Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code –...

28
Migration Strategies (With an Emphasis On Moving from 125 kHz Prox to 13.56 MHz Contactless Smart Card Technology) Michael L. Davis Managing Director OmniTek – A Honeywell Company [email protected] www.omnitek.com

Transcript of Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code –...

Page 1: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration Strategies (With an Emphasis On Moving from 125 kHz Prox to 1356 MHz Contactless Smart Card Technology)

Michael L Davis Managing Director OmniTek ndash A Honeywell Company Michael_davisomnitekcom wwwomnitekcom

AgendaAgenda

bull Introduction amp Caveats bull Definitions

ndash Prox Contactless Smart Cards Multi-technology Cards bull Why migrate to Contactless Smart Cards

ndash Comparisons Features Multi-application capabilities ISO etc bull Migration Strategies

Multi-technology cards Use existing cards and add contactless smart card sticker Use multi-technology readers

bull Optimum Migration Strategy bull Migration choice comparisons bull Moving data from legacy applications bull Integrated card issuing bull Wedge Readers bull Summary bull Questions amp Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 2

July 8th 2003

Introduction amp CaveatsIntroduction amp Caveats

bull This presentation discusses migration strategies not new project implementations

bull Of course the best solution is to rip out the old legacy systems and start from scratch but ndash Cost impact is major factor ndash Re-badging thousands of employees may be an obstacle ndash What to do during interim period

bull Some of the solutions presented here may be the long-term solution or used as a stepping-stone for migration to a single contactless smart card solution

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 3

July 8th 2003

What is ProxWhat is Prox

bull ldquoProxrdquo is a term used predominately in the United States to describe an RFID technology used in the Access Control Market ndash Requires no physical contact between a card and reader ndash Operates at 125 kHz ndash Typical operating distance from 4 to 6rdquo ndash Packaged in cards or key fobs ndash Read-only ndash Data content typically from 26 to 40 bits ndash Generally very low security of data ndash No ISO standards exist ndash More than 250 million Prox cards have been sold

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 4

July 8th 2003

What is Contactless Smart Card TechnologyWhat is Contactless Smart Card Technology

bull Contactless Smart Cards ndash Requires no physical contact between a card and reader ndash Operates at 1356 MHz ndash Typical operating distance from 2rdquo to 6rdquo ndash Maximum operating distance of 39rdquo ndash Packaged in cards key fobs stickers labels and more ndash Data content from 256 bits to 4k bytes and more ndash Memory can be segmented for multi-application use ndash Very high security ndash Supports true readwrite on the fly ndash ISO Standardized (ISO 14443AB amp 15693)

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 5

July 8th 2003

What is a MultiWhat is a Multi--Technology CardTechnology Card

bull Card that contains more than one machine readable ID technology bull Choices include

ndash Contact Smart Card ndash 1356 MHz Contactless

Smart Card PicoPasstrade Mifaretrade iClasstrade

MyDtrade etc ndash 125 kHz Prox

HID Indala AWID EM etc ndash Magnetic Stripe ndash Debit Stripe ndash Bar Code ndash Optical Stripe ndash Barium Ferrite (Magnetic Technology) ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 6

July 8th 2003

Why Migrate to Contactless Smart CardsWhy Migrate to Contactless Smart Cards

1356 MHz1356 MHz 125 kHz125 kHz

Better SecurityBetter Security

Faster Transaction SpeedFaster Transaction Speed

ISO StandardizedISO Standardized

Greater Memory DensityGreater Memory Density

MultiMulti--ApplicationApplication

Faster Transaction SpeedFaster Transaction Speed

Lower Card Production CostsLower Card Production Costs

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 7

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Added Benefits With No Increase in Price bull Increased Security bull Ability to use same card for additional applications

ndash Biometrics Carry multiple templates on card ndash Logical Access ndash ID Carry Tamperproof Digital Photographs ndash Portable Database Encrypted Information for

authentication or emergencies

bull Interoperability bull Future Growth

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 8

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

Multi Application examplebull Multi-Application Support using PicoPass 32KS

ndash 64 bit serial number ndash 32 applications each with

individual secret keys ndash Each application ldquoslotrdquo has up to

232 usable bytes ndash Can combine multiple apps to

increase memory

Digitally Signed Photograph

17 - 27

Environmental amp Building Mgmt

28 - 30

31

15 - 16

7 - 14

6

5

1 - 4

0

Application

Burglar Alarm ArmDisarm

IRIS Scan

Finger Print (2 fingers)

Vending

Time amp Attendance

Logical Access

Access Control

Data Blocks

Page 0

Page 31

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 9

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Multi-Application Support ndash Smart cards allow multiple applications - each protected

with its own keys ndash Vendor should disclose keys for unused applications ie

open key strategy ndash Open Key Strategy advantages Other application slots free for use Increases value of access control card Allows one card to be used for many applications at the same

time Eliminates obsolesce Youre in control switch access control vendors without

reissuing cards

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 10

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 2: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

AgendaAgenda

bull Introduction amp Caveats bull Definitions

ndash Prox Contactless Smart Cards Multi-technology Cards bull Why migrate to Contactless Smart Cards

ndash Comparisons Features Multi-application capabilities ISO etc bull Migration Strategies

Multi-technology cards Use existing cards and add contactless smart card sticker Use multi-technology readers

bull Optimum Migration Strategy bull Migration choice comparisons bull Moving data from legacy applications bull Integrated card issuing bull Wedge Readers bull Summary bull Questions amp Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 2

July 8th 2003

Introduction amp CaveatsIntroduction amp Caveats

bull This presentation discusses migration strategies not new project implementations

bull Of course the best solution is to rip out the old legacy systems and start from scratch but ndash Cost impact is major factor ndash Re-badging thousands of employees may be an obstacle ndash What to do during interim period

bull Some of the solutions presented here may be the long-term solution or used as a stepping-stone for migration to a single contactless smart card solution

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 3

July 8th 2003

What is ProxWhat is Prox

bull ldquoProxrdquo is a term used predominately in the United States to describe an RFID technology used in the Access Control Market ndash Requires no physical contact between a card and reader ndash Operates at 125 kHz ndash Typical operating distance from 4 to 6rdquo ndash Packaged in cards or key fobs ndash Read-only ndash Data content typically from 26 to 40 bits ndash Generally very low security of data ndash No ISO standards exist ndash More than 250 million Prox cards have been sold

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 4

July 8th 2003

What is Contactless Smart Card TechnologyWhat is Contactless Smart Card Technology

bull Contactless Smart Cards ndash Requires no physical contact between a card and reader ndash Operates at 1356 MHz ndash Typical operating distance from 2rdquo to 6rdquo ndash Maximum operating distance of 39rdquo ndash Packaged in cards key fobs stickers labels and more ndash Data content from 256 bits to 4k bytes and more ndash Memory can be segmented for multi-application use ndash Very high security ndash Supports true readwrite on the fly ndash ISO Standardized (ISO 14443AB amp 15693)

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 5

July 8th 2003

What is a MultiWhat is a Multi--Technology CardTechnology Card

bull Card that contains more than one machine readable ID technology bull Choices include

ndash Contact Smart Card ndash 1356 MHz Contactless

Smart Card PicoPasstrade Mifaretrade iClasstrade

MyDtrade etc ndash 125 kHz Prox

HID Indala AWID EM etc ndash Magnetic Stripe ndash Debit Stripe ndash Bar Code ndash Optical Stripe ndash Barium Ferrite (Magnetic Technology) ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 6

July 8th 2003

Why Migrate to Contactless Smart CardsWhy Migrate to Contactless Smart Cards

1356 MHz1356 MHz 125 kHz125 kHz

Better SecurityBetter Security

Faster Transaction SpeedFaster Transaction Speed

ISO StandardizedISO Standardized

Greater Memory DensityGreater Memory Density

MultiMulti--ApplicationApplication

Faster Transaction SpeedFaster Transaction Speed

Lower Card Production CostsLower Card Production Costs

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 7

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Added Benefits With No Increase in Price bull Increased Security bull Ability to use same card for additional applications

ndash Biometrics Carry multiple templates on card ndash Logical Access ndash ID Carry Tamperproof Digital Photographs ndash Portable Database Encrypted Information for

authentication or emergencies

bull Interoperability bull Future Growth

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 8

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

Multi Application examplebull Multi-Application Support using PicoPass 32KS

ndash 64 bit serial number ndash 32 applications each with

individual secret keys ndash Each application ldquoslotrdquo has up to

232 usable bytes ndash Can combine multiple apps to

increase memory

Digitally Signed Photograph

17 - 27

Environmental amp Building Mgmt

28 - 30

31

15 - 16

7 - 14

6

5

1 - 4

0

Application

Burglar Alarm ArmDisarm

IRIS Scan

Finger Print (2 fingers)

Vending

Time amp Attendance

Logical Access

Access Control

Data Blocks

Page 0

Page 31

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 9

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Multi-Application Support ndash Smart cards allow multiple applications - each protected

with its own keys ndash Vendor should disclose keys for unused applications ie

open key strategy ndash Open Key Strategy advantages Other application slots free for use Increases value of access control card Allows one card to be used for many applications at the same

time Eliminates obsolesce Youre in control switch access control vendors without

reissuing cards

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 10

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 3: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Introduction amp CaveatsIntroduction amp Caveats

bull This presentation discusses migration strategies not new project implementations

bull Of course the best solution is to rip out the old legacy systems and start from scratch but ndash Cost impact is major factor ndash Re-badging thousands of employees may be an obstacle ndash What to do during interim period

bull Some of the solutions presented here may be the long-term solution or used as a stepping-stone for migration to a single contactless smart card solution

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 3

July 8th 2003

What is ProxWhat is Prox

bull ldquoProxrdquo is a term used predominately in the United States to describe an RFID technology used in the Access Control Market ndash Requires no physical contact between a card and reader ndash Operates at 125 kHz ndash Typical operating distance from 4 to 6rdquo ndash Packaged in cards or key fobs ndash Read-only ndash Data content typically from 26 to 40 bits ndash Generally very low security of data ndash No ISO standards exist ndash More than 250 million Prox cards have been sold

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 4

July 8th 2003

What is Contactless Smart Card TechnologyWhat is Contactless Smart Card Technology

bull Contactless Smart Cards ndash Requires no physical contact between a card and reader ndash Operates at 1356 MHz ndash Typical operating distance from 2rdquo to 6rdquo ndash Maximum operating distance of 39rdquo ndash Packaged in cards key fobs stickers labels and more ndash Data content from 256 bits to 4k bytes and more ndash Memory can be segmented for multi-application use ndash Very high security ndash Supports true readwrite on the fly ndash ISO Standardized (ISO 14443AB amp 15693)

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 5

July 8th 2003

What is a MultiWhat is a Multi--Technology CardTechnology Card

bull Card that contains more than one machine readable ID technology bull Choices include

ndash Contact Smart Card ndash 1356 MHz Contactless

Smart Card PicoPasstrade Mifaretrade iClasstrade

MyDtrade etc ndash 125 kHz Prox

HID Indala AWID EM etc ndash Magnetic Stripe ndash Debit Stripe ndash Bar Code ndash Optical Stripe ndash Barium Ferrite (Magnetic Technology) ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 6

July 8th 2003

Why Migrate to Contactless Smart CardsWhy Migrate to Contactless Smart Cards

1356 MHz1356 MHz 125 kHz125 kHz

Better SecurityBetter Security

Faster Transaction SpeedFaster Transaction Speed

ISO StandardizedISO Standardized

Greater Memory DensityGreater Memory Density

MultiMulti--ApplicationApplication

Faster Transaction SpeedFaster Transaction Speed

Lower Card Production CostsLower Card Production Costs

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 7

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Added Benefits With No Increase in Price bull Increased Security bull Ability to use same card for additional applications

ndash Biometrics Carry multiple templates on card ndash Logical Access ndash ID Carry Tamperproof Digital Photographs ndash Portable Database Encrypted Information for

authentication or emergencies

bull Interoperability bull Future Growth

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 8

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

Multi Application examplebull Multi-Application Support using PicoPass 32KS

ndash 64 bit serial number ndash 32 applications each with

individual secret keys ndash Each application ldquoslotrdquo has up to

232 usable bytes ndash Can combine multiple apps to

increase memory

Digitally Signed Photograph

17 - 27

Environmental amp Building Mgmt

28 - 30

31

15 - 16

7 - 14

6

5

1 - 4

0

Application

Burglar Alarm ArmDisarm

IRIS Scan

Finger Print (2 fingers)

Vending

Time amp Attendance

Logical Access

Access Control

Data Blocks

Page 0

Page 31

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 9

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Multi-Application Support ndash Smart cards allow multiple applications - each protected

with its own keys ndash Vendor should disclose keys for unused applications ie

open key strategy ndash Open Key Strategy advantages Other application slots free for use Increases value of access control card Allows one card to be used for many applications at the same

time Eliminates obsolesce Youre in control switch access control vendors without

reissuing cards

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 10

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 4: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

What is ProxWhat is Prox

bull ldquoProxrdquo is a term used predominately in the United States to describe an RFID technology used in the Access Control Market ndash Requires no physical contact between a card and reader ndash Operates at 125 kHz ndash Typical operating distance from 4 to 6rdquo ndash Packaged in cards or key fobs ndash Read-only ndash Data content typically from 26 to 40 bits ndash Generally very low security of data ndash No ISO standards exist ndash More than 250 million Prox cards have been sold

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 4

July 8th 2003

What is Contactless Smart Card TechnologyWhat is Contactless Smart Card Technology

bull Contactless Smart Cards ndash Requires no physical contact between a card and reader ndash Operates at 1356 MHz ndash Typical operating distance from 2rdquo to 6rdquo ndash Maximum operating distance of 39rdquo ndash Packaged in cards key fobs stickers labels and more ndash Data content from 256 bits to 4k bytes and more ndash Memory can be segmented for multi-application use ndash Very high security ndash Supports true readwrite on the fly ndash ISO Standardized (ISO 14443AB amp 15693)

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 5

July 8th 2003

What is a MultiWhat is a Multi--Technology CardTechnology Card

bull Card that contains more than one machine readable ID technology bull Choices include

ndash Contact Smart Card ndash 1356 MHz Contactless

Smart Card PicoPasstrade Mifaretrade iClasstrade

MyDtrade etc ndash 125 kHz Prox

HID Indala AWID EM etc ndash Magnetic Stripe ndash Debit Stripe ndash Bar Code ndash Optical Stripe ndash Barium Ferrite (Magnetic Technology) ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 6

July 8th 2003

Why Migrate to Contactless Smart CardsWhy Migrate to Contactless Smart Cards

1356 MHz1356 MHz 125 kHz125 kHz

Better SecurityBetter Security

Faster Transaction SpeedFaster Transaction Speed

ISO StandardizedISO Standardized

Greater Memory DensityGreater Memory Density

MultiMulti--ApplicationApplication

Faster Transaction SpeedFaster Transaction Speed

Lower Card Production CostsLower Card Production Costs

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 7

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Added Benefits With No Increase in Price bull Increased Security bull Ability to use same card for additional applications

ndash Biometrics Carry multiple templates on card ndash Logical Access ndash ID Carry Tamperproof Digital Photographs ndash Portable Database Encrypted Information for

authentication or emergencies

bull Interoperability bull Future Growth

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 8

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

Multi Application examplebull Multi-Application Support using PicoPass 32KS

ndash 64 bit serial number ndash 32 applications each with

individual secret keys ndash Each application ldquoslotrdquo has up to

232 usable bytes ndash Can combine multiple apps to

increase memory

Digitally Signed Photograph

17 - 27

Environmental amp Building Mgmt

28 - 30

31

15 - 16

7 - 14

6

5

1 - 4

0

Application

Burglar Alarm ArmDisarm

IRIS Scan

Finger Print (2 fingers)

Vending

Time amp Attendance

Logical Access

Access Control

Data Blocks

Page 0

Page 31

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 9

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Multi-Application Support ndash Smart cards allow multiple applications - each protected

with its own keys ndash Vendor should disclose keys for unused applications ie

open key strategy ndash Open Key Strategy advantages Other application slots free for use Increases value of access control card Allows one card to be used for many applications at the same

time Eliminates obsolesce Youre in control switch access control vendors without

reissuing cards

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 10

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 5: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

What is Contactless Smart Card TechnologyWhat is Contactless Smart Card Technology

bull Contactless Smart Cards ndash Requires no physical contact between a card and reader ndash Operates at 1356 MHz ndash Typical operating distance from 2rdquo to 6rdquo ndash Maximum operating distance of 39rdquo ndash Packaged in cards key fobs stickers labels and more ndash Data content from 256 bits to 4k bytes and more ndash Memory can be segmented for multi-application use ndash Very high security ndash Supports true readwrite on the fly ndash ISO Standardized (ISO 14443AB amp 15693)

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 5

July 8th 2003

What is a MultiWhat is a Multi--Technology CardTechnology Card

bull Card that contains more than one machine readable ID technology bull Choices include

ndash Contact Smart Card ndash 1356 MHz Contactless

Smart Card PicoPasstrade Mifaretrade iClasstrade

MyDtrade etc ndash 125 kHz Prox

HID Indala AWID EM etc ndash Magnetic Stripe ndash Debit Stripe ndash Bar Code ndash Optical Stripe ndash Barium Ferrite (Magnetic Technology) ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 6

July 8th 2003

Why Migrate to Contactless Smart CardsWhy Migrate to Contactless Smart Cards

1356 MHz1356 MHz 125 kHz125 kHz

Better SecurityBetter Security

Faster Transaction SpeedFaster Transaction Speed

ISO StandardizedISO Standardized

Greater Memory DensityGreater Memory Density

MultiMulti--ApplicationApplication

Faster Transaction SpeedFaster Transaction Speed

Lower Card Production CostsLower Card Production Costs

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 7

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Added Benefits With No Increase in Price bull Increased Security bull Ability to use same card for additional applications

ndash Biometrics Carry multiple templates on card ndash Logical Access ndash ID Carry Tamperproof Digital Photographs ndash Portable Database Encrypted Information for

authentication or emergencies

bull Interoperability bull Future Growth

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 8

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

Multi Application examplebull Multi-Application Support using PicoPass 32KS

ndash 64 bit serial number ndash 32 applications each with

individual secret keys ndash Each application ldquoslotrdquo has up to

232 usable bytes ndash Can combine multiple apps to

increase memory

Digitally Signed Photograph

17 - 27

Environmental amp Building Mgmt

28 - 30

31

15 - 16

7 - 14

6

5

1 - 4

0

Application

Burglar Alarm ArmDisarm

IRIS Scan

Finger Print (2 fingers)

Vending

Time amp Attendance

Logical Access

Access Control

Data Blocks

Page 0

Page 31

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 9

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Multi-Application Support ndash Smart cards allow multiple applications - each protected

with its own keys ndash Vendor should disclose keys for unused applications ie

open key strategy ndash Open Key Strategy advantages Other application slots free for use Increases value of access control card Allows one card to be used for many applications at the same

time Eliminates obsolesce Youre in control switch access control vendors without

reissuing cards

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 10

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 6: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

What is a MultiWhat is a Multi--Technology CardTechnology Card

bull Card that contains more than one machine readable ID technology bull Choices include

ndash Contact Smart Card ndash 1356 MHz Contactless

Smart Card PicoPasstrade Mifaretrade iClasstrade

MyDtrade etc ndash 125 kHz Prox

HID Indala AWID EM etc ndash Magnetic Stripe ndash Debit Stripe ndash Bar Code ndash Optical Stripe ndash Barium Ferrite (Magnetic Technology) ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 6

July 8th 2003

Why Migrate to Contactless Smart CardsWhy Migrate to Contactless Smart Cards

1356 MHz1356 MHz 125 kHz125 kHz

Better SecurityBetter Security

Faster Transaction SpeedFaster Transaction Speed

ISO StandardizedISO Standardized

Greater Memory DensityGreater Memory Density

MultiMulti--ApplicationApplication

Faster Transaction SpeedFaster Transaction Speed

Lower Card Production CostsLower Card Production Costs

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 7

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Added Benefits With No Increase in Price bull Increased Security bull Ability to use same card for additional applications

ndash Biometrics Carry multiple templates on card ndash Logical Access ndash ID Carry Tamperproof Digital Photographs ndash Portable Database Encrypted Information for

authentication or emergencies

bull Interoperability bull Future Growth

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 8

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

Multi Application examplebull Multi-Application Support using PicoPass 32KS

ndash 64 bit serial number ndash 32 applications each with

individual secret keys ndash Each application ldquoslotrdquo has up to

232 usable bytes ndash Can combine multiple apps to

increase memory

Digitally Signed Photograph

17 - 27

Environmental amp Building Mgmt

28 - 30

31

15 - 16

7 - 14

6

5

1 - 4

0

Application

Burglar Alarm ArmDisarm

IRIS Scan

Finger Print (2 fingers)

Vending

Time amp Attendance

Logical Access

Access Control

Data Blocks

Page 0

Page 31

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 9

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Multi-Application Support ndash Smart cards allow multiple applications - each protected

with its own keys ndash Vendor should disclose keys for unused applications ie

open key strategy ndash Open Key Strategy advantages Other application slots free for use Increases value of access control card Allows one card to be used for many applications at the same

time Eliminates obsolesce Youre in control switch access control vendors without

reissuing cards

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 10

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 7: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Why Migrate to Contactless Smart CardsWhy Migrate to Contactless Smart Cards

1356 MHz1356 MHz 125 kHz125 kHz

Better SecurityBetter Security

Faster Transaction SpeedFaster Transaction Speed

ISO StandardizedISO Standardized

Greater Memory DensityGreater Memory Density

MultiMulti--ApplicationApplication

Faster Transaction SpeedFaster Transaction Speed

Lower Card Production CostsLower Card Production Costs

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 7

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Added Benefits With No Increase in Price bull Increased Security bull Ability to use same card for additional applications

ndash Biometrics Carry multiple templates on card ndash Logical Access ndash ID Carry Tamperproof Digital Photographs ndash Portable Database Encrypted Information for

authentication or emergencies

bull Interoperability bull Future Growth

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 8

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

Multi Application examplebull Multi-Application Support using PicoPass 32KS

ndash 64 bit serial number ndash 32 applications each with

individual secret keys ndash Each application ldquoslotrdquo has up to

232 usable bytes ndash Can combine multiple apps to

increase memory

Digitally Signed Photograph

17 - 27

Environmental amp Building Mgmt

28 - 30

31

15 - 16

7 - 14

6

5

1 - 4

0

Application

Burglar Alarm ArmDisarm

IRIS Scan

Finger Print (2 fingers)

Vending

Time amp Attendance

Logical Access

Access Control

Data Blocks

Page 0

Page 31

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 9

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Multi-Application Support ndash Smart cards allow multiple applications - each protected

with its own keys ndash Vendor should disclose keys for unused applications ie

open key strategy ndash Open Key Strategy advantages Other application slots free for use Increases value of access control card Allows one card to be used for many applications at the same

time Eliminates obsolesce Youre in control switch access control vendors without

reissuing cards

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 10

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 8: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Why Migrate (cont)Why Migrate (cont)

bull Added Benefits With No Increase in Price bull Increased Security bull Ability to use same card for additional applications

ndash Biometrics Carry multiple templates on card ndash Logical Access ndash ID Carry Tamperproof Digital Photographs ndash Portable Database Encrypted Information for

authentication or emergencies

bull Interoperability bull Future Growth

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 8

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

Multi Application examplebull Multi-Application Support using PicoPass 32KS

ndash 64 bit serial number ndash 32 applications each with

individual secret keys ndash Each application ldquoslotrdquo has up to

232 usable bytes ndash Can combine multiple apps to

increase memory

Digitally Signed Photograph

17 - 27

Environmental amp Building Mgmt

28 - 30

31

15 - 16

7 - 14

6

5

1 - 4

0

Application

Burglar Alarm ArmDisarm

IRIS Scan

Finger Print (2 fingers)

Vending

Time amp Attendance

Logical Access

Access Control

Data Blocks

Page 0

Page 31

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 9

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Multi-Application Support ndash Smart cards allow multiple applications - each protected

with its own keys ndash Vendor should disclose keys for unused applications ie

open key strategy ndash Open Key Strategy advantages Other application slots free for use Increases value of access control card Allows one card to be used for many applications at the same

time Eliminates obsolesce Youre in control switch access control vendors without

reissuing cards

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 10

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 9: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Why Migrate (cont)Why Migrate (cont)

Multi Application examplebull Multi-Application Support using PicoPass 32KS

ndash 64 bit serial number ndash 32 applications each with

individual secret keys ndash Each application ldquoslotrdquo has up to

232 usable bytes ndash Can combine multiple apps to

increase memory

Digitally Signed Photograph

17 - 27

Environmental amp Building Mgmt

28 - 30

31

15 - 16

7 - 14

6

5

1 - 4

0

Application

Burglar Alarm ArmDisarm

IRIS Scan

Finger Print (2 fingers)

Vending

Time amp Attendance

Logical Access

Access Control

Data Blocks

Page 0

Page 31

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 9

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull Multi-Application Support ndash Smart cards allow multiple applications - each protected

with its own keys ndash Vendor should disclose keys for unused applications ie

open key strategy ndash Open Key Strategy advantages Other application slots free for use Increases value of access control card Allows one card to be used for many applications at the same

time Eliminates obsolesce Youre in control switch access control vendors without

reissuing cards

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 10

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 10: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Why Migrate (cont)Why Migrate (cont)

bull Multi-Application Support ndash Smart cards allow multiple applications - each protected

with its own keys ndash Vendor should disclose keys for unused applications ie

open key strategy ndash Open Key Strategy advantages Other application slots free for use Increases value of access control card Allows one card to be used for many applications at the same

time Eliminates obsolesce Youre in control switch access control vendors without

reissuing cards

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 10

July 8th 2003

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 11: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Why Migrate (cont)Why Migrate (cont)

bull International Standardization ndash Current 125 KHz Prox Technology No ISO existing or planned standardization Proprietary

ndash HID Motorola AWID Casi-Rusco etc

ndash New 1356 MHz Contactless Smart Cards Standards DO exist

ndash ISO 14443A 14443B 15693

Open standards with interoperability encourages broad supplier support and customer acceptance Open standards can increase martket size driving prices down Facilitates interoperability between vendors and applications Helps to drive costs down Helps to eliminate obsolence

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 11

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 12: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 12

July 8th 2003

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 13: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration Strategies (cont)Migration Strategies (cont)

bull The following slides illustrates the three major migration strategies ndash Note that hybrid solutions combining elements from the

different migration strategies are possible

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 13

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 14: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 14

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 15: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Method is to utilize the existing technologies for existing applications and put them on a single card

bull Each legacy application utilizes the same technology that was used before

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 15

July 8th 2003

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 16: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration Strategies Use a MultiMigration Strategies Use a Multi--Technology CardTechnology Card

bull Advantages ndash Most aesthetic looking card ndash Most secure card

bull Disadvantages ndash Most expensive card Each technology contributes to manufacturing and cosmetic

fallout ndash Reduced field-reliability due to multiple technologies Some combination of technologies weaken card structure Additional cost to re-badge due to failure

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 16

July 8th 2003

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 17: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration Use existing card wsmart stickerMigration Use existing card wsmart sticker

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 17

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 18: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Several companies make a smart card ldquoStickerldquo bull Sticker contains antenna and chip just like a card bull Sticker utilizes a permanent adhesive for easy

affixing to existing card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 18

July 8th 2003

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 19: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration Use existing card wsmart card stickerMigration Use existing card wsmart card sticker

bull Advantages ndash Much lower cost because existing card is not thrown out ndash No migration of existing information from legacy

applications bull Disadvantages

ndash Not as aesthetic as a single card ndash Slightly reduced range due to smaller antenna ndash Location of patch important so card still works in existing

readers (like magstripe) ndash Some organizations (Govrsquot etc) do not allow anything to

be affixed to a card ndash Possible security issue if sticker is removed from card Patch is designed to self destruct when removed Electronic anti-tamper mechanisms available

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 19

July 8th 2003

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 20: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration StrategiesMigration Strategies

Migration Strategies

Move data from multiple applications onto single card

Utilize existing card and add smart card sticker

Install multi-technology readers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 20

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 21: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Multi-technology readers are capable of reading two different technologies ndash Prox and Contactless Smart Card ndash Contact and Contactless Smart Card ndash Prox and Magnetic Stripe

bull Multi-technology readers may have multiple output protocols and interfaces ndash Wiegand ndash Clock amp Data ndash RS232 ndash Etc

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 21

July 8th 2003

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 22: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Migration Strategies Use MultiMigration Strategies Use Multi--Technology ReadersTechnology Readers

bull Advantages ndash No changes to cards ndash No card re-badging

bull Disadvantages ndash Typically most expensive migration strategy Cost of readers are higher Readers available from only a few vendors Not all technology choices available

ndash Reader obsolescence occurs faster

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 22

July 8th 2003

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 23: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Optimum Migration StrategyOptimum Migration Strategy

bull Optimum strategy is to migrate all legacy applications to just contactless smart card solution utilizing separate application areas ndash Single technology card is most cost effective and reliable

bull Biggest stumbling block is ndash Retrieving data from legacy application and moving it to

contactless smart card ndash Emulating legacy protocol and physical interface

bull Can use all of the previous migration methods discussed for interim

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 23

July 8th 2003

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 24: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Moving Data From Legacy ApplicationsMoving Data From Legacy Applications

bull Best method is to electronically move data undercomputer control ndash No human typing errors ndash Can automate process ndash Very convenientcomplete process can take less than 30

seconds bull Can almost always retrieve legacy data using its

legacy reader interfaced to a PC ndash Security and internal formats need not be known since

legacy reader already knows how to read card ndash Even if reader is proprietary output data can usually still

be captured at a PC ndash Ideal method to move legacy applications where vendor

has gone out of business or is uncooperative

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 24

July 8th 2003

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 25: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Step 1 Place unprogrammed smart sticker on programmerStep 2 Read 125 kHz Prox Card data is transferred to PCStep 3 Data is written to smart card sticker

Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)Moving Data From Legacy Applications (cont)

010101100100101

0110

0101

1 Step 4 Affix sticker to existing 125 kHz Prox card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 25

July 8th 2003

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 26: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Integrated Card IssuingIntegrated Card Issuing

bull If legacy data is already stored in a database ndash Can use a Dye-Sub Printer wSmart Card Encoding to

automate process Unattended batch processing possible Issue and personalize cards on demand

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 26

July 8th 2003

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 27: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

ldquoWedgerdquo ReadersldquoWedgerdquo Readers

bull Many times a keyboard ldquowedgerdquo reader can be used with a contactless smart card reader instead of original legacy reader ndash Advantage is original PC application does not have to be

changed at all

bull If legacy application already uses a wedge reader then it is a no-brainer to retrieve legacy data into a PC and rewrite into a contactless smart card

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 27

July 8th 2003

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003

Page 28: Migration Strategies Presentation - NIST ·  · 2017-04-04Migration Strategies ... Bar Code – Optical Stripe – Barium Ferrite ... Disadvantages –

Questions and AnswersQuestions and Answers

Workshop on Storage amp Processor Card-Based Technologies Contactless Smart Card Integration page 28

July 8th 2003