e+e+ Presentation to the Smartcard Networking Forum 11 th April 2006 e-purse case study Jayne Ward Bracknell Forest Borough Council

e+e+ e-purse The current BFBC e-purse is based on the Common Electronic Purse Specification (CEPS) standard First CEPS implementation in the UK CEPS can co-exist with other applications on the same chip and can be used in a variety of networks

e+e+ History BFBC has a Managed Service for its smart card Bespoke development of e-purse in 2001 for use with a MiFare 1K card Proprietary system using proprietary readers Re-procurement in 2004/05- New Managed Service Provider Choice between no e-purse or a redeveloped e-purse

e+e+ Implementation Currently deployed to – 9 Libraries – 4 Leisure Centres –Concessionary Fare Pass –Local Retail Discount Card –Proof of Age PASS accreditation – 4 Secondary Schools Cashless catering

e+e+ Why CEPS? Only international standard for e-purse Complies with the National Smartcard Project Complies with Europay, Mastercard and Visa (EMV) as an open e-purse system due to its (in theory) interoperability EMV infrastructure discounted as being too involved with banks and involving transaction fees

e+e+ Why CEPS? Wish to move towards interoperability Did not want another proprietary e-purse Need to be open rather than closed and inclusive New provider, familiar with CEPS, offered ‘CEPS Lite’ Royalty free right in perpetuity available to all ACTVaR councils Not a lot of alternatives

e+e+ What is CEPS Lite ? CEPS with multicurrency and incremental purchase capabilities stripped out Adapted to fit on the e+ JCOP 30 card Card application and terminal application written to work on standard PC’s Purchase Secure Access Module (PSAM) software deployed to keep the cost of readers down

e+e+ The Bad News All existing cards in circulation needed to be converted to work with new e- purse To allow the e-purse balance on the contactless chip to be read via a contact reader Conversion done by frontline staff on first presentation of card

e+e+ Contact Chip The JCOP30 contact chip contains –The CEPS Lite Applet that includes the purse balance and the 4 most recent e-purse transactions ( i) debit/credit, ii) amount, date and time, iii) balance after the transaction, iv) issuer I/D) –The Infineer Applet as an identifier for cashless catering (where applicable for school meals) –A HAD Applet enabling the data on the contactless chip to be read from a contact reader

e+e+ Contact Chip Needed Contactless solution as used previously T=CL readers – IDTronic desktop ISO14443A/B(RDT-OEMMF) Staff have 2 different readers. –1 for conversion –1 for Management System and e-purse

e+e+ 42,000 existing edge cards

e+e+ New Branding edge re-branded to e+ Happened at same time as change to new provider All edge cards in circulation needed to be converted before they would work with new ChipPURSE e-purse system Post Issuance solution using a contact reader All e+ cards work on the new system

e+e+ e+ Card

e+e+ Card Conversion A DLL software security module was required Cards converted using a contact reader

e+e+ Conversion Process

e+e+

e+e+ Most edge cards convert without problems in 90 seconds Conversion done via internet connection to cardholder Multi Application Smart Card System (MASCOT) database During conversion the existing e-purse balance is moved from the contactless chip to the contact chip Just another 30,000 or so to go

e+e+ How The System Works System called ChipPURSE ChipPURSE interfaces with MASCOT Very easy for staff to use Up to £100 can be loaded on a card and spent at any one of 13 locations in the Borough Money is loaded by staff 2 receipts. 1 for customer 1 for till Money protected once card reported lost or stolen

e+e+ How The System Works Purse screen activated by placing card on contactless reader Pop up box appears on top of the screen in libraries- integral with LMS Allows credit and debit transactions and balance queries

e+e+ Chip PURSE Overview

e+e+ How The System Works Only credit transactions need an on-line connection to MASCOT Debit transactions do not need to be on-line and are downloaded to the MASCOT database daily No transactions are PIN protected The CEPS transactions are uploaded directly to the merchant acquirer (entity responsible to clear and settle transactions) on start up of the terminal application

e+e+ Receipts

e+e+ Replacement Cards No funds on replacement cards Letter stating e-purse balance sent out with card Cardholder presents letter at library / leisure centre for balance to be loaded Letter retained for audit trail

e+e+ Settlement ChipPURSE interfaces with MASCOT and records, amongst other things, –Time- Transaction type –Location- APACS number –Terminal- Previous value –Transaction value - Transaction result BFBC accounts staff deal manually with all transactions via a holding account

e+e+ Reports On-line reports available detailing –Cardholder statement –Daily totals of debits and credits –List of each daily transaction –List of all balances including total of all balances representing the amount of funds held by the Council which have not been used by the cardholder Library staff can get daily and weekly reported including all branch PC’s

e+e+ e-Purse Usage No obvious pattern of usage Average transaction value is £1.70 Average credit transaction is £10.55 Currently only 5% of cardholders are regular users of e-purse. Usage split 55% men 45% women Main use in largest leisure centre

e+e+ Feedback People who use the e-purse find it useful Useful tool for teaching youngsters to budget Usage increased once leisure was included Front line staff not good at encouraging use of e-purse Target is to promote and increase use of the system

e+e+ The End Any Questions ?