Secure Multi-Application Card Management The GlobalPlatform Approach

Toronto Business Seminar August 2002

Secure Multi-Application Card Management The GlobalPlatform Approach

Toronto Business Seminar August 2002

Steve BrownHead of Business Development BT Ignite, eBusinessChairman GlobalPlatform, Board of Directors

Steve BrownHead of Business Development BT Ignite, eBusinessChairman GlobalPlatform, Board of Directors

Secure Multi-Application Card Management

Define GlobalPlatform

Committees

AgendaAgenda

Mission Vision and Objectives

Strategic Plan

Summary

What is GlobalPlatform?What is GlobalPlatform?

An organization that:

Creates

foundation for future growth

Defines

requirements and technology

standardsfor smart cards

Promotes

smart card usage and adoption

Define GlobalPlatform

Mission Vision and Objectives

Strategic Plan

Summary

Secure Multi-application Card Management

Committees

AgendaAgenda

MissionMission

Establish an open smart card infrastructure that enables Issuers from many industries to deploy

and manage multiple applications through a variety of devices for their customers.

Identity Loyalty

Payment

Access

Card Acceptance Device Mobile Phone Set Top Box ATM PC PDA

Application ServersCard Management Systems

Personalization Systems Terminal ManagementSystems

Key ManagementSystems

Compatibility and interoperability among:

Applications

Cards

Devices

Systems

GlobalPlatform VisionGlobalPlatform Vision

Transit

Openstandards

Meetneeds

Cross-industryinteroperability

Broadadoption Relevant

ObjectivesObjectives

Meet needs of Issuers from various industries

Define and promote cross-industry interoperability

Ensure broad adoption of specifications

Promote open standardsand infrastructure

Remain relevant byimproving technologies

Secure Multi-application Card Management

AgendaAgenda

Strategic Plan

Continued Focus

Committees

Mission Vision and Objectives

Define GlobalPlatform

GlobalPlatform strategy for 2002-2003 is focused on achieving greater industrydiversity through its Member base.

Our DirectionOur Direction

Telecom GovernmentSecurity / IDRetailTransportHealthcare

Sector Diversity

ContactlessMobilePDAEmerging technologies

New Technology Mediums

Untapped opportunities

for smart cards

Geographic & Regional Representation

Infrastructure ProvidersApplication Providers

Service ProvidersVendors

New Industry Participants

FinancialServices

GLOBALPLATFORMCORE

USEurope

AustraliaAsia

Contact CardsDevicesSystems

VendorsIssuers

ETSI – Partnership Agreement

STIP – Memorandum of Understanding

JCF – Close cooperation

SCA – Cooperation and support

NICCS – joint working group established, drafting MOU

                    

Strategic Partnerships

AgendaAgenda

Summary

Secure Multi-application card management

Strategic Plan

Mission Vision and Objectives

Committees

Define GlobalPlatform

GlobalPlatform OrganisationGlobalPlatform Organisation

Full Member(all committees & Board)

(single vote)

Board of Directors Board of Directors Single vote per DirectorSingle vote per Director

• Elected Directors – Up to 11 Full Members

Chairman of the BoardChairman of the Board

Vice ChairmanVice Chairman

Secretary / TreasurerSecretary / Treasurer

Technical DirectorTechnical Director

Strategic Director(s)Strategic Director(s)

MembershipMembership

SecretariatSecretariat

Professional ServicesProfessional Services

Public Entity Member(no voting privileges)

Observer Member(no voting privileges)

Participating Member(single committee only)(Committee voting only)

PlanningPlanningUnitUnit

Marketing Marketing CentreCentre

Business

Card Card CommitteeCommittee

Device Device CommitteeCommittee

Systems Systems CommitteeCommittee

Technical

CommitteesCommittees

Opportunity

• Develop a reasoned business review and evolve an action plan based on the strategy as set out by the Board in 2001.

• Address the need to balance strong business justification with advance technology solutions.

• Reviewing technology initiatives in relation to the strategic plan, and ensure that the definition of requirements outlined by GlobalPlatform continues to serve the needs of its Members and that the organisation’s focus stays relevant to the needs of the smart card market.

Planning Unit

Membership & CompanyGrowth

The Marketing Centre concentrates on the global image and visibility of GlobalPlatform’s marketing and communication, promotion of the existing GlobalPlatform specifications and the benefits of membership to existing and potential Members, in a bid to raise organisational awareness and expand recruitment across various industries and geographic markets.

Marketing Centre

Areas of Technical FocusAreas of Technical Focus

GlobalPlatform delivers the complete set of smart card specifications for an end to end smart card technology architecture.

CARDS

SYSTEMS

DEVICES

Systems Specifications standardize back-end systems: personalization, security, key management, application loading.

Card Specifications standardize card and application lifecycle management.

Card Specification v2.1Card Compliance Program and Kit

Smart Card Management Systems Requirements

Device Framework v2.0Device Specifications enable the acceptance of cards through multiple devices.

Card Committee ObjectivesCard Committee Objectives

Streamline and standardize commands for card and application lifecycle management

Enable freedom of technology choice

Support multiple applications from multiple providers in a safe, controlled environment

Allow different business and relationships models between Issuer and application providers, from Issuer-centric to provider-centric models

Enforce ultimate control by the Issuer of the card and its contents

Enable dynamic and automatic distribution of new services pre and post issuance

Facilitate portability of applications across smart cards

Card Specification Card Specification Freedom of Technology Choice

Identity Loyalty

Payment

Access Transit

Choice of Applications

CARD MANAGER&

SECURITY DOMAINS

GLOBALPLATFORMAPI

Java CardTM

Virtual Machine and API

Java CardTM

Virtual Machine and API

Microsoft® Windows® for Smart Cards

Virtual Machine and API

Microsoft® Windows® for Smart Cards

Virtual Machine and API

Other Proprietary OSOther Proprietary OS

Choice of Runtime Environment

Choice of Operating System

Choice of Chip and Card Platform

Microsoft Windows for Smart Cards OS

Microsoft Windows for Smart Cards OS

OROR

ISO 7816 Compliant and EMV Compliant

Systems Committees ObjectivesSystems Committees Objectives

Standardize back-end systems infrastructure for smart card

management

Identify back-end systems as well as their roles and responsibilities

Standardize interfaces between logical entities in card lifecycle management infrastructure

Standardize processes throughout card and application lifecycle management

Support a distributed implementation model that allows different entities to share information

Device Committees ObjectivesDevice Committees Objectives

Enable and support the acceptance of multi-application smart cards

Facilitate the rapid development and deployment of acceptance device applications

Enable coordinated development between manufacturers of card and device components of smart card applications

Enable development of portable device applications

AgendaAgenda

Summary

Secure Multi-application card management

Strategic Plan

Mission Vision and Objectives

Define GlobalPlatform

Committees

Value of the Multi-Application CardValue of the Multi-Application Card

Relationship Optimization Tool:

Delivering the next generation of customer relationship management and customer self-

service: leading the move from Customer Management to Customer Empowerment

GlobalPlatform = InteroperabilityGlobalPlatform = Interoperability

Customer Empowerment Tool:

Granting freedom of choice and comparison-through a dynamic portfolio of personally

relevant, evolving services

GlobalPlatform = ScalabilityGlobalPlatform = Scalability

Cross-Industry Applicability:

Meeting the diverse needs of Issuers across all sectors-private and public-to deliver customer,

constituent and employee based services.

GlobalPlatform = FlexibilityGlobalPlatform = Flexibility

Global Utilization:

Insuring usage of services and identity, anytime, anywhere through multiple

channels and touch points

GlobalPlatform = PortabilityGlobalPlatform = Portability

Examples of Multiple ApplicationsExamples of Multiple Applications

Loyalty Services:

E-Coupons, Rewards, Delivery of Soft and Hard Benefits, High Barrier of Entry for

Competition

GlobalPlatform = Delivery Across Multiple Channels

Credit & Debit Services:

Cash Access, Variable Credit, Revolving Credit

GlobalPlatform = Security Across Multiple Platforms

Identity Service Tool

Delivering the next generation of authentication for potential elimination of chargebacks, lowering of

interchange rates, fraud reduction, physical access and logical access to distributed applications

GlobalPlatform= Broadening Warranty Across Networks

The Multi-Application Model

GlobalPlatform’s Role

The Multi-Application Model

GlobalPlatform’s Role

Leading the migration from restrictive proprietary environments to an open, interoperable smart card infrastructure

Defining and developing an intrinsic end to end, Best of Breed architecture

Delivering a proven, stable solution in an emerging market

Smart Card Access Project Smart Card Access Project

Card System Device

Based on Based on Card Specification v2.0.1Card Specification v2.0.1

Based on Based on Terminal Framework v 1.5Terminal Framework v 1.5

Based on SCMS Functional Requirements v 3.3

•Multi-application Smart Card•Secure Access to Member Website•Vote signage capability

•Personalization over the internet•PIN unblock over the internet•Post issuance download of applets

•Access to All Member Meetings•Coupon Redemption•Badge Print out

Personalization•Name•Organization•Email Address

•Member Access•Gift Redemption

AgendaAgenda

Summary

Secure Multi-application card management

Strategic Plan

Mission Vision and Objectives

Define GlobalPlatform

Committees

Benefits of Member ParticipationBenefits of Member Participation

Facilitate collaborative commerce and identify new cross-industry partnerships and commercial structures

Define and create (customizable) standardized, interoperable smart card solutions to transcend technical barriers of proprietary systems

Deliver thought leadership & strategy

GovernmentRetail

Financial Services Telecom

Transportation

Healthcare

SummarySummary GlobalPlatform is rapidly becoming the defacto

standard for multiple application smart cards– Specifications based on strong business justification– Specifications address multiple points in the value chain– Specifications reflect cross-industry interests

Membership in GlobalPlatform is open– Functional areas of focus include cards, devices and

systems– Participants come from issuer, vendor, developer and

technology organizations– Global participation from North and South America,

Europe, Asia and Australia

More information is available at:– Web: www.globalplatform.org, – Email: secretariat@globalplatform.org– Telephone: +1-650-432-2486

Steve BrownBT Ignite

steve.a.brown@bt.com.chair@globalplatform.org

Steve BrownBT Ignite

steve.a.brown@bt.com.chair@globalplatform.org