding and Development, said: “Issuing ID cards to overseas students should assist in the reduction of identity fraud. Colleges welcome any measure which facilitates the recruitment of genuine students to study in the UK and the economic benefits this brings.” Meanwhile, the UK’s Identity & Passport Service (IPS) shortlisted companies from its pool of five suppliers that will now bid for the different parts of the country’s national identity card scheme. The ‘Application and Enrolment’ programme for replacement of passport application contracts and development of new capabilities will be contested by CSC, Fujitsu and IBM. Meanwhile, the ‘National Biometric Identity Service’ programme for replacing existing biometric storage and matching capacity as well as development of new capabilities will be contested by IBM and Thales Procurement has also begun within the framework for the design and production of Identity Cards. This procurement exercise is in
October 2008
epassport
Second generation ePassports put through their paces
R
esults from a critical industry testing event that put new fingerprintbased ePassports through their paces have been mixed. While the ePassport conformity and PKI testing parts of the trials went well, the experiments looking at interoperability between different nation’s ePassports and readers fell well short of the mark. Looking back, all EU member states have introduced passports featuring Basic Access Control (BAC), typically containing an RFID chip which stores a photo of the passport holder, along with the holder’s personal details. Now European countries are working to a June 2009 deadline for the incorporation of fingerprint data into second-generation electronic passports. The second-generation framework is underpinned by Extended Access Control (EAC), a complex mechanism that involves establishing chains of trust between ePassports, the reader infrastructure and the issuing nations. Taking place in Prague over five days, one of the key objectives of the tests was for European countries to prove that their passports conform to the required standards. The results in the part of the test were deemed to be “fairly good”.
October 2008
A second objective was to verify crossover interoperability between EAC inspection systems and ePassports from different countries. And this is where the packed conference hall became tense…A matrix was displayed on the conference hall screen showing green boxes for successful reads and red boxes for failures. It was plain for all to see that there was a distinctive red hue to the diagram. There was a silver lining to the tests however. The Prague organisers were the first to attempt to verify EAC PKI operation in accordance with the European Union Certificate Policy, including bilateral exchange of EAC certificates. Twelve of the 27 participating countries completed the first PKI test round, and four countries participated in all four phases of the PKI testing, demonstrating a complete end-to-end system. The tests were facilitated by a consortium of the European Commission, Brussels Interoperability Group (BIG) and the European Commission Joint Research Centre. “The rigorous testing in Prague was a critical step in the European deployment of second-generation ePassports,” said Chairman of the Brussels Interoperability Group, Bob Carter, who also represents the United Kingdom Identity and Passport Service. “All countries that participated in this first test of the Extended Access Control PKI infrastructure successfully completed the tests, and with that success, the vision for an EAC-enabled ePassport deployment is becoming a reality.”
driving licence
New York and Michigan driving licences awarded
D
e La Rue Identity Systems has announced that it is supplying the New York State Department of Motor Vehicles with the solution to issue its new WHTI compliant Enhanced Driver License (EDL). The EDL includes a range of pre-printed security features on both the front and back of the card and incorporates a radio frequency identification tag (RFID) and antenna. The EDL will be issued alongside the existing New York State driver license which is also supplied by De La Rue Identity Systems. The existing license is one of the top three contracts in terms of issuing volumes in the United States. The EDL will be issued from 16 October 2008 to US citizens with New York State residency. It is expected to be the largest EDL scheme, in terms
IN BRIEF • A mobile, contactless, multi-application solution for secure access and payment transactions has been unveiled by SCM Microsystems. The company has introduced @MAXX prime, the first product of a new family of portable USB devices that enable secure electronic transactions, secure data storage and secure access. The entire range of new SCM @MAXX devices are expected to include secure smart card functionality alongside flash storage to provide strong, mobile authentication for a range of electronic applications, including financial services, transportation, e-payment, PC and physical access, digital signature and public key infrastructure (PKI). SCM’s @MAXX prime is a device that offers a combination of fixed and expandable memory space along with a reader for small SIM-sized dual interface smart cards (ID-000), with a built in antenna and supporting both contact and contactless technology. @MAXX prime also includes on-board flash memory, a microSD card reader and expansion capabilities via a female USB connector. • Entrust has announced it is growing its trusted ePassport partner network by teaming up with GET Group, a supplier of ePassport and identification solutions and technologies. GET Group will integrate Entrust’s ePassport public key infrastructure (PKI) capabilities – based on both Basic Access Control (BAC) and Extended Access Control (EAC) technology – to help complete a comprehensive end-to-end ePassport solution. • Clear, the largest provider of airport security fast pass lanes in the USA, and Vigilant Solutions, the second largest provider, have announced that the companies have signed a reciprocal fee agreement. The agreement will allow cardholders from Vigilant’s two programs in Florida and Mississippi to use their cards at Clear’s 17 airports and for Clear members to be able to use their cards at the Jacksonville and Gulfport-Biloxi airports. The agreement provides that each company will pay the other an Interoperability Cost Sharing Fee (ICSF) each time one of their cardholders uses a lane operated by the other company. Both companies’ kiosks at the RT lanes are programmed to record the company that issued the card being used. The fee and the details of the agreement are being kept confidential between companies.
Card Technology Today
5
NEWS
IN BRIEF • Identification and verification devices from Datastrip can now be enabled with a scanner and supporting software to use iris biometrics. The iris scan technology is available for all of Datastrip’s handheld biometric terminals. In adding the iris scanner to its existing product line, Datastrip says it is allowing existing and future customers to build and buy products that grow as their application needs change. Datastrip claims that its military and law enforcement customers have asked for this new capability and will have the option to expand their current Datastrip product or buy a costeffective device to satisfy their demands. • iDcentrix, a provider of secure ID cards and card issuance systems, has announced its partnership with Carnets, Tarjetas y Tecnología (CardTech) based in Guatemala. CardTech has experience as a systems integrator for plastic card solutions and Pointof-Sales (POS) transaction systems, and expertise in providing identity solutions to the Federal and Municipal branches of Guatemala. With its deep-welding technology that welds the ID data to the card body, iDcentrix provides CardTech with a means to create highly secure government-issued credentials. The partnership calls for both companies to jointly consider bids for ID cards in the country. • Intercede has announced that it has signed a subcontract agreement with Lockheed Martin. This contract, in support of an existing programme, has an initial value of US$1million, of which Intercede will receive immediate advance payments of more than US$500,000 for products, support services and software maintenance. Intercede’s MyID enables organizations to securely manage the identities of people and their associated identity credentials within a single, integrated, workflow driven platform. This includes enabling and managing: secure registration, biometric capture, application vetting and approval through to smart card personalization, issuance and management. • Advancing its commitment to the transit payment system market, INSIDE Contactless has demonstrated how its MicroPass intelligent contactless payment platform can be applied to transit payment systems. Working together with Cubic Transportation Systems and Visa, INSIDE has previewed a multifunction contactless payment card that supports both a type-approved Visa payWave payment application and Cubic’s NextPASS fare collection software that is compliant with APTA’s Contactless Fare Media Standard (CFMS).
6
Card Technology Today
of volumes, in the country. It can be used in place of passports for travel by land or sea to Canada, Mexico, the Caribbean and Bermuda. The EDL will be valid for a period of eight years from the date of issue, subject to the type of license, with combined volumes of around five million per year expected for the EDL and existing license. Other US States that have committed to produce EDL’s are Washington, Vermont and Arizona. Meanwhile, in the last few weeks, the US Department of Homeland Security (DHS) reached an agreement with the state of Michigan to enhance the security features of its state driver’s licence. The enhanced driver’s licence will cost slightly more than a standard Michigan state driver’s licence and will include security features similar to a US passport and passport card. Applicants for the enhanced driver’s licence must provide proof of citizenship, identity, and residence. The licences will be designed consistent with the requirements of REAL ID. Under WHTI, , all citizens of the United States, Canada, Mexico, and Bermuda must have a passport or other accepted document that establishes the bearer’s identity and nationality to enter or depart the United States from within the Western Hemisphere.
id card
UK ID card takes next steps
D
espite being under fire from numerous quarters the UK’s controversial ID card has taken its next tentative steps. The first UK Identity Card – to e issued to foreign nationals – was unveiled by the Home Secretary. The new credit-card sized document will show the holder’s photograph, name, date of birth, nationality and immigration status. A secure electronic chip will also hold their biometric details, including fingerprints, and a digital facial image. Home Secretary Jacqui Smith said: “ID cards will help protect against identity fraud, illegal working, reduce the use of multiple identities in organised crime and terrorism, crack down on those trying to abuse positions of trust and make it easier for people to prove they are who they say they are. “ID cards for foreign nationals will replace old-fashioned paper documents, make it easier for employers and sponsors to check entitlement to work and study, and for the UK Border Agency to verify someone’s identity. This will provide identity protection to the many here legally who
contribute to the prosperity of the UK, while helping prevent abuse.” Compulsory identity cards for foreign nationals will kick start the National Identity Scheme, with the first applicants having to apply for cards from 25 November. Within three years all foreign nationals applying for leave to enter or remain in the UK will be required to have a card, with around 90 per cent of foreign nationals in Britain covered by the scheme by 2014/15. To ensure the benefits of the programme are felt from the start, the UK Border Agency will start with categories that have been targeted by those wanting to abuse our immigration system, including students and people seeking leave to remain on the basis of marriage. The introduction of the first card supports the Government’s tough new Australian-style Points Based System for managed migration. To earn and retain their licence as a sponsor businesses and education providers must keep records of the migrants they have sponsored including, in time, a copy of a migrant’s identity card. Businesses found employing illegal workers face fines of up to £10 000 per person. The introduction of cards for foreign nationals will be followed by the first ID cards for British citizens, targeting workers in sensitive roles and locations like airports from 2009. Then, from 2010, ID cards will be available to young people who want them and from 2011/12 cards will be available to the general population. The measures were back by a raft of senior British officials. Julian Gravatt, Association of Colleges’ Director of Funding and Development, said: “Issuing ID cards to overseas students should assist in the reduction of identity fraud. Colleges welcome any measure which facilitates the recruitment of genuine students to study in the UK and the economic benefits this brings.” Meanwhile, the UK’s Identity & Passport Service (IPS) shortlisted companies from its pool of five suppliers that will now bid for the different parts of the country’s national identity card scheme. The ‘Application and Enrolment’ programme for replacement of passport application contracts and development of new capabilities will be contested by CSC, Fujitsu and IBM. Meanwhile, the ‘National Biometric Identity Service’ programme for replacing existing biometric storage and matching capacity as well as development of new capabilities will be contested by IBM and Thales Procurement has also begun within the framework for the design and production of Identity Cards. This procurement exercise is in
October 2008