microsoft chief predicts an explosion of smart cards · ! [email protected]. 205 205 205 205...

NEWSCARD

SMART November 1999

Volume8

Number 11

© 1999 Smart Card News Ltd., Brighton, England. No part of this publication may be reproduced, stored in a retrievalsystem, or transmitted in any form or by any means, electronic, mechanical, optical, recording or otherwise, without theprior permission of the publishers.

Microsoft Chief Predicts an Explosion of Smart Cards Microsoft is in an upbeat mood about its Smart Card for Windowsoperating system with Microsoft executives predicting that hundredsof corporations will deploy Smart Cards for log-in authenticationwithin a year.

CEO Bill Gates, told a meeting of Smart Card manufacturers, chipmakers and developers: “We see Smart Cards exploding andbecoming a key element in many scenarios.” He added that mostMicrosoft employees will use Smart Cards at work within the nextyear, and companies including Hewlett-Packard, Sun and Xerox arealready piloting Smart Card projects.

Continued on page 203

www.smartcard.co.uk

202

202

202

202

NEWSCARD

SMART November 1999

Volume8

Number 11

© 1999 Smart Card News Ltd., Brighton, England. No part of this publication may be reproduced, stored in a retrievalsystem, or transmitted in any form or by any means, electronic, mechanical, optical, recording or otherwise, without theprior permission of the publishers.

Microsoft Chief Predicts an Explosion of Smart Cards Microsoft is in an upbeat mood about its Smart Card for Windowsoperating system with Microsoft executives predicting that hundredsof corporations will deploy Smart Cards for log-in authenticationwithin a year.

CEO Bill Gates, told a meeting of Smart Card manufacturers, chipmakers and developers: “We see Smart Cards exploding andbecoming a key element in many scenarios.” He added that mostMicrosoft employees will use Smart Cards at work within the nextyear, and companies including Hewlett-Packard, Sun and Xerox arealready piloting Smart Card projects.

Continued on page 203

www.smartcard.co.uk

November 1999

Cards on the CoverSmart Axis Payment Card

06Visa’s “smile.co.uk” Debit Card

Page 212tick.et

Page 208British Airways’ Ex-Gratia Payment Card

Page 204

Main PhotographBill Gates, CEO, Microsoft

News

203 - 215MULTOS for AustraliaBA and CSI Trial ChipCASHSmart Cards for US Drug Center IDProton Algorithm on NIST ShortlistPortugal modernises tax paymentsBerlin Tick-et Fare SystemPathways to Acquire SSIMinister Sees Smart Cards In UseLufthansa’s Latest Smart MoveCo-op Launches Internet BankNew Smart Community on the NetMobile Security from SetecPatient Card from USIS Health

219Omicron Alliance with Dyncom

Smart Card Tutorial

216 - 218Briefing notes on Multi-ApplicationSmart Cards Part 1

If you wish to subscribe to Smart Card News pleasecomplete the form on page 219

CONTENTS

SMART CARD NEWS • NOVEMBER 1999

Smart Card News is published monthly by Smart Card News Ltd PO BOX 1383 Rottingdean Brighton East Sussex BN2 8WX EnglandTelephone : + 44 (0) 1273 236677 / 626677 • Facsimile : + 44 (0) 1273 624433 / 300991 • General Enquiries : [email protected] ISSN 0967 196X

Managing Director Patsy Everett [email protected] • Editor Jack Smith • Technical Advisor Dr David B Everett

Researcher Severine Percetti [email protected] • General Manager Tara Lavelle [email protected] Designer David Lavelle [email protected] • Marketing Manager Albert Andoh [email protected]

Customer Support Amanda Pearce [email protected]

North American Sales Office : Richard T Hauge 256 El Portal Way San Jose CA 95119-1413 USATelephone : +1 408 225 8074 • e-mail : [email protected]

Russian Agent : Alex Grizov Recon Company “Sport Hotel” 5th Floor Leninsky Prosp., 90/2 Moscow 117415 RussiaTelephone : +007 095 131 92 92 • Facsimile : +007 095 131 92 65 • e-mail : [email protected]

Asian Agent : J Clark Telephone : +852 2987 8737 • Facsimile : +852 2987 8732 • e-mail : [email protected]

India Correspondent : Shailaja V.R. e-mail : [email protected]

Editorial Consultants Dr Donald W Davies CBE FRS • Peter Hawkes • Simon Reed • Robin Townend

Printed by Design and Print (Sussex) Ltd. Telephone : +44 (0) 1273 430430

!Don’t Forget!

Our On-Line Website, containing On-Line News, a Library of Smart Cards and information about the full rangeof SCN services, can be found at the following address: www.smartcard.co.uk

203

203

203

203

An Explosion of Smart Cards

Continued from page 201

Gates, speaking at Microsoft’s Smart Card ’99Business Development Conference, told the 200attendees that a Microsoft Smart Card tool kit willbegin shipping in the first quarter of next year.

Microsoft Product Manager, Mike Dusche,predicted a fast ramp up in the corporate andconsumer markets. “Hundreds of corporations willbe deploying Smart Cards next year, growingquickly to thousands,” he said.

John Kloss, Senior Vice President of Smart Cardmanufacturer TTI, agreed that the time for thesedevices to become ubiquitous is near. “We reallythink that Microsoft’s entry into this market takesaway any doubt,” he said.

Related developments

In a separate announcement, Microsoft said that itsWindows for Smart Cards operating platform is toinclude support for the GSM platform, enablingnetwork operators and mobile equipment manu-facturers to customise and enhance services for theircustomers. Microsoft support for GSM is expectedto be available in an Option Pack early next year.

Semiconductor manufacturer, Infineon Tech-nologies, said it would work with Microsoft to builda common hardware and software platform to sparkdevelopment of Smart Card applications forWindows.

PubliCARD, Inc also announced that itssubsidiary, Amazing Smart Card Technologies, Inc.,will adopt the new Microsoft Windows for SmartCards operating system for use in SmartPassky,PubliCARD’s consumer-based Internet passwordmanagement solution.

In addition, Amazing plans to port its entire suiteof consumer Internet applications to Windows-powered chip cards in the coming months.

Microsoft is set to become a major player and influ-ence in the global Smart Card market. Meanwhile,card issuer rivals MasterCard and Visa are jockeyingfor market position.

MULTOS for Australia

The MasterCard/Mondex backed MULTOS multi-application Smart Card operating system has wonthe approval of the Australian Government, and allgovernment tenders will be based on the MULTOSplatform.

According to Mondex International, MULTOS wasin fierce competition with Microsoft and Sun Micro-systems and won out primarily because MULTOSis the only system that can prove its security (ITSECE6 certified). In addition, MULTOS is well supp-orted by Australian industry and is seen as the mostprivacy friendly.

The Australian Government provides services to 8-10 million Australians and it is envisaged that themajority of these will migrate to Smart Cards.

Visa Launches Global Platform

Visa International, noting what it describes as a“hesitation to invest” by Smart Card industryplayers, has launched GlobalPlatform, a forum toprovide a universal platform for the creation of SmartCard technologies.

In donating its Open Platform software to theconsortium’s current 15 members, Visa aims tofoster collaboration towards the advancement of theglobal business case for Smart Cards. Amongst thefounding members are Gemplus, Proton, BT, Sun,Microsoft, Motorola, Nokia, JCB Bank and NTTCorp.

MasterCard, promoting Mondex, declined to jointhe consortium.

GlobalPlatform plans to develop guidelines for cardissuing, point-of-sale and similar devices, inaddition to defining policies for the post-issuanceloading and management of applications withincards.

Contact$ Veronika Clough Mondex International

% +44 (0)171 557 5019& +44 (0)171 557 5219

$ Roslyn Hughes Chief Monister’s Department% +61 2 6207 0366! [email protected]! www.publicard.com ! www.microsoft.com

NEWS

USER NAME openup • PASSWORD scnwise

204

204

204

204

NEWS


BA and CSI Trial ChipCASH

Card Services International (CSI) has announced thecompletion of the world’s first commercial multi-currency, cross border, electronic purse paymenttransaction in association with British Airways.

The transaction was initiated at a BA service counterin Johannesburg International Airport, where valuewas “loaded” onto a passenger Smart Card in SouthAfrican Rand, and the equivalent value was latercashed in Pounds Sterling at London’s HeathrowAirport.

This was one of an initial group of transactions carriedout by BA passengers, using the global paymentssystem, ChipCASH, designed and developed by CSI.

ChipCASH allows value to be stored on a Smart Cardand subsequently cashed in any one of 25 differentcurrencies.

ChipCASH transactions are processed via CSI’sProcessing Centre in Dublin, Ireland, which isequipped to accept transactions from 70 countriesand 250 locations worldwide via the airline industry’sSITA network and the Internet.

The airline industry makes millions of cash andvoucher payments to passengers annually. Thesepayments relate to refunds, denied boarding comp-ensation and other forms of ex-gratia payments.

CSI is promoting ChipCASH as an industry standardfor the airline industry, based on the already agreedEuropay, MasterCard and Visa (EMV) specifi-cations for bank payment cards.

ChipCASH Smart Cards are accepted at an increasingnumber of airport locations including Bureaux deChange and Bank branches.

Organisations that have already agreed to acceptChipCASH Cards include: Travelex (USA and UK),Thomas Cook (USA and UK), NatWest Bank,Antigua National Bank, Barbados National Bank,First Citizens Bank (USA), ABSA Bank (SouthAfrica), Royal Bank of Canada, AFEX: MoneyExchange (Chile), International Currency Exchange(USA and UK), Zimbabwe Banking Corporation.

Bob Ayling, British Airways’ Chief Executive, said:“We are excited about the opportunities presentedby ChipCASH and we can clearly see the benefits

of secure electronic transactions replacing cash,cheque, voucher and other payment instruments atour international stations.”

CSI’s Chief Executive, Aonghus Geraghty, said: “Inthe world of secure cross-border payments, thesignificance of our achievement cannot be over-stated. Whether you view this transaction as a modernday travellers cheque or the most advanced SmartCard payment system in live use, it is the dedicatedeffort and commitment of the combined project teamof CSI and BA staff that has made it possible.”

Contact$ Aileen Carmody Card Services International

% +353 1 284 3233! [email protected]

Amino Launches Security Module

Amino Communications, of Cambridge, England,has developed a Smart Card module that providessecure payment and identification features to ITSEC6 for e-commerce and set-top box applications.

Martyn Gilbert, Amino’s Managing Director, said:“Industry analysts recognise that truly trustableaccess devices are an essential precursor to mass-market acceptance of e-commerce. The Smart Cardmodule, which is based on Amino’s patent-pendingIntAct architecture, can be used to build trustableaccess devices that provide secure firewallingbetween the Smart Card and the host.

“By providing a firewall between the host systemand the Smart Card reader, the host cannot ‘snoop’,and the user knows that the transaction is secure,”he said, adding: “We see this module being deployedin set-top boxes as a payment gateway, and as anadd-on to computer systems to provide e-commercefunctionality.”

The module, IntAct Module 8, can interpret multipleSmart Card applications through the use of MULTOS,the Smart Card Operating System, and will read anyISO 7816 Smart Card, including phone cards andelectronic wallets.

Contact$ David Dickin Amino Communications

% +44 (0)1954 260027! [email protected]

205

205

205

205

Smart Cards for US Drug Center ID

Smart Card technology is to be used at a US drugcentre to positively identify patients. CalledSMARTMED, it will be launched at the AddictionResearch and Treatment Center (ARTC) in New YorkCity by the end of this year.

Mallinckrodt Inc and Netsmart Technologies, Inchave announced that Netsmart’s wholly-ownedsubsidiary, Creative Socio-Medics, will introducethe system which will be a compatible sub-systemto the Mallinckrodt M4 methadone dispensingsystem.

It is being designed to eventually replace all clinicalservice data entry, which can be delayed, containerrors and uses valuable clinician time.

Mallinckrodt, the world’s largest supplier ofmethadone for treating opiate addiction, will providefunding for the SMARTMED initiative, which isintended to improve the quality of patient care andthe flow of clinical information.

Mallinckrodt’s M4 methadone dispensing system,in use since the mid-1990s at addiction treatmentcentres across the United States, is marketed exclus-ively by Creative Socio-Medics.

John Phillips, President of Creative Socio-Medics,said: “In future implementations, the scope of theSMARTMED system will enable other healthcareproviders, if authorised, to integrate their servicesinto a card which carries treatment plan informationand authorisation. For example, a patient in a drugprogramme would be able to access needed servicesfrom a local hospital emergency room because thecard would provide definite identification, confirm-ation of active program membership and importantclinical information such as drug interactions, bloodtype or ‘who to call’ emergency information.”

The system will include the use of biometrics, in thiscase a digitised photograph held in the patient’spersonal clinical database within the Smart Card. Tomaintain confidentiality, the photograph is nottransferred to the clinic’s system. When a patientarrives for treatment, the photograph is called up onthe service provider’s computer screen for visualidentification.

Contact$ Ron Marge Creative Socio-Medics

% +1 516 968 2000! [email protected]

Biometrics for Mass Market

Infineon Technologies and Identix Inc have teamedup to provide biometric fingerprint security forPersonal Computers and other applications.

Identix’s IT Security Division, Identicator Tech-nology, Inc., will bundle the Infineon FingerTIPbiometric ID sensor chip with the Identicator BioEngine and BioLogon fingerprint identificationsecurity software to create a complete biometricsecurity solution for potential integration into massmarket applications.

The fingerprint sensor chip occupies an area aboutthe size of a postage stamp and can be incorporatedinto a wide range of products, including desktopcomputers, laptops, computer peripherals, cellularphones, ATMs, set-top boxes, copiers, buildingaccess systems, and eventually, Smart Cards.

“The agreement moves integrated circuit-basedbiometric identification technology into the market-place by delivering complete biometric securitysolutions that combine a highly advanced fingerprintimaging chip and a proven suite of biometricidentification application software,” said RandallFowler, Identix Chairman and CEO.

Infineon has been shipping its FingerTIP biometricsensor since August 1999. An evaluation kit designedto facilitate the FingerTIP sensor’s integration intoany application is available. It comprises a FingerTIPmodule, a power supply, PC drivers and a softwaredevelopment kit including biometric algorithms forfingerprint recognition.

Contact$ Katja Schlendorf Infineon Technologies

% +49 89 234 28480! [email protected]

Visa Approves ActivCard Reader

ActivCard SA has announced that it has receivedLevel 1 EMV (Europay, MasterCard, Visa) approvalfor its ActivReader handheld Smart Card reader.The approval positions ActivCard’s e-businessdigital identity technology as a new platform forsecure business-to-consumer electronic transactionsand on-line banking, among other high growthmarkets.

Contact$ Frédéric Engel ActivCard

% +33 (0)1 42 04 84 00! [email protected]! www.activcard.com

NEWS


206

206

206

206

Proton Algorithm on NIST Shortlist

Proton World has announced that a cryptographicalgorithm devised by Joan Daemen, in collaborationwith Vincent Rijmen, has been short-listed as one offive finalists by the US National Institute forStandards and Technology (NIST) which will issuethe Advanced Encryption Standard (AES), the newworld standard for Smart Card security.

Dr Daemen works in the Architecture and Crypto-graphy team within Proton World’s Research &Development department, and co-writer Dr Rijmendoes research in the Electronics Department of theCatholic University of Leuven.

The algorithm, known as Rijndael (a word composedfrom their surnames) was one of 15 submissionsmade to NIST by cryptographers from all over theworld a year ago. The algorithms were then publishedand cryptographers were invited to attempt to crackthem.

The five short-listed, all passed stringent NISTcriteria covering lack of cryptographic weaknessesand speed and efficiency on a range of platforms.

The Data Encryption Standard (DES) was originallyadopted by NIST in 1977 for all US governmentinformation processing, and quickly became a defacto world standard for the financial services sector.Proton-based cards use an enhanced form of DES,known as Triple-DES to protect the data in theirmemories: this was developed to meet the bankingsector requirements for security and auditability.

Contacts$ Philip Bulman NIST

% + 1 301 975 5661! [email protected]

$ Dominique Hautain Proton World International% + 32 2 724 5253! [email protected]

Mondex in Trial with BT

Mondex UK is working with BT in a trial of ADSLtechnology, which will turn an ordinary phone lineinto a high speed digital connection capable ofcarrying information at between ten and 40 times thespeed of a conventional modem. ADSL technologyenables users to download information, images,video or graphics almost instantly. The technologywill start to be made available to consumers in theUK early next year.

The 800-plus trialists are using Mondex electroniccash, supported by software and services fromSmartAxis, to pay for services such as videos, musicand Internet games to be delivered to their PC. Whenusers run out of money, they log onto their bankaccount and use the SmartAxis service to rechargetheir cards, turning their PC into a cash point.

Julian Wilson, CEO of SmartAxis, said: “This is atrue micropayment system. It is cash over the Internet.Credit cards are not economical for low valuepayments. What SmartAxis plus Mondex provide isthe opportunity to sell low value digital goodsprofitably. The partnership creates a real alternativeto subscription and offers significant cost savings forsellers and buyers of digital goods.”

Contacts$ David Pincott BT Interactive & Multimedia

% +44 (0)171 492 8470! [email protected] Adrian Weston, SmartAxis% +44 (0)1273 506 655! [email protected]

$ Dan Brockbank Mondex UK% +44 (0)171 778 6820! [email protected]

New Smart Card Awards

Advanced Card Awards Limited has announced thecategories for the year 2000 Awards which will bepresented on 9 February 2000 at the London Hiltonon Park Lane. The event is being organised in co-operation with the Smart Card 2000 conference andexhibition at Olympia, London, UK from 8 - 10February next year.

The Awards categories are: most innovative productannouncement of the year and best applications inloyalty, payments, transport or travel, communi-cations; best new security product, best new chip,best new product marketing campaign and the ORGAAdvanced Card Hall of Fame award - for industrylifetime achievement.

New categories are: best new card or chip manu-facturing equipment, best new peripheral, RNIBusability award and the judges’ award for most out-standing use of Smart Cards in 1999.

Closing date for entries is 10 December.

Contact$ Advanced Card Awards

% 44 (0)1733 245841! www.smart-ventures.com

NEWS


207

207

207

207

Portugal modernises tax payments

The Portuguese tax authority (Direco das Contrib-uices e Impostos) has introduced a new schemeusing Smart Card technology to simplify tax pay-ments and reduce the volume of paperwork.

The project involves SIBS (Sociedade InterbancariaDe Servios), the Portuguese Interbank Consortium,which has signed a contract with Bull for a firstdelivery of 100,000 microprocessor cards for distrib-ution to residents of Lisbon and Porto.

Smart Cards will become operational at the beginningof next year, enabling users to make payments directlyfrom any ATM.

In Portugal, ATMs have, for several years, been used,for example, to buy theatre or rail transport tickets.SIBS believes that the card can be adapted to otheruses and chose Bull’s SmartEMV card. Compliantwith the EMV (Europay/ MasterCard/Visa) specific-ations, SmartEMV ensures that banks will be ableto offer new services to their customers.

Contact$ Catherine Vincent Bull Smart Cards & Terminals

% +33 (0)1 39 66 42 63! [email protected]

Webshack Using Smart Cards

An Internet cafe in London, UK, called the Webshack,is providing Smart Cards free to customers to pur-chase their Internet time and pay for any goodspurchased on-line.

For example, a Mondex electronic cash card wasused to purchase 60p worth of music, downloadedfrom the Internet.

The Webshack is providing customers with Mondexor Proton Smart Cards, at no cost. All they have todo is transfer funds from their bank via an ATM orsoftware based cashpoint. Terminals around the cafehave Smart Card readers installed which enablecustomers to pay for their Internet time and purchaseson-line.

SmartAxis produced the software that enables mer-chants to accept electronic cash.

! www.smartaxis.com

Smart Internet Security for US DoD

The US Department of Defense Financial Manage-ment Service (DFAS) has placed a half million dollarorder with Litronic Inc for a Smart Card-based digitalsignature system.

Litronic will install the system into the DFAS DefenseJoint Accounting System (DJAS) for more than 1,400new users, enabling secure government procurementand electronic commerce.

Bob Gray, Vice President of Product Developmentat Litronic Inc said: “It is anticipated that Litronic’selectronic commerce system will also be used as a‘technology refresh’ for the 30,000 US Army Corpsof Engineers personnel already using our technologyfor their Financial Management System (CEFMS),potentially leading to a $10 million contract.”

CEFMS has been calculated to transact over $27billion dollars over the past four years in e-commerce,all digitally signed by Litronic’s system.

Contact$ Gina Ray Litronic

% +1 949 833 8006! [email protected]

Oberthur’s US Plant Operational

Oberthur Smart Cards USA has launched its newmanufacturing plant with the capacity to produceover 200,000 Smart Card modules a day.

In limited operation since July, the 3,000 square-foot facility can process unsawn silicon wafers intoencapsulated modules completely within Oberthur’sSouthern California manufacturing operations,increasing security and efficiency for customers.

“The addition of a dedicated microelectronics roomgives Oberthur a clear advantage as a full-serviceSmart Card provider from silicon wafers to finished,personalised Smart Cards,” said Philippe Tartavull,CEO of Oberthur Smart Cards USA. The companyplans to increase micromodule production to 400,000a day.

Contact$ Francine Dubois Oberthur, USA

% + 1 310 884 7981! [email protected]

NEWS


208

208

208

208

Berlin Tick-et Fare System

The ERG Motorola Alliance has announcedimplementation of the first phase of a contactlessSmart Card automated fare collection (AFC) systemtrial for the Transport Authority of Berlin, or BVG. The BVG “tick-et” fare system allows participatingpassengers to use Smart Cards for payment on theU-2 and U-4 subway lines and their 33 stationsinvolved in the field trial. The remaining phases ofthe trial, which include two bus routes with 44 busesand one tramline with 14 trains and seven stations,are scheduled to be implemented by the end of thisyear. About 25,000 people will take part in the trial.

“Within the short period of only seven months,the Alliance was able to deliver an integrated SmartCard fare collection system on time for this impor-tant customer,” said Francois Dutray, Motorola VicePresident and General Manager, Worldwide Smartcard Solutions Division.

The Alliance received a contract last March toconduct a field trial for the BVG, as well as for theS-Bahn Berlin GmbH (Rapid Train System ofBerlin) and the VBB (Transport Authority of Berlin-Brandenburg).

Up to 150,000 transactions per day are expected,including transfers between stations and modes oftransport. The BVG has scheduled full systemimplementation covering Berlin and the surroundinggreater Brandenburg area by 2002.

The existing system operates on a flat fare paper-based ticketing system. The new system will operatewith a time- and distance-based fare structure withthe Smart Card serving as a reusable ticket. Passen-gers will buy public transport “units” which will bedebited from their cards by contactless check-in/check-out terminals at the stations or in buses andtrams. The Alliance combines ERG’s Smart CardAFC application with Motorola’s M-Smart SmartCard, systems integration and operationalmanagement.

Contacts$ Wendy Watson-Ekstein ERG Card Systems

% +61 8 9273 1204! [email protected]

$ Mike Doheny Motorola% +1 847 576 6931! [email protected]

Phone Cards and Vending Project

Prepaid phonecards which can also be used topurchase beverages at vending machines have beendeveloped by Gemplus for CANTV, the largesttelecommunications provider in Venezuela.

The new application employs the UniversalSecurity Access Module (UNISAM), which wasadded to the second-generation Smart Card tech-nology utilised for prepaid phone cards. TheUNISAM acts as the intelligent part of the auth-entication system and allows the Smart Card to beinteroperable within multi-application schemes.

In Venezuela, 26 vending machines have alreadybeen equipped with the technology and CANTVexpects a further 200 machines to be installed by theend of the year and forecasts more than 2,000installations during 2000.

“This is the first time a payphone Smart Card hasalso been used with a new objective different fromthe traditional one,” said Bertrand Moussel, VicePresident of Marketing and Sales, Latin America,Gemplus.

He said it set the stage for other applications in prepaidservices such as the CyberCafe Internet and prepaidcards for basic services such as water and electricity.

Gemplus worked with Debitek, a systems integrator,and Dixie Narco, a vending machine provider, tobring the Smart Card technology to CANTV.

Contact$ Tarvinder Karsandh Gemplus

% +1 650 654 2917! [email protected]

ECC for Schlumberger SIM Cards

Certicom Corp has licensed its Elliptic CurveCryptography (ECC) encryption technology toSchlumberger to secure GSM mobile applications.The Certicom technology will enable over-the-airkey provisioning and transaction-level securitysolutions and will be implemented on Schlum-berger’s Simera range of SIM cards.

Contact$ David Krane Certicom Corp

% +1 510 780 5420! [email protected]

NEWS


209

209

209

209

Pathways to Acquire SSI

The Pathways Group, Inc has announced that it isacquiring SmartCard Solutions, Inc., a technologybased company in Aspen, Colorado.

Pathways and SmartCard Solutions have beencollaborating on a business solution for a multi-national movie theater and entertainment companyunder a Memorandum of Understanding signed inAugust 1999. This includes integrated ticketinginvolving both attended and unattended vendingalong with Smart Card access and related loyaltyprograms.

SmartCard Solutions currently has its Point of Salesystem installed in several ski areas in the RockyMountains, including Colorado where the systemprocesses some 3.5 million transactions per season.

Robert Haller, Pathways’ Executive Vice President,said: “As a result of working closely with SmartCardSolutions over the past several months it becameclear that in combining our technologies, resourcesand talents we could present improved, integratedproducts and services to the resort, amusement, skiand ticketing industries.”

The Pathways Group is a US developer of SmartCard-based technologies offering Smart Card andtransaction processing solutions for commerce,retail, education, recreation, amusement, govern-ment, and transportation.

The Group also manufactures SPRINTICKETunattended ticketing dispensers. In addition toaccepting all major credit cards, the dispensers aredesigned to accept and recharge Smart Cards. Theyare currently installed at ski areas, amusement parks,and transportation services across the United States.

Jay D Lussan, CEO of SmartCard Solutions, saidthey looked forward to realising the market impactof the combined resources, technologies and businesssolution models offered by the integration of the twocompanies.

SmartCard Solutions services multiple verticalmarkets including ski and golf resorts, special events,cruise lines, college and corporate campuses.

Contact$ Carey F Daly II Pathways Group

% +1 707 546 3010! [email protected]

Portable Security for e-Business

Baltimore Technologies and Gemplus have ann-ounced the enhanced integration of their productsand a sales and marketing agreement for Smart Card-based PKI (public key infractructure) systems.

Baltimore has incorporated Gemplus GemSAFESmart Cards into its PKI solutions for added securityand manageability in a variety of e-commerceapplications. Baltimore products such as UniCERT,MailSecure and PKI-Plus will support GemplusGemSAFE Smart Cards in future versions.

“Smart Cards provide a secure, portable means forusing PKI technology and digital certificates and arerapidly becoming part of everyday life,” said PaddyHolahan, Executive Vice President of Marketing,Baltimore Technologies.

Olivier Chavrier, Gemplus’ EMEA IT MarketingManager, commented: “PKI technology has becomethe de-facto standard to secure open networks. SmartCards increase the performance of any PKI implem-entation by providing corporations with enhancedsecurity, portability and an easy-to-use solution.”

Contact$ Carol Clavin Baltimore Technologies

% +353 1 605 4357! [email protected]

EI2 and ITC ME Agreement

Electronic Identification, Inc. (EI2), developer ofSmart ID Card technology supported by a state-of-the-art intranet framework, has announced anagreement with International Trading Company(ITC), a subsidiary of the Al Hamed Group, one ofthe largest conglomerates in the Arab Gulf Cooper-ative Council (AGCC).

“With our relationship with ITC and our teamingpartner, Hewlett Packard, and other leading tech-nology companies, EI2 can now proceed to closeproposals that are now on the table in the MiddleEast, projects that include detention facilities, non-resident workers permits, electronic ID for millionsof Hajj pilgrims and electronic visas,” said TerryKirby, CEO of EI2.

Contact$ John Di Cicco Electronic Identification

% +1 877 713 1900

NEWS


Jane

Pitm

an, C

hair

man

of

Her

tfor

dshi

re C

ount

y C

ounc

il’s

Envi

ronm

ent C

omm

ittee

210

210

210

210

Minister Sees Smart Cards In Use

UK Transport Minister Keith Hill, who met localtransport chiefs in Hertford last month, later saw ademonstration of the Herts Smart Card used on localbuses and trains.

The scheme, developed by a partnership of HertsCounty Council, Arriva Bus Company and SmartCard company Transmo, is currently available toschool children and concessionary fare users in WestHertfordshire. A pilot scheme has recently beenlaunched to enable school children to purchaseschool meals using the card. Further plans includeusing the card to access library services and forparking.

Keith Hill commented: “Local authorities play avital role in delivering real change and making asuccess of the (government’s) integrated transportstrategy. I am delighted to see this initiative whichfurther demonstrates how integrated transportschemes can make public transport more easilyaccessible and even spread over into other areas ofour lives.”

Contacts$ Suzanne Donovan COI Eastern (for DOE)

% +44 (0)1223 345734! [email protected]

$ Mark Rosen Herts Smart Scheme% +44 (0)1763 249933! [email protected]

$ Seth Brooke Press Hertfordshire% +44 (0) 1992 555555

Biometrics for Smart Cards

iD2 Technologies, a developer of PKI (Public KeyInfrastructure) solutions to enable users to besecurely identified across the Internet, has signedan agreement with Precise Biometrics to add

fingerprint recognition to its range of PKI and SmartCard solutions.

“The Internet remains a relatively anonymousenvironment and ensuring someone’s identitybefore a transaction takes place has become a keyfactor in the growth of many e-commerceapplications,” explained Rain Eriksoo, iD2’sMarketing Director.

Peter Höjerback, Managing Director for PreciseBiometrics, said: “It is our goal to replace all presentsecurity systems with advanced user friendlybiometrics systems that offer enhanced security.

“Furthermore, our solutions enable customers todecrease their costs through reduced password andPIN administration. For organisations who issue alarge amount of Smart Cards this is a task thatrequires considerable resource and investment.”

Contacts$ Karin Kronborg iD2 Technologies

% +46 8 775 5200! [email protected]

$ Peter Höjerback Precise Biometrics% +46 46 286 5770! [email protected]

CEPS Management Consortium

Representatives from major electronic purseschemes have been appointed to the CEPSManagement Consortium to manage the on-goingdevelopment of the Common Electronic PurseSpecifications (CEPS) which provide for the inter-operability of e-purse schemes worldwide.

Appointments were: Enrique Rodriguez Bonacheraand Alfonso de la Viuda of CEPSCO Espanola AIE,Gerd Cimiotti and Udo Einhoff for EUROKartensysteme, Herve Kergoat and Jean-Paul Ransof Europay International, and Mary Buckley andGeorgann Scally of Visa International. Four furtherappointments will be announced shortly.

Speaking at the inaugural meeting of the Consortiumin New York, Mary Buckley, who was appointedchairperson said: “Working in collaboration withfinancial institutions, telephone companies, masstransit groups and technology vendors globally, theCEPS Management Consortium will extend thereach of interoperable electronic purse schemes.

“It will act as a catalyst to worldwide acceptance oftrue multiple application Smart Cards,” she said.

NEWS


Boei

ng 7

47-4

00

Phot

o: A

stro

visio

n /

Luf

than

sa

211

211

211

211

Lufthansa’s Latest Smart Move

Lufthansa, which pioneered Smart Cards for air milesfor its passengers, has extended its interest in thetechnology to digital certificates for electronictransactions.

The German national airline has set up a newsubsidiary called Seals, formed by Lufthansa AirPlusand Technologieholding, to create, register and issuecertificates for use by its corporate customers.

GlobalSign, an international certification networkbased in Brussels, will provide the technology andsecurity for the service including the holding ofelectronic keys and will retain control over theconformity of the certificates by external audits.GlobalSign estimates that the new contract willgenerate an estimated 2.2 million digital certificates.

Seals is operating the service on its national extra-net in Germany, already in use for e-commerceapplications by leading travel companies. The Sealscertificate has been designed to work with SmartCards. Every company using the network will receivea personalised Smart Card for each authorisedemployee, with a personal digital signature. Theauthorised employee can gain access to the extranetvia a card-reading device and a verification password.

A personal user profile can be developed for eachemployee specifying the date up to which they willbe allowed extranet access as well as defining thetransactions that they are authorised to execute.

Lufthansa AirPlus is one of the leading players inthe travel - and now Smart Card - markets, with13,000 corporate clients and around 400,000 SmartCards in circulation.

Contact$ Jürgen Dierickx GlobalSign

% +32 2 724 3615! [email protected]

ERG to Buy Transmo

Australia’s ERG plans to buy Transmo Citycard, aUK company specialising in multi-application SmartCard systems for the public sector. Transmo’stechnology is used in card systems in Hertfordshire,Essex, Nottingham and Southampton and is alsodeveloping an international base. The ERG offer is£200,000 (A$500,000) plus the issue of one millionordinary fully paid shares in ERG.

Transmo’s multi-application Smart Card system,known as Citycard, includes its patented SecurityModule which authenticates card transactions andconfirms that a card is valid for a particular appli-cation.

Transmo currently has 200,000 cards on issue andthis number is expected to multiply rapidly. Citycardis an “open” system, designed to be used with multiplecard types and will integrate with the prepaymentcards business owned by ERG, Stagecoach and Semato deliver a co-ordinated Smart Card system for transitand cities.

Contact$ Wendy Watson-Ekstein ERG Card Systems

% +61 8 9273 1204! [email protected]

Do you remember?

In December 1994 a high powered UK Cabinet com-mittee was studying developments in card technologyincluding Smart Cards, identity cards and electronicvehicle tagging.

The card technology group known as GEN 34 con-sisted of 13 cabinet ministers and one civil servant.The committee was charged to consider the devel-oping technology of card systems and the potentialdemand for such systems from government depart-ments.

In February 1995 an old filing cabinet was found ina government surplus store in Manchester, U.K withthe UK’s plans for a national ID card system. Memosdealing with an investigation into the feasibility ofusing Smart Card technology in a national ID cardsystem together with a detailed card design andCabinet level letters exchanged on the subject werealso discovered.

NEWS


212

212

212

212

Co-op Launches Internet Bank

The Co-operative Bank last month launched Smile,the UK’s first full-service Internet bank using SmartCards from Schlumberger who initially will supplyall the Smart Cards for the new Smile Visa Gold andVisa Classic credit cards, and the Smile debit card.

“Smart Cards offer our customers exceptional levelsof security today - they also give us a tremendousopportunity to add value to our services,” said KeithGirling, Head of Technology at smile.co.uk. “TodayInternet banking is all about convenience and betterrates for customers, and lower overheads.

“By choosing Smart Card technology, Smile ispositioning itself for strong growth in the Internetmarketplace,” said Guillaume Mouscadet, Schlum-berger Area Sales Manager, Banking & Retail.

The new Smile cards conform to the UK’s nationalstandard for Smart credit cards, UKIS, ensuringcompatibility with existing clearing systems as wellas the major worldwide EMV Smart Card specifi-cations.

smile.co.uk offers a range of competitively pricedproducts, such as no-notice savings accounts, creditcards, personal loans and ISAs - all the services andthe convenience of a High Street bank on the Internet.Customers will be able to conduct all their routinebanking from anywhere in the world via the Internet.They will also be able to gain access to cash via thenational LINK cash machine network.

Early next year, customers will be able to cash chequesand pay money in at 15,500 Post Offices in Englandand Wales and a further 2,400 Post Offices in Scotlandand Northern Ireland.

Contact$ Barrie Nicholson Wordsun (for Schlumberger)

% +44 (0)1258 840999! [email protected]

RSA SecurID 3100 Smart Card

RSA Security Inc has designed a new RSA SecurID3100 Smart Card to securely store any combinationof users’ private digital credentials in an RSA Keon5.0 Advanced PKI environment. The card is intendedto provide user mobility and maintain the integrityof PKI-based network security by preventing

unauthorised access to these credentials throughstrong, two-factor user authentication.

The RSA SecurID 3100 is designed to securely storetwo sets of 512- or 1024-bit RSA public and privatecryptographic keys, an RSA SecurID seed record,two X.509 v3 digital certificates, symmetric fileencryption keys and network operating systemauthentication information in a convenient, portableform that can double as an employee ID badge andbuilding access card.

! www.rsasecurity.com

iD2’s PKI selected by D-Trust

The German Trust Centre, D-Trust GmbH, a jointventure founded in 1998 between the Daimler-Chrysler subsidiary debis Systemhaus and theBundesdruckerei, is to introduce PKI (public keyinfrastructure) identification systems from Swedishtechnology company, iD2 Technologies, for its digitalsignatures.

The Smart Card-based PKI technology providesexact identification of users conducting financialtransactions, or exchanging data via the Internet. D-Trust will issue Krypto Smart Cards with digitalcertificates.

Contacts$ Karin Kronborg iD2 Technologies

% +46 8 775 52 00! [email protected]

$ Lucia Marrocco D-Trust GmbH% +49 30 2 59 39 10! [email protected]

Theatre Tickets by Mobile Phone

Norwegian GSM operator, Telenor Mobil, which hasmore than 1.2 million subscribers, has chosen AcrossWireless’ application delivery platform to provideits GSM mobile customers with an Internet basedcinema and theatre ticketing service.

Subscribers can also make payments, in real time,via GSM.

Contact$ Karin Olsson Across Wireless

% + 46 8 685 9300! [email protected]

NEWS


213

213

213

213

NEWS

New Smart Community on the Net

NetCity.com.inc has announced phase one of itsSmart Card-enabled Internet community. Memberswill be able to securely conduct on-line shopping orbanking transactions, access e-mail or a variety ofother services.

According to Gary Brooks, NetCity.com’s Presidentand founder, over 21,000 “NetCityzens” signed upfor the service in just over two weeks.

“We are experiencing phenomenal growth andanticipate one million members by the end of theyear,” he said.

Members receive a welcome kit that includes theSmart Card, reader and $100 worth of “SmartMoney”that they can use for immediate product discountson shopping transactions.

There is no cost to join the service which includesfree e-mail, web site, shopping and banking fromany computer or ATM with Internet access.

Contact$ Denise Erkeneff NetCity.com Inc

! [email protected]

ATM Cards for Internet Purchases

The Internet Council of NACHA, the ElectronicPayments Association, is to pilot the use of ATMcards combined with digital signatures for Internetpurchases.

“The goal of the pilot program is to develop and testa low-cost, convenient payment option for Internetpurchases incorporating robust security andimmediate authorisation,” said Lucien Dancanet,Information Security Director of Citigroup. “In thispilot a financial institution validates a digitalsignature, similar to the way it normally validates apersonal identification number.”

In addition, the pilot will develop business practicesand operational rules that will allow regional andinternational ATM networks to communicate witheach other to approve consumer purchases.

Current participants in the pilot include Citigroup,STARsm, AmeriNet, Inc., Internet RevenueNetwork, PULSE, eFunds Corporation and UTMsystems corp.

In the pilot, a participating consumer would use a

private key securely stored in a chip on a device suchas a Smart Card or within a web application, togenerate digital signatures. When making an Internetpurchase, the consumer would use his or her ATMcard number; but instead of using a PIN, the consumerwould digitally sign an electronic authorisation form.The form is then sent to the consumer’s financialinstitution where the digital signature is verified.

The merchant would then receive confirmation, theconsumer’s account would be debited through aparticipating ATM network, and the payment wouldbe settled through the Automated Clearing House(ACH) Network.

A technical test is planned for the 4th quarter of 1999to demonstrate the feasibility of a consumer digitallysigning a merchant’s form, and transporting thedigital signature through third-party processors andATM networks to financial institutions. A full-scalepilot is scheduled for the 2nd quarter of the Year2000.

! www.nacha.org

Smart Card Fingerprint ID

Elva of France has designed a new chip, the AT88SC1608, for Atmel for use in a secure identity cardapplication that merges Smart Card technology withfingerprint verification, card printing and digitalimaging.

The encryption/decryption technology developed forAtmel by Elva combined with Polaroid’s PFS-100fingerprint imaging developed by Atmel andPolaroid, compares the cardholders’ actual finger-print against the fingerprint stored in the Smart Cardor ID card verifying the holders’ identity.

The new IC provides 17,408 bits of serial EEPROMmemory organised into nine zones - eight user zones,and one configuration zone. The device is optimisedas a secure memory system for the Smart Card market.The designed chip includes 64-bit authentication, 8sets of passwords and both authentication andpassword attempts counters.

Contact$ L De Beach Elva Inc

% +1 561 361 9277! www.elva.fr


214

214

214

214

NEWS


Mobile Security from Setec

Setec Oy, of Finland, has introduced a special eSIMcard for digital signatures in GSM wireless networks,eSIM 16K/RSA, which contains a crypto controllerand keys enabling digital signature and encryptionover the air. Setec is the first Smart Card supplier tocombine GSM and an RSA crypto controller on oneplatform.

The demand for secure electronic signature tech-nology is growing rapidly, especially in virtualbanking and e-commerce. The Setec eSIM is indep-endent of WAP, operators, card and telephonemanufactures and different GSM technologies.

“To pay invoices through mobile phones is nowpossible,” said Pekka Santanen, Senior Vice Presi-dent, Setec’s Mobile Communications unit. “Thebank can send its customer an SMS message of a dueinvoice and all the customer needs to do is to acceptor decline the payment with a single response.”

To have a reliable and indisputable electronicsignature is essential, he said, adding: “The eSIMsolution makes the signature over the air, and thisopens huge commercial opportunities to the bankingand finance sector as well as to other industrieshandling electronic value.

“It is a secure and fraud proof way to use electronicpayment in our every day life. It contains highlysophisticated security solutions, which are a necessityin the banking and finance sector”, says PekkaSantanen.

Contact$ Jouni Heinonen Setec

% +358-50-553-9363! [email protected]

Brazil Plan for 21.5m Chip Cards

Visa of Brazil, together with 13 member banks, plansto replace 21.5 million magnetic stripe credit anddebit cards with multi-application chip cards overthe next three years.

The project, costing $70 million, is focused onCampinas, Sao Paulo. Participating banks includeBradesco, Banco do Brazil, Unibanco, Banespa,Lloyds Bank, HSBC and BankBoston.

By year-end 1999, Visa do Brazil anticipates around

150,000 chip cards to be circulating in Campinas.According to Visa, the project puts Brazilian paymentsystems at the forefront of technological innovation,together with the UK and France.

Banking on the Move

Giesecke & Devrient, Motorola and Atos haveteamed up to offer GeldKarte customers multimediabanking and payment systems on the move, includinge-purses.

The trio anticipate a demand for advanced and securebanking and retail applications based on mobileterminals. They plan to combine Motorola’s dual slotSmart Card phone, StarTAC, with Atos’ financialservices platform POSEIDON fsp and use G&D’sGeldKarte.

The project is seen as a first step to transform themobile handset into a point-of-sales terminal andprovide a platform for secure e-commerce services.

Contact$ Heidi Kuehn Atos

% +49 2408 148-353! [email protected]

$ Christian Treinies Giesecke & Devrient% +49 89 4119 2125Motorola! [email protected]

Prepaid Card Security

Schlumberger has announced a new generation ofits Smart Card security management system to helpprepaid card scheme operators manage logistics andsecurity while meeting the demands of high volumeproduction and integrated systems.

Called KeyOps Pro, it provides capabilities for securegeneration and management of keys, securitymodules and prepaid Smart Cards, including testingprocedures which ensure card security and improvedelivery time.

At the centre of KeyOps Pro is a secure system forgenerating and transmitting the unique key inform-ation into the chip embedded in the tamper-resistantcard.

Contact$ Dirk Hinze Schlumberger Test & Transactions

% +33 (0)1 47 46 79 50! [email protected]

215

215

215

215

NEWS


Patient Card from USIS Health

An emergency program that provides healthcareprofessionals with portable, confidential patientmedical records, has been announced by USISHealth, a healthcare application service provider. Partof the USIS Global e-Health Management Solutionoffered to consumers, healthcare prof-essionals andinsurers, it uses a multi-application Smart Card thatgives automated access - with secured authorisation- to an individual’s emergency medical and insuranceinformation.

Contact$ Malena Du Tilly the Bernard Group (for USIS America)

% +1 512 327 2195! [email protected]

Schlumberger SIMs for Taiwan

Schlumberger is supplying Taiwan mobile phoneoperator FarEasTone with Cyberflex Simera 32, 32Kbytes Java SIM cards to provide business orientedand leisure information-on-demand services - plusmobile banking. FarEasTone will also be issuing thenew SIMs to its prepaid subscribers, an industry first,and seen as a key differentiator in this highlycompetitive market.

ContactPat Ng Schlumberger% +65 746 9676! [email protected]

Gemplus to use Setec O/S

Gemplus of France has entered into a licenseagreement with Setec Oy of Finland to globallyproduce, market and sell public key cards with Setec’sSetCOS operating system.

The licensed SetCOS 4.4 operating system imple-ments a general purpose multi-application SmartCard with RSA based public key functions for digitalsignatures. It is currently going through the ITSECsecurity evaluation at level E4 High. SetCOS 4.4 willbe fully compliant with, for example, the GermanDigital Signature Act.

Contact$ Fred Granberg Setec Oy

% +358 9 8941 4503! [email protected]

GSM Connectivity for Payphones

“Half the world’s population have never made aphone call,” said Jim Wingo, Schlumberger’s VicePresident Phone Products, when the companyannounced it had added GSM connectivity to itsAccess payphone family, providing fast, easyconnection to the wireless local loop.

The rural payphone market was an extremelyattractive investment opportunity for large and small-scale operators, said Wingo.

Called Access GSM, the new payphone allows publictelecommunications and GSM network operators toeasily extend their services to under-serviced areas.

Schlumberger also announced it has extended itsAccess payphone family with Access Combo whichis equipped for Smart Card, magnetic stripe card andcoin payment.

People on the Move

Ingenico Fortronic, EFTPOS terminals manu-facturer and part of Groupe Ingenico, has appointedJohn Hutchinson, formerly with British AirwaysAir Miles, as Regional Sales Manager. GrahamWright, previously a business-to-business marketingconsultant, becomes Senior Product Manager. TracyMcLeod joins the company from AMP as ProductManager.

ActivCard SA has moved Eric Tocatlian from itsEuropean headquarters in France to head up its newUK office in London.

Polish Bank Order for Hypercom

Polish bank, Wielkpolski Bank Kredytowy (WBK)has ordered 1,500 Hypercom ICE 5000 touch-screencard payment terminals which support credit anddebit functions as well as Smart Cards and loyaltysystems. It also ordered POS networking systemsbased on Hypercom’s Integrated Enterprise Networkequipment.

Contact$ Mark McMurtrie Hypercom Europe

% +44 (0)1483 718600! [email protected]

216

216

216

216

Figure 1

SMART CARD TUTORIAL


Briefing notes on Multi-ApplicationSmart Cards – Part 1

So much has happened in the world of Smart Cardssince our original tutorials that it seems appropriate tolook at today’s technology from a different viewpoint.

Multi-application is the word upon everybody’s lipsand yet there is nothing new about this concept in factit was well covered by the older cards obeying the ISO7816 standards that we explained in detail in our earlierarticles. What is new is the way that multi-applicationcards are provided by the use of virtual machinesoperating under the JavaCard, Multos and Smart Cardfor Windows (SCfW) specifications and the improvedsecurity offered by such an approach.

In this series of articles we are going to explore theconcept of Smart Card virtual machines, the specific-ations surrounding their use and in particular the VisaOpen Platform. We will also examine the main productfamilies (JavaCard, Multos, and SCfW) and the realproducts based on these specifications. In these articleswe will discuss the requirements for a multi-applic-ation environment and will examine the securitynecessary not only for segregating the applications butalso for dynamically loading (and deleting) applic-ations on the card when it is in the field.

Let us start by reminding ourselves of the principlecomponents of the Smart Card chip as shown infigure.1. The contact Smart Card is normally fabricatedwith a single chip containing the processing logic, thevarious memory types ROM (Read Only Memory),

RAM (Random Access Memory), EEPROM (Elec-trically Erasable Programmable Read Only Memory),the serial I/O (input/output) port for communicatingwith the terminal and optionally a coprocessor foroptimising the computation of public key crypto-graphic algorithms.

The ROM memory contains the operating system andoptionally all or part of one or more applications. TheROM memory is set when the chip is made and cannotbe modified after manufacturer. Clearly such memorycannot be used to store application data that needs tobe modified during the lifetime of the card.

The RAM memory is the working memory used bythe processor to execute the necessary operations forthe operating system and the various applications. Thismemory is volatile and loses it content when power isremoved from the chip.

The EEPROM memory is used to hold persistentvariable application data and optionally all or part ofthe application code. This memory is non volatilebecause it retains its state when the power is removedfrom the chip. It is however expensive memory com-pared with ROM because it occupies a much largerarea on the chip per memory cell and also it incurs asignificant time penalty for writing the memory cells.

By referring to figure.2 we can see how theprograms and data was typically constructed in a firstgeneration multi application card. Because of thelimited EEPROM memory (typically 2 Kbytes) it wasnecessary to put as much as possible into the ROMmemory space.

MainProcessor

CoProcessor(crypto)

SerialI/O

ROM RAM EEPROM

Terminal

Figu

re 2

217

217

217

217

SMART CARD TUTORIAL


Because it is impossible to change data in ROM anyerrors in such code require the manufacture of a newchip with the memory replacement of any cards in thefield. Producing the new chips is typically a 4-6 monthprocess.

But this is just the start of the problems. The operatingsystems for these multi application cards were pro-priety. Each card manufacturer had his own approachto producing the necessary platform. From an applic-ation provider’s point of view the application codewas specific to a particular card manufacturers productand was totally dependent on the particular chip usedin that platform. The application needed to be deve-loped into the machine code of that chip. Originallythere were three main families, the Intel 8051, theMotorola 6805 and the Hitachi H8 but we are nowfaced with greater variety including the newer RISCmachines. The method of personalising such cardswith additional application code and data was also afunction of the particular operating system.

Perhaps even more important was the availability oftools for developing and testing applications. Theproprietary nature of these operating systems meantthat the individual card manufacturers were largelyresponsible for the development of applications.

And then we get around to security. Because theseapplications were produced in machine code when aparticular application was executing it had total controlof all the resources on the chip. There was no conceptof a user/supervisor mode of operation as found onsome of the newer chips such as the Philips Smart XA.Some chip manufacturers provided limited rightsaccess to different classes of memory. However in thelight of a flexible multi application environment suchtechniques were of limited value. In general it was notpossible to provide adequate separation between theapplications and accordingly all such applications hadto be trusted not to interfere with other residentapplications.

TemporaryWorking Space

Application 2 Data

Application 2 Code

Application 1 Data

Application 1 Code

Operating System

RAM

EEPROM

ROM

Figu

re 3

218

218

218

218

SMART CARD TUTORIAL


System) on the Hitachi H8 chip. This was furtherdeveloped by MXI as the well know Multos platformand is now additionally available on the InfineonSLE66 family. Schlumburger produced the first imple-mentation of Java on a Smart Card chip. JavaCard isa subset of the well-established virtual machineenvironment that Sun has developed as a softwareplatform for the general computing environment.JavaCard has evolved considerably over the last fewyears and now has a wide industry support. Smart Cardfor Windows (SCfW) introduced by Microsoft lastyear is the newest entrant in the multi application SmartCard world but has the best-established tools of anyof the major participants. We are now surely enteringthe new world of Smart Cards.

To be continued next month.

David B Everett

All of these problems can be solved by the use of avirtual machine (VM) as shown in figure. 3. This isthe definition of an abstract interface to an applicationthat masks the underlying hardware. An applicationis written in a source language that conforms to thedefinition of a particular virtual machine. Implem-enters then produce a run time environment thatinterprets the source code and effects its necessaryoperation on the particular real processor. The applic-ation source code remains the same for each individualvirtual machine specification but the run timeenvironment has to be developed for each differentmicroprocessor architecture. This operation is similarto the use of the Basic interpreter widely used on theearly PCs.

The first major development of a Smart Card virtualmachine environment was undertaken by platformseven (a division of NatWest Bank) who produced aproduct called MAOS (Multi Application Operating

Application1

Application2

Applicationn

Virtual Machinerun time environment

Operating System

Chip Hardware

219

219

219

219

" UK : £375" International : £395 / €565

[ includes free News On Line access and Directory CD ]" Printed Papers" PDF (Adobe Acrobat via e-mail)" Both Formats £450 / €670# Shipping : Inclusive

" I wish to receive a free one week trial to the NewsOn Line service. Here is my e-mail address:

" Please send me ________ copies of theInternational Smart Card Industry Directory CD" subscriber : £25 per copy / €40 incl." non-subscriber : £100 per copy / €151 incl.# Shipping : Inclusive

" Please send me ________ copies of theSmart Card Tutorials CD : £150 per copy / €217 incl.in the following format:" Word 6 " PDF (Adobe Acrobat) [Updates November - November upon request]# Shipping: £2 UK, £4 Europe, £7 Rest of World

These products may be purchased directly by visiting ouron line store: store.smartcard.co.uk

Name

Position

Company

Address

Telephone

Facsimile

e-mail

" Please invoice my company" Cheque enclosed" Visa/Mastercard/Eurocard/Access/Amex

Card No.Expiry DateSignature

Please return to:

Smart Card News Ltd. PO BOX 1383, Rottingdean,

Brighton, East Sussex BN2 8WX United Kingdom

or facsimile : + 44 (0) 1273 624433 / 300991

or e-mail : [email protected]

Smart Card News carries an unconditional refund guarantee. Should you wishto cancel your subscription at any time then we will refund all unmailed issues.

Omicron Alliance with Dyncom

Omicron Technologies, Inc has entered into anagreement with DynCom Inc, of Fort Collins,Colorado, for the exchange of 200,000 shares ofOmicron stock for 600,000 units of one share andone warrant of DynCom stock. If all warrants areexercised, Omicron will own over 26 % of out-standing DynCom stock.

DynCom Inc is a creator of e-solutions employingSmart Card and “smart device,” proprietary, bio-metric, and Internet/intranet technologies into e-solutions, applications and products. DynCom hasestablished a Smart Card technical laboratorycreating applications and products.

DynCom’s President and CEO, Curt Jansen, said:“Smart Card technologies are an important securityfeature, much like a key to a lock. By adding biometrictechnologies such as fingerprint scan or eye retinascan, it can be certain that not merely is the cardpresent, but also only the properly pre-authorisedperson can use the key.

“However, Smart Cards and Smart Devices will bemuch more than just keys; they will includeapplications that provide substantial benefits for bothconsumers and businesses.”

Contact$ Barrett Sleeman Omicron Technologies

% +1 877 903 2288! www.omicrontechnologies.com

$ Curt Jansen DynCom% +1 907 416 0001! www.d-c.com

Prayer Times by Mobile Phone

Malaysia’s largest mobile phone operator, Celcom,is now offering Muslim prayer times by mobile phonein its newly launched value-added services.

Based on Java-compatible Simera 32K byte SIMsfrom Schlumberger, the new services are split intothree areas: mobile e-mail, stocks and shares data,and information-on-demand. The latter serviceprovides information on a wide range of subjects,including news, travel data, and Muslim prayer timesthroughout Malaysia.

Contact$ Emily L Hall Schlumberger

% +1 408 437 7268! [email protected]

SUBSCRIPTION FORM


Subscribe to Smart Card News

microsoft chief predicts an explosion of smart cards · ! [email protected]. 205 205 205 205...

Documents