- Email: [email protected]
UK card fraud factory busted in police raid
NEWS
IN BRIEF • Five months after proclaiming its independence, the Republic of Kosovo has begun to issue passports to its citizens. The contract to produce and supply 600,000 passports and 400,000 driver’s licenses was awarded to Giesecke & Devrient (G&D). G&D developed both the passport and the driver’s license in close cooperation with the Kosovar Ministry of Internal Affairs. Several technologies protect the ID documents against counterfeiting, including a Multi Laser Image (MLI) and kinegrams, which protect the data fields containing the holder’s personal data and allow immediate verification of the document’s authenticity. The first batch of new credit-cardsized driver’s licenses is scheduled for delivery in the fourth quarter of this year. • The new Xi-Sign 5000, a Home Chip and PIN security solution for e-banking and e-commerce has been unveiled by XIRING. The XiSign 5000 has been designed for banks’ highend customers with a sophisticated look and feel as well as luxury packaging. The solutions is designed to help banks looking to differentiate their online security solution to high-end customers in a similar way to how they offer different types of credit / debit card packages. In the United Kingdom, XIRING has now dispatched four million Home Chip and PIN card readers. The Xi-Sign 5000 is expected to be rolled out this month across Europe. • Idenizen Smartware, a technology solutions provider for the education market, has secured US$ 2.25 million of venture capital funding for its flagship product suite, SmartCampus. SmartCampus integrates all key activities of an institute on to a single, integrated software-enabled platform – from administration to student and faculty activities inclusive of registration, course administration, attendance, library automation and examinations. The funding, received from NEA-IndoUS Ventures, is expected to be used to fuel the company’s pan India growth plans and allow the smart card-enabled software solution to reach and service educational campuses and institutions nationwide. • The confidential financial data of a million UK customers has been found on a computer that was sold on online auction site eBay for £35.88. According to a report by the UK’s Daily Mail, a former employee at digital archiving firm Graphic Data sold the computer on eBay without erasing the hard drive. Financial information found on the computer included names, addresses, sort codes and account numbers, credit card numbers and security data such as mothers’ maiden names. Confidential data belonging to customers of American Express, Royal Bank of Scotland (RBS) and NatWest was stored on the hard disk.
4
Card Technology Today
Transactions and Government Programs segments, with over half of the revenues coming from Asia. MULTOS was previously owned by Mastercard Worldwide through Mondex, and is promoted by the Maosco consortium, which includes Infineon, Samsung, Dai Nippon Printing and Thales in its membership. MULTOS was the first smartcard operating system to receive the highest security certification possible, ITSEC E6 High / EAL6+. “We will continue to develop and actively promote MULTOS in the payment and ID world,” commented Philippe Cambriel, Executive Vice President for Secure Transactions. Olivier Piou, Gemalto Chief Executive Officer, added: “This important bolt-on acquisition reinforces our software and services offering across Gemalto business lines. It will allow Gemalto to leverage its large installed base of intelligent devices with a commercially-demonstrated highest-security post-issuance activation service, which will be critical for example in mobile payment and NFC (Near Field Communication) applications.” Contact: Vincent Biraud at Gemalto, Tel: +33 6 08 48 33 23 , Email: [email protected]
id cards
UKBA to issue ID cards to foreign nationals
T
he UK Border Agency (UKBA) has confirmed that from 25 November 2008, it will begin issuing identity cards to foreign nationals applying for further leave to remain in the country. The first cards will be issued to migrants applying as a student, or as the husband, wife, civil partner or unmarried partner of someone holding permanent residence in the UK. The ID card for foreign nationals is the first part of the UK’s controversial national identity scheme, and will be rolled out on an incremental basis over the next three years to all foreign nationals. From November 2008, fingerprints and facial images will be captured at six centres around the UK as part of the process of making a decision about an individual’s right to be in the country. The new ID card provides evidence of the holder’s nationality, identity and status in the UK. According to UKBA, it will provide information that will help public agencies, employers and educational establishments more easily understand the migrant’s entitlements. It will also be an additional simple form of confirming identity and right to work and access public services for individuals who have entered the UK.”
Employers will be able to check the card visually, and UKBA says guidance on checking the validity of ID cards will be provided in September 2008. When a foreign national who has already been granted further leave to remain and is issued with an ID card, returns to the UK, they will be required to show their ID card at the border together with their national passport to confirm their immigration status. Checks at the border will include visual checks of the card, use of card readers and additional biometric checks. Following the issuing of ID cards to foreign nationals, the national ID scheme rollout will move to ID cards for workers in sensitive roles and locations, such as airports, in 2009. In 2010, voluntary ID cards will be offered to young people. In 2011-2012 voluntary ID cards will be offered to the rest of the British public.
Thales wins interim ID card contract Thales has won an £18 million, four-year contract to deliver an interim version of the UK’s national ID card scheme. The contract is the first, and probably the smallest, of the five deals to be awarded under a ‘framework contract’ established by the UK’s Identity & Passport Service (IPS). Thales will work with IPS to design, build, test and operate the technology that will deliver the National Identity Register and support the issuing of Identity Cards from the second half of 2009. As announced in May, another contractor – believed to be 3M SPSL – will be responsible for the manufacture of the physical cards. This contract award follows a procurement exercise using the NIS Strategic Supplier Group framework arrangement, awarded in May 2008. The five vendors within the scheme’s framework – Thales, CSC, EDS, Fujitsu and IBM – are obliged to bid for each of the contracts.
fraud
UK card fraud factory busted in police raid
T
he Dedicated Cheque and Plastic Crime Unit (DCPCU) – a special police unit that tackles cheque and card fraud crime in the UK – has raided a sophisticated counterfeit card factory in Birmingham. Detective Chief Inspector John Folan, who heads up the Unit, said: “These arrests are a significant
September 2008
NEWS development in our fight against the organised criminal gangs responsible for this type of fraud. To date, compromised chip and PIN terminals have been found in less than 30 retail outlets throughout the UK. Together with the banking and retail industries we are working to ensure this figure is minimised. We are sending a very clear warning to fraudsters these crimes will not be tolerated, and that we will continue to target them and disrupt their fraudulent activity.” Equipment needed to steal card details and make counterfeit cards on a massive scale – including stolen chip and PIN terminals, card account numbers, a card reader/writer, computer software and fake magnetic stripe cards – was found in the premises. Early indications are that these criminals have been tampering with retailers’ chip and PIN terminals in order to steal card transaction data and PINs from these machines. With these details, criminals are able to create fake magnetic stripe cards that can be used fraudulently in countries that have yet to roll out chip and PIN. This type of fraud – fraud abroad – increased 77% last year, totalling £207.6 million. The DCPCU was launched on 29 April 2002 as a two-year pilot. Following the successful conclusion of this trial, it was established as a permanent Unit – a funding commitment of £3m per year by the banking industry – with an ongoing brief to help stamp out organised card and cheque fraud. Since its inception, the DCPCU has been responsible for more than £230 million in savings from reduced fraud activity and has recovered more than 244,000 counterfeit cards and card numbers.
contactless
Wasabi trials contactless payment system
S
ushi firm Wasabi is piloting a fully integrated contactless payment system. Customers can now make payments in less than half a second at the Japanese restaurant chain, which previously operated on a cash-only basis. The new payment system allows Wasabi to offer its customers a fast and convenient ‘wave and pay’ method of payment on all transactions of £10 and under. On average, around 7,500 people per week visit Wasabi on Oxford Street, with an average spend of £8.00, so the restaurant is “ideally positioned to benefit from the technology”. Cardholders simply need to touch their card against the reader instead of entering a PIN or signing. A total of 16 terminals are being trialled for four weeks in two of Wasabi’s busiest locations, Canary Wharf and Oxford Street.
September 2008
Lester Sharpe, Operations Manager for Wasabi said: “All of our outlets are situated in prime, heavy footfall locations and consequently the need for a fast, smooth running solution was paramount. The feedback from both shop staff and customers has been very positive and already we are planning on extending the Contactless solution to at least four more high profile sites. We have already seen a 24% increase in credit card payments.” It is predicted that by the end of 2011, 70% of debit cards and 45% of credit cards are expected to be contactless-enabled in the UK.
statistics
Smart card numbers to hit 7 billion in 2009
N
ew research has found that by the end of next year there will be more smart cards than people on the planet. IMS Research’s latest report on the smart card market projects that the installed base of smart cards is forecast to surpass the world’s population during 2009, meaning that on average each person on the planet will be in possession of more than one smart card. From relatively humble beginnings in 1983, it has taken 25 years for the smart card installed base to approach the level where, on average, everyone has at least one, IMS said. By the end of 2009 the installed base is projected to have passed the 7 billion level, a level the global population won’t reach until 2011. Furthermore, whereas previously smart card use was concentrated in specific markets and countries, the growing breadth of applications the market now addresses means that the use of smart cards is more widespread geographically than ever before. “By far, for most of us, the most likely reason we own a smart card is for use within our cellular handsets, in the form of a SIM card. Not all handsets require them, but an estimated 2.7 billion did at the end of last year,” stated Alex Green, the author of IMS Research’s annual Smart Card and Semiconductors in Smart Cards report. “The other two sectors that are forecast to aid the cellular market in driving the card installed base past 7 billion are the banking sector and the government/health sector, the installed bases of which are both projected to pass the 1 billion level this year. Additionally both are forecast to continue growing significantly, as banks look to improve security and reduce fraud and as governments roll out large national infrastructure projects that utilise smart cards. Typical examples of the latter are
IN BRIEF • Artemis Solutions Group (ASG) was one of a number of companies who provided advanced identification technology for the recent Olympic Games in Beijing. The company’s BioCert Aegis ID system was used to help prevent unauthorized access at the Olympic Reunion Center, a location which gives Olympians from prior Olympic Games, and VIP guests a meeting place on-site during the Olympics where they can enjoy live feeds of events and refreshments. As each attendee arrived at the ORC they were issued a secure Smart Card ID which allowed them to validate their identity for access to the venue. This secure ID card incorporated an integrated chip which contained all of the information about the identity of the individual and their ability to access the facility and was designed to incorporate a biometric profile. • On Track Innovations (OTI) has announced that it has been awarded the contract to supply its contactless card readers to the ERG Group for Utah Transit Authority´s (UTA) contactless credit card bus payment solution. The contract for the full rollout of the system in the Salt Lake City area follows a successful pilot project completed by ERG and UTA where buses serving Salt Lake City area ski resorts were equipped with the new system which allowed customers to use contactless credit cards and other smart cards for both transit payment and ski resort access. OTI is supplying the front-end solutions, including readers and its proprietary software, to support ISO 14443 proximity payments and ISO 15396 vicinity payments. • L-1 Identity Solutions has closed its tender offer for all of the outstanding shares of Digimarc Corporation and completed its acquisition of Digimarc´s ID systems business. Through the extended offering period, L-1 purchased 22,093,169 shares of Digimarc common stock, representing approximately 88.37 percent of the outstanding shares of Digimarc. L-1 exercised its option to purchase newly-issued shares of Digimarc common stock directly from Digimarc in order to acquire at least 90 percent of the outstanding shares and effect a “short-form” merger. Immediately following the merger Digimarc became a whollyowned subsidiary of L-1 and changed its name to L-1 Secure Credentialing. • VASCO Data Security has announced the launch of Digipass 810 for the Asian markets. The company’s Smart Card CAP reader has been upgraded and redesigned to accommodate Asian character sets, as long as they can be represented in a 80X14 dot matrix line. This way VASCO enables its Asian retail banking customers to offer their end-users a stand alone EMV-CAP E compliant card reader with e-signature capability.
Card Technology Today
5
IN BRIEF • Five months after proclaiming its independence, the Republic of Kosovo has begun to issue passports to its citizens. The contract to produce and supply 600,000 passports and 400,000 driver’s licenses was awarded to Giesecke & Devrient (G&D). G&D developed both the passport and the driver’s license in close cooperation with the Kosovar Ministry of Internal Affairs. Several technologies protect the ID documents against counterfeiting, including a Multi Laser Image (MLI) and kinegrams, which protect the data fields containing the holder’s personal data and allow immediate verification of the document’s authenticity. The first batch of new credit-cardsized driver’s licenses is scheduled for delivery in the fourth quarter of this year. • The new Xi-Sign 5000, a Home Chip and PIN security solution for e-banking and e-commerce has been unveiled by XIRING. The XiSign 5000 has been designed for banks’ highend customers with a sophisticated look and feel as well as luxury packaging. The solutions is designed to help banks looking to differentiate their online security solution to high-end customers in a similar way to how they offer different types of credit / debit card packages. In the United Kingdom, XIRING has now dispatched four million Home Chip and PIN card readers. The Xi-Sign 5000 is expected to be rolled out this month across Europe. • Idenizen Smartware, a technology solutions provider for the education market, has secured US$ 2.25 million of venture capital funding for its flagship product suite, SmartCampus. SmartCampus integrates all key activities of an institute on to a single, integrated software-enabled platform – from administration to student and faculty activities inclusive of registration, course administration, attendance, library automation and examinations. The funding, received from NEA-IndoUS Ventures, is expected to be used to fuel the company’s pan India growth plans and allow the smart card-enabled software solution to reach and service educational campuses and institutions nationwide. • The confidential financial data of a million UK customers has been found on a computer that was sold on online auction site eBay for £35.88. According to a report by the UK’s Daily Mail, a former employee at digital archiving firm Graphic Data sold the computer on eBay without erasing the hard drive. Financial information found on the computer included names, addresses, sort codes and account numbers, credit card numbers and security data such as mothers’ maiden names. Confidential data belonging to customers of American Express, Royal Bank of Scotland (RBS) and NatWest was stored on the hard disk.
4
Card Technology Today
Transactions and Government Programs segments, with over half of the revenues coming from Asia. MULTOS was previously owned by Mastercard Worldwide through Mondex, and is promoted by the Maosco consortium, which includes Infineon, Samsung, Dai Nippon Printing and Thales in its membership. MULTOS was the first smartcard operating system to receive the highest security certification possible, ITSEC E6 High / EAL6+. “We will continue to develop and actively promote MULTOS in the payment and ID world,” commented Philippe Cambriel, Executive Vice President for Secure Transactions. Olivier Piou, Gemalto Chief Executive Officer, added: “This important bolt-on acquisition reinforces our software and services offering across Gemalto business lines. It will allow Gemalto to leverage its large installed base of intelligent devices with a commercially-demonstrated highest-security post-issuance activation service, which will be critical for example in mobile payment and NFC (Near Field Communication) applications.” Contact: Vincent Biraud at Gemalto, Tel: +33 6 08 48 33 23 , Email: [email protected]
id cards
UKBA to issue ID cards to foreign nationals
T
he UK Border Agency (UKBA) has confirmed that from 25 November 2008, it will begin issuing identity cards to foreign nationals applying for further leave to remain in the country. The first cards will be issued to migrants applying as a student, or as the husband, wife, civil partner or unmarried partner of someone holding permanent residence in the UK. The ID card for foreign nationals is the first part of the UK’s controversial national identity scheme, and will be rolled out on an incremental basis over the next three years to all foreign nationals. From November 2008, fingerprints and facial images will be captured at six centres around the UK as part of the process of making a decision about an individual’s right to be in the country. The new ID card provides evidence of the holder’s nationality, identity and status in the UK. According to UKBA, it will provide information that will help public agencies, employers and educational establishments more easily understand the migrant’s entitlements. It will also be an additional simple form of confirming identity and right to work and access public services for individuals who have entered the UK.”
Employers will be able to check the card visually, and UKBA says guidance on checking the validity of ID cards will be provided in September 2008. When a foreign national who has already been granted further leave to remain and is issued with an ID card, returns to the UK, they will be required to show their ID card at the border together with their national passport to confirm their immigration status. Checks at the border will include visual checks of the card, use of card readers and additional biometric checks. Following the issuing of ID cards to foreign nationals, the national ID scheme rollout will move to ID cards for workers in sensitive roles and locations, such as airports, in 2009. In 2010, voluntary ID cards will be offered to young people. In 2011-2012 voluntary ID cards will be offered to the rest of the British public.
Thales wins interim ID card contract Thales has won an £18 million, four-year contract to deliver an interim version of the UK’s national ID card scheme. The contract is the first, and probably the smallest, of the five deals to be awarded under a ‘framework contract’ established by the UK’s Identity & Passport Service (IPS). Thales will work with IPS to design, build, test and operate the technology that will deliver the National Identity Register and support the issuing of Identity Cards from the second half of 2009. As announced in May, another contractor – believed to be 3M SPSL – will be responsible for the manufacture of the physical cards. This contract award follows a procurement exercise using the NIS Strategic Supplier Group framework arrangement, awarded in May 2008. The five vendors within the scheme’s framework – Thales, CSC, EDS, Fujitsu and IBM – are obliged to bid for each of the contracts.
fraud
UK card fraud factory busted in police raid
T
he Dedicated Cheque and Plastic Crime Unit (DCPCU) – a special police unit that tackles cheque and card fraud crime in the UK – has raided a sophisticated counterfeit card factory in Birmingham. Detective Chief Inspector John Folan, who heads up the Unit, said: “These arrests are a significant
September 2008
NEWS development in our fight against the organised criminal gangs responsible for this type of fraud. To date, compromised chip and PIN terminals have been found in less than 30 retail outlets throughout the UK. Together with the banking and retail industries we are working to ensure this figure is minimised. We are sending a very clear warning to fraudsters these crimes will not be tolerated, and that we will continue to target them and disrupt their fraudulent activity.” Equipment needed to steal card details and make counterfeit cards on a massive scale – including stolen chip and PIN terminals, card account numbers, a card reader/writer, computer software and fake magnetic stripe cards – was found in the premises. Early indications are that these criminals have been tampering with retailers’ chip and PIN terminals in order to steal card transaction data and PINs from these machines. With these details, criminals are able to create fake magnetic stripe cards that can be used fraudulently in countries that have yet to roll out chip and PIN. This type of fraud – fraud abroad – increased 77% last year, totalling £207.6 million. The DCPCU was launched on 29 April 2002 as a two-year pilot. Following the successful conclusion of this trial, it was established as a permanent Unit – a funding commitment of £3m per year by the banking industry – with an ongoing brief to help stamp out organised card and cheque fraud. Since its inception, the DCPCU has been responsible for more than £230 million in savings from reduced fraud activity and has recovered more than 244,000 counterfeit cards and card numbers.
contactless
Wasabi trials contactless payment system
S
ushi firm Wasabi is piloting a fully integrated contactless payment system. Customers can now make payments in less than half a second at the Japanese restaurant chain, which previously operated on a cash-only basis. The new payment system allows Wasabi to offer its customers a fast and convenient ‘wave and pay’ method of payment on all transactions of £10 and under. On average, around 7,500 people per week visit Wasabi on Oxford Street, with an average spend of £8.00, so the restaurant is “ideally positioned to benefit from the technology”. Cardholders simply need to touch their card against the reader instead of entering a PIN or signing. A total of 16 terminals are being trialled for four weeks in two of Wasabi’s busiest locations, Canary Wharf and Oxford Street.
September 2008
Lester Sharpe, Operations Manager for Wasabi said: “All of our outlets are situated in prime, heavy footfall locations and consequently the need for a fast, smooth running solution was paramount. The feedback from both shop staff and customers has been very positive and already we are planning on extending the Contactless solution to at least four more high profile sites. We have already seen a 24% increase in credit card payments.” It is predicted that by the end of 2011, 70% of debit cards and 45% of credit cards are expected to be contactless-enabled in the UK.
statistics
Smart card numbers to hit 7 billion in 2009
N
ew research has found that by the end of next year there will be more smart cards than people on the planet. IMS Research’s latest report on the smart card market projects that the installed base of smart cards is forecast to surpass the world’s population during 2009, meaning that on average each person on the planet will be in possession of more than one smart card. From relatively humble beginnings in 1983, it has taken 25 years for the smart card installed base to approach the level where, on average, everyone has at least one, IMS said. By the end of 2009 the installed base is projected to have passed the 7 billion level, a level the global population won’t reach until 2011. Furthermore, whereas previously smart card use was concentrated in specific markets and countries, the growing breadth of applications the market now addresses means that the use of smart cards is more widespread geographically than ever before. “By far, for most of us, the most likely reason we own a smart card is for use within our cellular handsets, in the form of a SIM card. Not all handsets require them, but an estimated 2.7 billion did at the end of last year,” stated Alex Green, the author of IMS Research’s annual Smart Card and Semiconductors in Smart Cards report. “The other two sectors that are forecast to aid the cellular market in driving the card installed base past 7 billion are the banking sector and the government/health sector, the installed bases of which are both projected to pass the 1 billion level this year. Additionally both are forecast to continue growing significantly, as banks look to improve security and reduce fraud and as governments roll out large national infrastructure projects that utilise smart cards. Typical examples of the latter are
IN BRIEF • Artemis Solutions Group (ASG) was one of a number of companies who provided advanced identification technology for the recent Olympic Games in Beijing. The company’s BioCert Aegis ID system was used to help prevent unauthorized access at the Olympic Reunion Center, a location which gives Olympians from prior Olympic Games, and VIP guests a meeting place on-site during the Olympics where they can enjoy live feeds of events and refreshments. As each attendee arrived at the ORC they were issued a secure Smart Card ID which allowed them to validate their identity for access to the venue. This secure ID card incorporated an integrated chip which contained all of the information about the identity of the individual and their ability to access the facility and was designed to incorporate a biometric profile. • On Track Innovations (OTI) has announced that it has been awarded the contract to supply its contactless card readers to the ERG Group for Utah Transit Authority´s (UTA) contactless credit card bus payment solution. The contract for the full rollout of the system in the Salt Lake City area follows a successful pilot project completed by ERG and UTA where buses serving Salt Lake City area ski resorts were equipped with the new system which allowed customers to use contactless credit cards and other smart cards for both transit payment and ski resort access. OTI is supplying the front-end solutions, including readers and its proprietary software, to support ISO 14443 proximity payments and ISO 15396 vicinity payments. • L-1 Identity Solutions has closed its tender offer for all of the outstanding shares of Digimarc Corporation and completed its acquisition of Digimarc´s ID systems business. Through the extended offering period, L-1 purchased 22,093,169 shares of Digimarc common stock, representing approximately 88.37 percent of the outstanding shares of Digimarc. L-1 exercised its option to purchase newly-issued shares of Digimarc common stock directly from Digimarc in order to acquire at least 90 percent of the outstanding shares and effect a “short-form” merger. Immediately following the merger Digimarc became a whollyowned subsidiary of L-1 and changed its name to L-1 Secure Credentialing. • VASCO Data Security has announced the launch of Digipass 810 for the Asian markets. The company’s Smart Card CAP reader has been upgraded and redesigned to accommodate Asian character sets, as long as they can be represented in a 80X14 dot matrix line. This way VASCO enables its Asian retail banking customers to offer their end-users a stand alone EMV-CAP E compliant card reader with e-signature capability.
Card Technology Today
5