Annual Review 2015 Securing Mobile Life
Total Page:16
File Type:pdf, Size:1020Kb
Annual Review 2015 Securing mobile life. Creating Confidence. Giesecke & Devrient has been developing security solutions for over 160 years. As the world has advanced, we’ve kept pace. Today, we are a world leader in pioneering technologies that secure how people pay, communicate, and authenticate. Our solutions, products, and services range from innovative hardware and software to end-to-end solutions for EMV, HCE, Wearables, Mobile Wallets and Authentication, NFC and TSM, SIM and Device Management, LTE, Subscription Management and M2M. Get to know us at www.gi-de.com. BLUE CHIP CARD CUSTOMER BASE PERSONALIZATION INCLUDING CAPACITY IN THE U.S. #1 U.S. ISSUER OF TOP 10 200m EMV CARDS U.S. ISSUERS Our Expertise Per Business FINANCIAL MOBILE CITIZEN CONNECTED SERVICES NETWORK ACCESS DEVICE INSTITUTIONS OPERATORS & IDENTITY MAKERS ALL PAYMENT SIM CARDS ACCESS SMART CARDS CARDS PHONES (eSE) PERSONAL- MOBILE IoT/ M2M IZATION MONEY ID CARDS (eUICC) REMOTE DRIVER MOTION MANAGEMENT SECURED TM LICENSE CODE FOR MNOs OBJECTS MOBILE PAYMENT PASSPORT WWW.OBERTHUR.COM ANNUAL REVIEW CONTENTS The Smart Card Alliance Annual Review is produced by the Smart Card Alliance, a not- for-profit, multi-industry association working to stimulate the understanding, adoption, use and widespread application of smart card technology. Publisher Randy Vanderhoof 36 ACCESS CONTROL [email protected] Managing Editor Debra Marshall [email protected] Executive Editor Cathy Medich [email protected] Contributors Willy Dommen, David Helbock, Bryan K. Ichikawa, Jack Jania, Gerald J. Kane, Nicole Lauzon, Oliver Manahan, Debra Marshall, Cathy Medich, Sadiq Mohammed, Morgan Richard, Randy Vanderhoof, Shelbey Votapek Art Design and Production Avisian Main Office Smart Card Alliance 40 HEALTH AND HUMAN SERVICES 191 Clarksville Road Princeton Junction, NJ 08550 800.556.6828 www.smartcardalliance.org Membership inquiries or comments? 44 IDENTITY 46 MOBILE AND NFC Please email [email protected] Copyright © 2011, 2012, 2013, 2014, 2015 Smart Card Alliance, Inc. All rights reserved. Reproduction or distribution of this publication in any form is forbidden without prior permission from the Smart Card Alliance. The Smart Card Alliance has used best efforts to ensure, but cannot guarantee, that the information described in this report is accurate as of the publication date. The Smart Card Alliance disclaims all warranties as to the accuracy, completeness or adequacy of information in this publication. 4 Smart Card Alliance 6 A Message from Randy Vanderhoof 34 Industry Councils 54 Transportation Council 55 Year in Review: Council Chair Letter 7 A Message from Willy Dommen, 35 Industry Councils Letter from 56 EMV and Parking Smart Card Alliance Chair, 2011-2015 Cathy Medich 57 Multimodal Payments Convergence Workshop 8 Alliance Management 36 Access Control Council 37 Year in Review: Council Chair Letter 58 EMV Migration Forum 10 Board of Directors 38 Guide Specification for Architects 59 Year in Review: Director’s Letter and Engineers for Smart Card-based 60 EMV Migration Forum Membership 11 Membership Benefits PACS Cards and Readers for Non- 61 EMV Migration Forum government PACS Working Committees 12 Membership List 39 EPACS Using Smart Card Technology 62 EMV Migration Forum for Government and Commercial Membership Mix 14 2015 Member Survey Organizations 63 EMV Migration Forum Resources 16 Member Profiles 40 Health and Human Services Council 64 Latin America Chapter 41 Year in Review: Council Chair Letter 18 Member Recognition Program 42 The Benefits of Strong Authentication 65 Smart Card Alliance for the Centers for Medicare and Member Directory 20 Training and Certification Programs Medicaid Services 22 CSCIP Recipients 43 EMV 101 for the Healthcare Industry 23 CSEIP Recipients 24 Professional and Certification Trainers 44 Identity Council 45 Year in Review: Council Chair Letter 26 Conferences and Events 46 Mobile and NFC Council 27 Save the Date - 2015 Events 47 Year in Review: Council Chair Letter 48 NFC Non-Payments Use Cases ADVERTISERS 28 2015 Event Photos 49 Host Card Emulation (HCE) Webinar 30 Executive Director 50 Payments Council 2 GIESECKE & DEVRIENT Letter Highlights 51 Year in Review: 3 OBERTHUR TECHNOLOGIES Council Co-Chairs Letter 33 SERVIRED 32 Web Site Highlights 52 EMV and NFC 61 FIME 53 The True Cost of Data Breaches 75 XEROX in the Payments Industry 46 MOBILE AND NFC 50 PAYMENTS 54 TRANSPORTATION 2015 Annual Review 5 A MESSAGE FROM RANDY VANDERHOOF Organizations Fueled by Common Mission As I reviewed the long list of activities and major accomplishments of the Smart Card Alli- ance and its affiliated organizations in 2015, a familiar image kept entering my mind. Three interlocking rings reflect on the nature of how three different things can operate inde- pendently, have a unique culture and personality, and yet be interconnected and mutually strengthened at the same time by a common mission and overlapping interests. I often describe the Smart Card Alliance in these terms, with the Alliance representing one community of industry stakeholders with a common mission, joined together with two other communities of stakeholders – the EMV Migration Forum and the Smart Card Alliance Latin America (SCALA) chapter. These three vibrant groups have different per- sonalities, missions, and cultures, yet they are connected to each other, and strengthened by a common commitment to accelerating the usage and adoption of secure smart card technologies across the Americas, from Canada to Argentina. Collectively, they include 373 organizations and thousands of individuals who do amazing work as a community of believers in the potential of secure smart card chip technology to make transactions more secure for payments, transit, mobile, government, enterprise, and healthcare – and in the newest market, the Internet of Things. That sharing and exchange of knowledge and experience strengthen the collective whole. The three rings also represent one of the foundational security principles that smart card technology brings to every market where it exists – the ability to bind identities and digital identifiers together and to enable secure authentication of that digital identifier by a relying party like a bank or an employer – leading to trusted access to services or facilities. Many of the white papers, webinars, FAQs, and other educational resources these organizations generated and distributed to the public in 2015 incorporated these three security concepts – identification, authentication, and access. The deliverables from our 2015 training programs, industry work- shops, and discussion forums applied these three principles to each market audience in which they were presented. Our training and certification programs, the CSCIP and the CSEIP, also apply these security principles when educating a new gen- eration of security professionals who serve the multiple markets where smart card technology is being adopted. Many of these train- ing programs and a host of new in-person seminars and webcasts will be hosted at the new Smart Card Alliance Training Center, which is opening shortly in the Washington, DC, suburb known as Crystal City. The modern, 2,800 sq. ft. office, just minutes from the airport and downtown Washington, will serve as a hub for our education and training programs and a resource for our members. As I contemplate the bright future of the smart card industry and our organizations, again the three-rings image applies. As industry organizations, we long ago moved beyond thinking in the limited terms of a smart card form factor when going about our mis- sion to promote chip technology; yet smart card shipments globally keep growing and will surpass 8 billion units in 2015. The U.S. EXECUTIVE DIRECTOR’S LETTER payments industry’s move to EMV alone will add around 500 million cards to those totals by the end of this year and another 500 million over the next few years. The mobile industry has been embracing SIM technology since 1991 and the UICC became synony- mous with NFC and secure elements in 2006. Lately, the embedded UICC (eUICC) is gaining popularity in a whole new genera- tion of smart phones that have mobile payments functionality. The third generation of smart cards can be found in the burgeoning machine-to-machine (M2M) market, commonly referred to as the Internet of Things (IoT). This market for connected devices is already larger than 10 billion units and expected to reach 28 billion units by 2020. The smart “security” industry has a great deal of work to do to raise the awareness about the value of smart chip technology for security of IoT connected cars, machines, and medical devices. The Smart Card Alliance will begin to embrace this challenge in earnest in 2016. I want to thank our members and their dedicated employees for their continued support of the Smart Card Alliance, the EMV Mi- gration Forum, and SCALA. Our continued strengths as industry groups to shape the market and grow the pie for all participants are rooted in the strong bonds represented by the interlocking rings that I spoke of and that have served us so well over time. Con- gratulations on your accomplishments in 2015 and we look forward to more success in 2016. Randy Vanderhoof Executive Director Smart Card Alliance 6 Smart Card Alliance A MESSAGE FROM WILLY DOMMEN, SMART CARD ALLIANCE CHAIR, 2011-2015 CHAIRMAN’S LETTER A Reflection on Accomplishments My two terms as Chairman of the Board of Directors have ended, and while I was absorbing the fantastic weather in Arizona during the October Member Meeting and NFC Solutions Summit, I reflected on the last four years and the organization accomplishments. I also reflected on how the world around us has changed. The Alliance organization, much like the smart card industry it serves, is in the midst of a transformation from an entrepreneurial style of business, growing rap- idly in many directions, to a stable, more mature business with controlled growth. For example, as the government and payments markets mature, it creates oppor- tunities in other emerging markets for smart card technology and attracts new industry participants to our events and activities.