AGENDA Introduction Kind of information smart card contain Types of Chip Cards Functions of Smart Card Security Mechanism Advantages of Smart Card Comparison with magnetic strips Applications References

Introduction to Smart Card A smart card contains a "chip" with memory and is typically used to hold customer account information and a "balance" of money similar to a checking account. The card is inserted into a device that can read and write to it updating information appropriately.

What’s in a Card? CLK RST Vcc RFU GND RFU Vpp I/O

Smart Cards devices GND VCC VPP Reset I/O Clock Reserved

Kinds of Information Smart Card Contain Personal information, including the card serial number, date of issue and cardholder’s name, gender, date of birth, ID number, and picture. Information relating to cardholder status, remarks for catastrophic diseases, number of visits and admissions, accumulated medical expenditure records and amount of cost-sharing. Medical service information, including drug allergy history and long-term prescriptions of ambulatory care and certain medical treatments. Public health administration information

Types Of Chips Cards Often the terms “chip card,” “integrated circuit card” and “smart card” are used interchangeably, but they can mean different things. There are three different types of chips that can be associated with these cards: Memory only Wired logic Microcontroller Types of smart card

Functions of Smart Card Access Control Tools. Payment Tools.. Information Storage and Management Tools.

Smart Card Readers Computer based readers Connect through USB or COM (Serial) ports Dedicated terminals Usually with a small screen, keypad, printer, often also have biometric devices such as thumb print scanner.

Security Mechanisms Password Cryptographic challenge Response Card holder’s protection Cryptographic challenge Response Entity authentication Biometric information Person’s identification A combination of one or more

Advantages of Smart Cards The capacity provided by the on-board microprocessor and data capacity for highly secure, off-line processing Established track record in real world applications Durability and long expected life span Chip Operating Systems that support multiple applications Secure independent data storage on one single card

Comparison with Magnetic Stripe Cards The increasing complex performance and application requirements of today's card systems have spurred interest in smart cards as an alternative to magnetic stripe cards, or as an enhancement to magnetic stripe cards in the form of a hybrid card which can support more than one technology (a smart card micro-module and a magnetic stripe).

Smart Card Applications Financial Applications Electronic Purse to replace coins for small purchases in vending machines and over-the-counter transactions. Credit and/or Debit Accounts, replicating what is currently on the magnetic stripe bank card, but in a more secure environment. Securing payment across the Internet as part of Electronic Commerce. Communications Applications The secure initiation of calls and identification of caller (for billing purposes) on any Global System for Mobile Communications (GSM) phone. Subscriber activation of programming on Pay-TV.

Continue…… Information Security Employee access cards with secured passwords and the potential to employ biometrics to protect access to computer systems. Physical Access Control Employee access cards with secured ID and the potential to employ biometrics to protect physical access to facilities. Transportation Drivers Licenses. Electronic Toll Collection Systems.

Continue…… Student Identification All-purpose student ID card (a/k/a campus card), containing a variety of applications such as electronic purse (for vending machines, laundry machines, library card, and meal card). Health Care Consumer health card containing insurance eligibility and emergency medical data.

Conclusion Smart cards can be used for identification, authentication, and data storage Smart card can provide strong authentication for single sign- on or enterprise single sign-on to computers, laptops, data with encryption,enterprise resource planning platforms such as SAP, etc

References www.cardshow.com www.chipcard.ibm.com www.compinfo.co.uk/tpsmrt.htm www.gemplus.com/presse/java_1.html www.javasoft.com/pr/1996/oct/pr961029-02.html