USC Technology, present and future

USC Technology, present and future

Bertrand Michaux Gemalto


Objectives of the presentation

• Current USC (R5)

• USC 2015 – 2018 (R7)

• Evolution to mobile

• Benefits for Universities

• Popwings – Award for Best Popper


What do we call USC ?

• A plastic card with visual information

• A chip that communicates:

– In contact mode

– In contactless mode


Other form factors

• Micro SD

• Mini USC that can be inserted

– In a watch

– In a wristband


All these objects are based on the same chip

• O.S. based on Java

– Allows applet interoperability

– Contains WG10 applet, Paypass, Mifare 4K, PKI applet, Popwings

– Possibility to load other applets (Calypso, HID …)

• Cryptoprocessor

– Allows secure computing for payment and digital signature

– Secure storage for keys and certificates


All these objects communicate

• By proximity – Antenna in the smart card

– Antenna and NFC booster in the Micro SD

– Watch or wristband have their own antenna

• By contact – Card inserted in reader

– Communication through handset libraries

95 96 97 98 99 2000 1 2 3 4 5 6 7 8 9 10 11 12 13 14

TUI


Evolution of the USC

Native cards

WG10 EMV MPCOS

Multos

TIBC 3.0

Java 16K

GemShare Club 4K

Unique Product (R4)

Java PK 32K

Mifare 1K

Mifare 4K

Combi PK 32K

Mifare 4K – R5 Size Multi app


Current R5 USC

• Product designed exclusively for Banco Santander Universities

• First product with dual interface chip – One single chip for contact and contactless (instead of 2 chips)

– Possibility of EMV contactless payment (Paypass)

– Possibility of other contactless applications (ex. Calypso, HID, Popwings)

– 36K memory to load more data (example PK certs) or applets


R5 characteristics

Configuration Banco Santander - Aplicatios

Payment with chip

VSDC (Visa)

PayPass M/Chip4 – MChip 2.1 (MasterCard)

Universities

WG10 (ePurse, file management)

MPCOS

Classic Client digital signature (contact only)

Mifare 4K (access control, transport)

Free space Universities: 36 KB

Opcion 1: Calypso

Opcion 2: other applets


Future R7

• New chip with advanced features in speed & security

• Evolution compliant with Visa / MC certification

• Certification Common Criteria (EU) and ICP (Brazil) – Strong authentication and digital signature become more and more

regulated. Same security level as ID cards.

• Chip ready for Mifare 4K and Desfire (to be configurated during card personalization)

• 50 KB of memory for data storage or applets

Available early 2015


Strong authentication / security / PKI

• Level of security requested by payment and security regulatory bodies (Visa / MC / EU / ICP)

• Based on distributed security mechanism – Secrets are stored in each card and keys are unique for each user

– Less interest for hackers

• It has become widespread and transparent for users

– Signing, encrypting, secure & easy access to data

– It is a pilar of mobile identity

Make sure you protect your data and you provide access only to authorized users


Data storage

• USC is a great place to store data – Example Popwings, biometric data, keys, certificates

• In transport, data storage starts to be used – To store transit fare, depending on each user (age, rights)

– To store entrance and exit time in order to compute fare

– For inspection purpose (ticket dematerialized)

• Transport operators (example London buses) adapt their systems to accept payment cards from banks: – Need high speed, dual interface, data storage (all included in R7)

– Banking card used for daily commuting or occasional


Interoperability in transport

Observatories are working on solutions to solve such needs


Conclusion

• You may be using the USC only for basic applications

• But your USC has a huge potential that you (or your students) will definitely be happy to use at some point


Moving to mobile devices

• Physical card (R5 / R7), Micro SD or mini card all have the same chip and features

• Mobile devices offer new ways to interact with end user: touch screen, mobile apps

• In the future, some applications can move from the USC to the handset but:

– Concerns about security issues (data storage)

– Authentication / PKI will be provided by a secure, personal and distributed element


What technology for mobile ?

January 2014


NFC seems a logical choice for universities

• Compatible with existing infrastructure (cards, readers)

• Natural transition from contactless cards

• Compatible with payment infrastructure (contactless POS)

• Technology is available (but not universal yet)

Gemalto’s Optelio Contactless Micro SD

21

Active contactless frontend and specific RF antenna architecture to boost the RF performances: a unique Gemalto design

Gemalto’s banking Dual Interface Secure Element: already field proven and certified by major schemes

Contactless Micro SD « New Generation »

Complete technological breakthrough.

The result of Gemalto’s unique RF expertise and hardware integration know-how

Secure Element on multiparty integrations

• Banco Santander / Universities remain in full control – Micro SD, personalized in factory or just initialized – Compatible with full set of banking card

packaging/fulfillment services • Card Carrier, packaging, fulfillment • Services to deliver Activation Codes using existing PIN

management services

– Micro SD library SDK • Delivery of Gemalto’s Micro SD underlying library, allowing

communication between the Mobile device and the Micro SD • Banco Santander or Universities can develop their own mobile app

(or wallet) and customer UI

22

Wallet Core

Gemalto Micro SD Libray (iOS, Android, BB)

Customer User Interface

Popwings

24

ONE POP TO

STAY IN TOUCH

PO

PW

ING

S

Adding Popwings to the USC: 1. Each US becomes student’s

business card 2. Students can transmit their data

to friends with a simple « pop » 3. Each user can update its data

through Popwings mobile app or on Popwings web site

26 Presentation title – Security Level (Arial

10pt) 29/04/2014

POPWings

POPWings...

...you will never lose any networking opportunity !

...you can share more than contacts, social

networks, documents, web site …

...Your contact data is always up to date !

How does it work ...

...Tap your POPWings card on a NFC phone

...Your digital data is automatically transmitted

A POP to share your digital life.

Popwings for Events: a standard Gemalto offer

Provide fun & immediate NFC experience

Applied to Santander Universities •Animation during card delivery events •Game: who performs more Pops gets a reward • Students who use more the USC during one month get discounts, benefits, promotions, …

29 Presentation title – Security Level (Arial

10pt) 29/04/2014

The challenge... Use your Popwings card to exchange contacts during USC

International Congress.

People who rank 1st in exchanging their data will win an award Will be delivered on Friday in Cartagena

POPStar

USC Technology, present and future

Documents

Transcript of USC Technology, present and future