Mf1sep10x1 Secure Contactless Smart Card IC for Seamless Migration Rev
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Smart Card Readers 2021/S 093-245130 Contract Notice
OJ/S S93 14/05/2021 1 / 4 245130-2021-EN This notice in TED website: https://ted.europa.eu/udl?uri=TED:NOTICE:245130-2021:TEXT:EN:HTML Finland-HSL: Smart card readers 2021/S 093-245130 Contract notice – utilities Supplies Legal Basis: Directive 2014/25/EU Section I: Contracting entity I.1) Name and addresses Official name: Helsingin Seudun Liikenne — kuntayhtymä National registration number: 2274586-3 Postal address: Opastinsilta 6A, PL 100 Town: HSL NUTS code: FI1B Helsinki-Uusimaa Postal code: 00077 Country: Finland E-mail: [email protected] Internet address(es): Main address: http://www.hsl.fi I.3) Communication The procurement documents are available for unrestricted and full direct access, free of charge, at: https:// tarjouspalvelu.fi/hsl?id=335313&tpk=3f2f9827-c11f-4bcc-b4f1-d3b63cdeef62 Additional information can be obtained from the abovementioned address Tenders or requests to participate must be submitted electronically via: https://tarjouspalvelu.fi/hsl? id=335313&tpk=3f2f9827-c11f-4bcc-b4f1-d3b63cdeef62 I.6) Main activity Urban railway, tramway, trolleybus or bus services Section II: Object II.1) Scope of the procurement II.1.1) Title: Contactless validator Reference number: 71/02.08.00/2021 II.1.2) Main CPV code 30233300 Smart card readers II.1.3) Type of contract Supplies II.1.4) Short description: Helsinki regional transport authority (HSL) is looking to procure contactless validators, which are capable of reading and updating ISO 14443 A/B contactless travel cards (such as currently used Mifare DESFire travel cards and Mifare Ultralight single charged cards), reading 1D/2D bar codes and QR codes from mobile applications and paper tickets, and reading contactless EMV cards and support pinless contactless payments 14/05/2021 S93 1 / 4 https://ted.europa.eu/TED OJ/S S93 14/05/2021 2 / 4 245130-2021-EN in transit (Visa and Mastercard MTT rules). -
Smart Cards Contents
Smart cards Contents 1 Smart card 1 1.1 History ................................................ 1 1.1.1 Invention ........................................... 1 1.1.2 Carte Bleue .......................................... 2 1.1.3 EMV ............................................. 2 1.1.4 Development of contactless systems ............................. 2 1.2 Design ................................................ 2 1.2.1 Contact smart cards ..................................... 3 1.2.2 Contactless smart cards .................................... 3 1.2.3 Hybrids ............................................ 4 1.3 Applications .............................................. 4 1.3.1 Financial ........................................... 4 1.3.2 SIM .............................................. 4 1.3.3 Identification ......................................... 4 1.3.4 Public transit ......................................... 5 1.3.5 Computer security ...................................... 6 1.3.6 Schools ............................................ 6 1.3.7 Healthcare .......................................... 6 1.3.8 Other uses .......................................... 6 1.3.9 Multiple-use systems ..................................... 6 1.4 Security ................................................ 6 1.5 Benefits ................................................ 6 1.6 Problems ............................................... 7 1.7 See also ................................................ 7 1.8 Further reading ........................................... -
Mobility Payment Integration: State-Of-The-Practice Scan
Mobility Payment Integration: State-of-the-Practice Scan OCTOBER 2019 FTA Report No. 0143 Federal Transit Administration PREPARED BY Ingrid Bartinique and Joshua Hassol Volpe National Transportation Systems Center COVER PHOTO Courtesy of Edwin Adilson Rodriguez, Federal Transit Administration DISCLAIMER This document is disseminated under the sponsorship of the U.S. Department of Transportation in the interest of information exchange. The United States Government assumes no liability for its contents or use thereof. The United States Government does not endorse products or manufacturers. Trade or manufacturers’ names appear herein solely because they are considered essential to the objective of this report. Mobility Payment Integration: State-of-the- Practice Scan OCTOBER 2019 FTA Report No. 0143 PREPARED BY Ingrid Bartinique and Joshua Hassol Volpe National Transportation Systems Center 55 Broadway, Kendall Square Cambridge, MA 02142 SPONSORED BY Federal Transit Administration Office of Research, Demonstration and Innovation U.S. Department of Transportation 1200 New Jersey Avenue, SE Washington, DC 20590 AVAILABLE ONLINE https://www.transit.dot.gov/about/research-innovation FEDERAL TRANSIT ADMINISTRATION i FEDERAL TRANSIT ADMINISTRATION i Metric Conversion Table SYMBOL WHEN YOU KNOW MULTIPLY BY TO FIND SYMBOL LENGTH in inches 25.4 millimeters mm ft feet 0.305 meters m yd yards 0.914 meters m mi miles 1.61 kilometers km VOLUME fl oz fluid ounces 29.57 milliliters mL gal gallons 3.785 liter L ft3 cubic feet 0.028 cubic meters m3 yd3 cubic yards 0.765 cubic meters m3 NOTE: volumes greater than 1000 L shall be shown in m3 MASS oz ounces 28.35 grams g lb pounds 0.454 kilograms kg megagrams T short tons (2000 lb) 0.907 Mg (or “t”) (or “metric ton”) TEMPERATURE (exact degrees) o 5 (F-32)/9 o F Fahrenheit Celsius C or (F-32)/1.8 FEDERAL TRANSIT ADMINISTRATION i FEDERAL TRANSIT ADMINISTRATION ii REPORT DOCUMENTATION PAGE Form Approved OMB No. -
RFP for Selection of Financial Institution for Open Loop Smart Card Common City Payments System
RFP for Selection of Financial Institution for Open Loop Smart Card Common City Payments System Selection of Financial Institution for Providing Smart Card Based Eco System for Unified City Payments Including Mobility, Recreational and Amusement Areas of SMC, Municipal Bills, Utility Payments, Retail and Other Payments within Surat City PART 1 – INSTRUCTIONS TO BIDDERS SECTION AND DRAFT LICENSE AGREEMENT Invited by Surat Smart City Development Limited 115, Smart City Cell, Surat Municipal Corporation, Muglisara, Main Road, Surat – 395003, Gujarat RFP No.: SSCDL-CityPaymentCard-RFP-01-2016 Last date (deadline) for online Price Bid Submission: 15.12.2016 Last date (deadline) for Technical Bid Submission: 19.12.2016 DISCLAIMER This RFP is being issued by the Surat Smart City Development Limited (hereunder called “Authority”/“SSCDL”) for inviting tenders to shortlist Financial Institutions for providing smart card based eco system for unified city payments including mobility, recreational and amusement areas of SMC, municipal bills, utility payments, retail and other payments within Surat City. It is hereby clarified that this RFP is not an agreement and is not an offer or invitation by Authority to any party hereunder. The purpose of this RFP is to provide the Bidder(s) with information to assist in the formulation of their proposal submission. This RFP document does not purport to contain all the information Bidders may require. This RFP document may not be appropriate for all persons, and it is not possible for Authority to consider particular needs of each Bidder. Each Bidder should conduct its own investigation and analysis, and should check the accuracy, reliability and completeness of information in this RFP document and obtain independent advice from appropriate sources. -
Axis Bank in Association with BMTC Launches India's First Open Loop EMV Contactless Smart Card for Transit in Bengaluru
Axis Bank in association with BMTC launches India’s first open loop EMV contactless smart card for transit in Bengaluru India’s first Open loop – single wallet EMV Contactless Transit Card with the objective to create a Scalable, Interoperable ecosystem for convergence of Transit & Retail Payments. Prepaid Transit Card that allows cashless commuting and enhances shopping experience Bengaluru June 14, 2016: Axis Bank, India’s third largest private sector bank has associated with Bengaluru Metropolitan Transport Corporation (BMTC) to launch ‘Axis Bank BMTC Smart card’, India’s first ever open loop EMV contactless smart card that would make travel by bus, a convenient and hassle free experience for the daily commuters in Bengaluru. This initiative is in support Ministry of Urban Development’s vision to address the need of Common Mobility Card. Axis Bank BMTC Smart Card is India’s first prepaid transit card offering integrated single wallet that supports both EMV wallet and transit functions. The card offers integrated services to the commuters by offering them cashless bus travel; and also offers shopping experience at about 1.2 Mn merchant outlets across the country, and therefore, no hassle of carrying multiple cards. Axis Bank has partnered with National Payments Corporation of India (NPCI) for this project for developing the transit EMV contactless specification on interoperable open standards. These specifications can be used by any other transit operator (Metro/Cabs/Auto) by incorporating these standards with their existing fare collection systems. This will make it more convenient for the commuters, as it would allow them to use the same card for purchasing tickets/passes & for all other daily purchase transactions The Smart Card will be issued and loaded at BMTC issuance counters such as pass counters, and Traffic and Transit Management Centres (TTMC) and various other touch points across Bengaluru For balances below Rs 10,000/-, cards would be issued by capturing the minimum mandatory requirements of the customer in the system. -
Tcrp Report 94
TRANSIT COOPERATIVE RESEARCH TCRP PROGRAM REPORT 94 Sponsored by the Federal Transit Administration Fare Policies, Structures and Technologies: Update TCRP OVERSIGHT AND PROJECT TRANSPORTATION RESEARCH BOARD EXECUTIVE COMMITTEE 2003 (Membership as of March 2003) SELECTION COMMITTEE (as of October 2002) OFFICERS CHAIR Chair: Genevieve Giuliano, Director and Prof., School of Policy, Planning, and Development, USC, Los Angeles J. BARRY BARKER Vice Chair: Michael S. Townes, Exec. Dir., Transportation District Commission of Hampton Roads, Hampton, VA Transit Authority of River City Executive Director: Robert E. Skinner, Jr., Transportation Research Board MEMBERS DANNY ALVAREZ MEMBERS Miami-Dade Transit Agency KAREN ANTION MICHAEL W. BEHRENS, Executive Director, Texas DOT Karen Antion Consulting JOSEPH H. BOARDMAN, Commissioner, New York State DOT GORDON AOYAGI SARAH C. CAMPBELL, President, TransManagement, Inc., Washington, DC Montgomery County Government E. DEAN CARLSON, Secretary of Transportation, Kansas DOT JEAN PAUL BAILLY JOANNE F. CASEY, President, Intermodal Association of North America Union Internationale des Transports Publics JAMES C. CODELL III, Secretary, Kentucky Transportation Cabinet RONALD L. BARNES JOHN L. CRAIG, Director, Nebraska Department of Roads Central Ohio Transit Authority BERNARD S. GROSECLOSE, JR., President and CEO, South Carolina State Ports Authority LINDA J. BOHLINGER SUSAN HANSON, Landry University Prof. of Geography, Graduate School of Geography, Clark University HNTB Corp. LESTER A. HOEL, L. A. Lacy Distinguished Professor, Depart. of Civil Engineering, University of Virginia ANDREW BONDS, JR. HENRY L. HUNGERBEELER, Director, Missouri DOT Parsons Transportation Group, Inc. JENNIFER L. DORN ADIB K. KANAFANI, Cahill Prof. and Chair, Dept. of Civil and Environmental Engineering, University of FTA California at Berkeley NATHANIEL P. -
NFC/RFID Token Security. Case Study: Estonian Public Transportation Cards
NFC/RFID token security. Case study: Estonian public transportation cards Yauhen Yakimenka Supervised by Jan Willemson December 17, 2016 Abstract This report, prepared for the course Research Seminar in Cryptogra- phy, talks about security of NFC/RFID cards. It first describes the most widely-used type of cards, MIFARE Classic, and then considers a real-life application, namely Estonian public transportation cards. The commu- nication between a real card reader installed in Tartu bus and a Tallinn public transportation card is eavesdropped and analysed on high level. 1 Introduction Radio frequency identification (RFID) cards is a pervasive technology nowadays. More and more systems adopted this technology as replacement for barcodes, magnetic stripe cards and paper tickets for a variety of applications. Contactless cards consist of a small piece of memory that can be accessed wirelessly. Some of them can also have some computing capabilities. RFID cards are of two main classes, low-frequency and high-frequency. The former operates on 125kHz frequency range and do not any cryptographic ca- pabilities. In fact, they can be seen as radio-frequency analogue of bar codes: a card simply transmits pre-coded information. Cards operating on a 13.56GHz frequency range (also known as Near-Field Communication (NFC) cards) can be made to implement more sophisticated protocols. We further talk about one particular type of such cards, MIFARE Classic. 2 MIFARE Classic cards MIFARE Classic is perhaps the most widely used type of high-frequency cards. They were introduce in 1995 by NXP (formerly Philips). The logical structure of MIFARE Classic is shown in Figure 1.1 The card is in principle a memory card with few extra functionalities (read, write, increment and decrement). -
Card-Only Attacks on Mifare Classic Or How to Steal Your Oyster Card and Break Into Buildings Worldwide
Card-Only Attacks on MiFare Classic or How to Steal Your Oyster Card and Break into Buildings Worldwide Nicolas T. Courtois University College London , UK Better Card-only Attacks on Mifare Classic Slides I will cover only 50% and skip the technical parts. Full version: Google “UCL CS Courtois” These slides: www.nicolascourtois.com/papers/mifare_all.pdf My paper: SECRYPT 2009, see also eprint.iacr.org/2009/137/ Hack it at home: step by step instructions: http://www.nicolascourtois.com/MifareClassicHack.pdf 2 Nicolas T. Courtois, 2009 Better Card-only Attacks on Mifare Classic Outline 1. Security in the Smart Card world: • Traditional model vs. disruptive RFID technology • Open vs. Close source models 2. MiFare Crypto 1 cipher: waste of silicon x more than 1 billion copies sold. 3. Barriers to breach: • The need for hacking and reverse engineering • Hardware set-up 4. Early attacks 5. Card-only attacks [NEW] • My own • Dutch researchers from Nijmegen • Combined 6. Inside Oyster Cards + other countries… 7. Who is to blame? 3 Nicolas T. Courtois, 2009 **About Our Job Better Card-only Attacks on Mifare Classic **Key Question: Is actively researching serious security vulnerabilities socially desirable? - Of Course Yes! …will tell you every professional hacker and every academic code-breaker… 5 Nicolas T. Courtois, 2009 Better Card-only Attacks on Mifare Classic **Bruce Schneier [14 May 2008]: Problem: A hacker who discovers one [attack] can sell it on the black market, blackmail the vendor with disclosure, or simply publish it without regard to the consequences. Q: […] is it ethical to research new vulnerabilities? A: Unequivocally, yes. -
Maturity of Smart Card Chip Technology and Its Application to Web Security Cathy Medich, Sree Swaminathan, Kelly Urban, Siva Narendra Smart Card Alliance 1
Maturity of Smart Card Chip Technology and Its Application to Web Security Cathy Medich, Sree Swaminathan, Kelly Urban, Siva Narendra Smart Card Alliance 1. Abstract This position paper provides an overview of smart card secure element chip technology, the markets and applications that use smart card chip technology, the security provided by smart card technology, and the standards that are used to support smart card applications. Contrary to some beliefs, smart card silicon is a highly standardized piece of security hardware that is widely available in the market, and is already in use globally in payments, identity (e.g., e-passports, government employee ID) and access control applications. The scale and standardization of secure smart card technology bring the most obvious core security component that should be integrated into the next generation of unified web security standards. 2. Smart Card Chip Technology Overview A smart card chip is an integrated circuit that includes an embedded secure microcontroller and supports the ISO/IEC 7816 standard for direct physical contact and/or the ISO/IEC 14443 standard for a remote contactless radio frequency interface. With a secure microcontroller, smart cards have the unique ability to store large amounts of data, carry out their own on-card functions (e.g., encryption and mutual authentication) and interact intelligently with computers, mobile phones, and other readers. Smart card technology conforms to international standards and industry specifications also govern the use of smart card technology for various applications. The term, "smart card," is something of misnomer. While the plastic card was the initial smart card form factor, smart card technology is now available in a wide variety of form factors, including plastic cards, key fobs, subscriber identification modules (SIMs) used in mobile phones, watches, electronic passports and USB-based tokens. -
Security Analysis of Near-Field Communication (NFC) Payments
Security Analysis of Near-Field Communication (NFC) Payments Dennis Giese, Kevin Liu, Michael Sun, Tahin Syed, Linda Zhang May 16, 2018 Abstract Near-Field Communication (NFC) is a modern technology for short range communication with a variety of applications ranging from physical access control to contactless payments. These applications are often heralded as being more secure, as they require close physical proximity and do not involve Wi-Fi or mobile networks. However, these systems are still vulnerable to security attacks at the time of transaction, as they require little to no additional authentication from the user’s end. In this paper, we propose a method to attack mobile-based NFC payment methods and make payments at locations far away from where the attack occurs. We evaluate our methods on our personal Apple and Google Pay accounts and demonstrate two successful attacks on these NFC payment systems. 1 Introduction Prior to the digital age, physical access control was managed by locks and keys and payments were only made via cash. Today, these are being phased out in favor of digital solutions. Physical access control is now often managed by magnetic, wireless ID cards or biometrics, such as fingerprints, while payments can be made by credit cards or contactless payment methods. The convenience of these new digital methods are making them increasingly popular. However, the greater prevalence of these technologies poses new security risks. Whereas in the past a key or cash might have to be stolen physically, they can now be stolen digitally. Furthermore, rather than just having a key or a few bills stolen, these virtual attacks can wreak havoc on a person’s life, leading to a severe invasion of privacy and identity theft. -
Unlocking the Smart Card
Episode Four: Unlocking the Smart Card This is an excerpt from Unlocked — an ASSA ABLOY podcast series on campus security. Unlocked explores the security issues and challenges that colleges and universities face as they strive to create a safe and secure learning environment. Visit intelligentopenings.com/unlocked to hear more. How We Got Smart Before diving into the current broken cards and physical wear on the credential technologies, it helps to readers. Prox solved these problems. understand where we came from. Lower maintenance costs, increased In 1960, a young engineer from IBM user convenience, and new options named Forrest Parry invented the for form factors like fobs made the magnetic stripe card. Once prox card a winner. But the low- ubiquitous on campus doors, more frequency proximity technology is reliable and secure technologies not without its limitations. are quickly eclipsing the mag stripe. Mag stripe cards are simple. A card gets swiped in a reader. That reader then reads a sequence of numbers Outside of higher stored on the stripe of that card. education and If the number matches what’s stored in the access system’s older hotels, hardly Whether installing a new door access database, the door unlocks. system for your campus or upgrading from a legacy system you have a lot of Many campuses still use the mag anyone still uses decisions to make. stripe card for their door access. This is mainly because the cards are mag stripe cards You first must choose the right access inexpensive, the cost to replace the software and locking hardware. -
NRTA Year Round Bus Service Study-Phase 2
,.. _, i ’f“l* I _:: : P,,_, /___ ____":% iiiiiiit ' <-‘Q ;\~__\\"‘,v'-"* -1‘ é 7 _ -' 2:-.*:! _____ _ iii, L ' _2' _ -—- *“§l E ?:7 55,- _ ,_ L L k ¢_ '___._,.i,;,, 1 _;,_; 1 II ‘ Photo by Susan Richards, SR Concepts 94% 1; K / W1 ' u<'§ -7." Q 1!“ '2 '~ ~ W, " \, 1/1 / ‘-\é‘ i 1 ‘ V J if -=) ‘ __ .-. 1; _" _. ‘ ' , ,_ rs. V\_ ‘ \ . \' " £2~.@in _ , H: I ... I 7“ - K ‘ - 5' ‘ <’ _ {ii} __.4;..* ~22” ‘TiIt K ' I \.1\>\ i? gii -Photo by Susan Richards, SR Concepts I . - Photo by SusanK‘ Richards," SR Concepts Photo by Susan Richards, SR Concepts 4 Q , § =\__§__ \ V ‘ I-1‘ 1 llflllilifilfil HODIOMI U888“fllllflfifill NRTA Year-Round Bus Service Study Phase II Report: Fare Policy Review and Development of Innovative Funding Options Nantucket Regional Transit Authority December 2016 NRTA Year-Round Bus Service Study Phase II Report TABLE OF CONTENTS Executive Summary ................................................................................................................ ES-1 Local Outreach ................................................................................................................... ES-1 Innovative Funding Options ................................................................................................ ES-1 Fare Policy Analysis ............................................................................................................. ES-2 Fare Collection Technology Analysis.................................................................................... ES-2 Next Steps .........................................................................................................................