Transit and Standards looking forward Walt Bonneau Jr. ALinc Principal Consultant to Infineon Semiconductor Milpitas, CA Email: [email protected]

Who’s behind the standards and specifications impacting transit Smart Card Standards

Banking Secure Payment Transactions

ISO/IEC JTC 1 and SC17 Committees

EMVCo Executive Committee

ISO/IEC JTC 1 and SC6 Committees

ISO/IEC Working Groups WG1, WG3,WG8, etc.

Board of Managers

ISO/IEC/ECMA Working Groups WG XX etc.

National Standards INCITS/ANSI Working Groups B10.5, B10.12, etc.

Working Groups Terminal, Mobile, Security, etc.

National Standards INCITS/ANSI Working Groups

NFC Standards

Copyright © Infineon Technologies AG 2015. All rights reserved

Other open committees and organizations supporting standards APTA An organization to advance public transportation

Smart Card Alliance An organization to advance smart card technology

OSPT-Alliance Open Standards for Public Transport

EMV Migration Forum Advancement of Open Payments with EMV

There are others… Copyright © Infineon Technologies AG 2015. All rights reserved

Transit and contactless technology ISO/IEC & ANSI/INCITS standards  Transit applied contactless card/media standards primarily comprise of the following:  ISO/IEC 14443, Proximity Integrated Circuit Cards (PICC)  ISO/IEC 10373-6, Identification Cards - Test Methods - PICC  ISO/IEC 15693, Vicinity Integrated Circuit Cards (VICC)

 ISO/IEC 10373-7, Identification Cards - Test Methods – VICC  ISO/IEC 7810, Identification Physical Characteristics – PICC & ICC  ISO/IEC 7816-4, Inter-industry Commands for Interchange (APDU’s)  ISO/IEC 7816-9, Inter-industry Commands for card management  ISO/IEC 18092, Near Field Communication–Interface & Protocol (Mobile)  ANSI-INCITS 410, Proximity Integrated Circuit Cards – (Limited Use)

Copyright © Infineon Technologies AG 2015. All rights reserved

Latest advancements in contactless

ISO/IEC and ANSI/INCITS card standards  ISO/IEC 14443 has evolved with the following new

advancements:  Card to Reader transmission bit rates greater than 424kb/sec  The PCD to PXD Function, the reader can convert/switch to a PICC (card) and back to a PCD (reader)

 Larger Frame Rates >128 bytes  Additional Antenna types, (3 mandatory and 3 optional)  Enhanced ISO/IEC 10373-6 test methods to support the above  Enhanced power, both Passive and Active

 A newly revised INCITS-410 Limited Use standard is scheduled for public release later this year (2015)

Copyright © Infineon Technologies AG 2015. All rights reserved

Choices in selecting contactless fare payment specifications  EMVCo™, EMV Integrated Circuit Card specification and certification  Master Card PayPass™, magnetic and contactless card and terminal specification  VISA, payWave™, contactless cards and mobile specification  OSPT-CIPURSE™, Public Transit Collection specifications/ standard for contactless card and mobile applications  NXP, For Mobile, RFID and Near Field/mobile device specification  APTA-UTFS, Fare Collection Contactless Card Protocol specification

There are others… Copyright © Infineon Technologies AG 2015. All rights reserved

An example of how International Standards are being applied ISO/IEC 18092 & ECMA-340 NFC

ISO 24727 & INCITS 504 Government CAC-PIV & TWIC

NIST: FIPS 197 Security Encryption AES-128-256

GlobalPlatform MultiApplication

Presently leverages 14443 directly

ISO 7810 Physical Characteristics

OSPT-CIPURSETM V.2

Part-1 Physical

INCITS-410 PICC Limited Use Physical Characteristics

EMVCo Contractless Bank Cards

Part-2 Radio Freq Pwr & Signal Interface

Part-4 Part-3 Initialization Transmission Protocol & Anti-collision

ISO/IEC 14443 Proximity Integrated Circuits The 14443 Foundation

ISO 7816-4 Identification Card Organization

ISO 7816-9 Identification Card File Management

ISO/IEC 10373-6 Test Methods

ISO/NIST/INCITS Open Standards

Copyright © Infineon Technologies AG 2015. All rights reserved

Fare payment considerations that impact standards



A look at where fare payments systems are headed

 Considerations: Account Based, Account Linked methods of ticketing  How is the fare payment card migration road map shaping up?

Copyright © Infineon Technologies AG 2015. All rights reserved

A look at the future of transit payment methods

* Agency based fare product ** Agency based fare product media for temporary use, contactless and/or magnetic card

Copyright © Infineon Technologies AG 2015. All rights reserved

An overview of Account Based, Account Linked and mobile payments  Account Based, Account Linked methods of ticketing and mobile device payment transactions are now being implemented in both US and non-US transit agencies  As known from previous smart card forums and past experiences of US Transit agencies, many have experienced trade offs and varying degrees of success with these systems  There are several areas of concern that should be addressed in Account Based systems:  Funds not readily available to the patron  Financial risks to the Agency and System Services Provider  Consumer experience has been challenging

 Account Linked areas of concern:

 Customer transactions not completed and agency financial backend validation risk  Transactions are taking much longer to complete on average  EMV migration implementation planning Copyright © Infineon Technologies AG 2015. All rights reserved

A high-level migration of bank and transit cards in the USA 1980’s

1990’s

Unified format

Unified format

Magnetic Card Standards Magnetic Bank Cards

Magnetic Bank Cards

Multiple formats Introduction of Contactless Card Multiple formats Magnetic Transit Cards

Magnetic Transit Cards

Contactless Cards

2000’s

2000’s

Smart Card Standards

EMV Bank Card Specifications

Decade-1

Magnetic Bank Cards

Mag and Smart Card formats Magnetic Transit Cards

Contactless Cards

Decade-2

Mobile Payments

Magnetic with Contact Bank Magnetic with Cards Contactless Dual Interface Bank Cards Bank Cards

Multiple Media formats to support NFC Standards & Enhanced Card Standards Magnetic Transit Cards Contactless Cards

Copyright © Infineon Technologies AG 2015. All rights reserved

Mobile Payments

Take-Aways 

Having multiple choices in transit fare payment options offer greater flexibility, but at the price of added system complexity and operational cost if not well thought out and managed

 Evolving standards have helped to civilize many aspects of

transit payment system implementation however, there are still open issues of contention that must be managed

 Recent transit fare payment system specifications such as, OSPT-CIPURSE™ have taken advantage of multiple ISO and ANSI/INCITS standards, offering highly secure and flexible implementations  Worldwide Standards organizations are driven by market needs whereby, standards are developed to achieve greater universal market acceptance of a given technology. Copyright © Infineon Technologies AG 2015. All rights reserved

APTA Fare Collection 101 Participants

Thank You!

Copyright © Infineon Technologies AG 2015. All rights reserved