Secure Multi-Application Card Management The GlobalPlatform Approach Toronto Business Seminar August 2002 Steve Brown Head of Business Development BT Ignite, eBusiness Chairman GlobalPlatform, Board of Directors Steve Brown Head of Business Development BT Ignite, eBusiness Chairman GlobalPlatform, Board of Directors

Secure Multi-Application Card Management Define GlobalPlatform Committees Agenda Mission Vision and Objectives Strategic Plan Summary

What is GlobalPlatform? An organization that: Creates foundation for future growth Defines requirements and technology standards for smart cards Promotes smart card usage and adoption

Define GlobalPlatform Mission Vision and Objectives Strategic Plan Summary Secure Multi-application Card Management Committees Agenda

Mission Establish an open smart card infrastructure that enables Issuers from many industries to deploy and manage multiple applications through a variety of devices for their customers.

Identity Loyalty Payment Access Card Acceptance DeviceMobile PhoneSet Top BoxATMPCPDA Application ServersCard Management Systems Personalization SystemsTerminal Management Systems Key Management Systems Compatibility and interoperability among: Applications Cards Devices Systems GlobalPlatform Vision Transit

Open standards Meet needs Cross-industry interoperability Broad adoption Relevant Objectives Meet needs of Issuers from various industries Define and promote cross-industry interoperability Ensure broad adoption of specifications Promote open standards and infrastructure Remain relevant by improving technologies

Secure Multi-application Card Management Agenda Strategic Plan Continued Focus Committees Mission Vision and Objectives Define GlobalPlatform

GlobalPlatform strategy for is focused on achieving greater industry diversity through its Member base. Our Direction Telecom Government Security / ID Retail Transport Healthcare Sector Diversity Contactless Mobile PDA Emerging technologies New Technology Mediums Untapped opportunities for smart cards Geographic & Regional Representation Infrastructure Providers Application Providers Service Providers Vendors New Industry Participants Financial Services GLOBALPLATFORM CORE US Europe Australia Asia Contact Cards Devices Systems Vendors Issuers

ETSI – Partnership Agreement STIP – Memorandum of Understanding JCF – Close cooperation SCA – Cooperation and support NICCS – joint working group established, drafting MOU Strategic Partnerships

Agenda Summary Secure Multi-application card management Strategic Plan Mission Vision and Objectives Committees Define GlobalPlatform

GlobalPlatform Organisation Full Member (all committees & Board) (single vote) Board of Directors Single vote per Director Elected Directors – Up to 11 Full Members Chairman of the Board Vice Chairman Secretary / Treasurer Technical Director Strategic Director(s) Membership Secretariat Professional Services Public Entity Member (no voting privileges) Observer Member (no voting privileges) Participating Member (single committee only) (Committee voting only) PlanningUnitMarketingCentre BusinessCardCommitteeDeviceCommittee Systems Committee Technical Committees

Opportunity Develop a reasoned business review and evolve an action plan based on the strategy as set out by the Board in Address the need to balance strong business justification with advance technology solutions. Reviewing technology initiatives in relation to the strategic plan, and ensure that the definition of requirements outlined by GlobalPlatform continues to serve the needs of its Members and that the organisation’s focus stays relevant to the needs of the smart card market. Planning Unit

Membership & Company Growth The Marketing Centre concentrates on the global image and visibility of GlobalPlatform’s marketing and communication, promotion of the existing GlobalPlatform specifications and the benefits of membership to existing and potential Members, in a bid to raise organisational awareness and expand recruitment across various industries and geographic markets. Marketing Centre

Areas of Technical Focus GlobalPlatform delivers the complete set of smart card specifications for an end to end smart card technology architecture. CARDS SYSTEMS DEVICES Systems Specifications standardize back-end systems: personalization, security, key management, application loading. Card Specifications standardize card and application lifecycle management. Card Specification v2.1 Card Compliance Program and Kit Smart Card Management Systems Requirements Device Framework v2.0 Device Specifications enable the acceptance of cards through multiple devices.

Card Committee Objectives Streamline and standardize commands for card and application lifecycle management Enable freedom of technology choice Support multiple applications from multiple providers in a safe, controlled environment Allow different business and relationships models between Issuer and application providers, from Issuer-centric to provider- centric models Enforce ultimate control by the Issuer of the card and its contents Enable dynamic and automatic distribution of new services pre and post issuance Facilitate portability of applications across smart cards

Card Specification Freedom of Technology Choice Identity Loyalty Payment AccessTransit Choice of Applications CARD MANAGER & SECURITY DOMAINS GLOBALPLATFORM API Java Card TM Virtual Machine and API Java Card TM Virtual Machine and API Microsoft ® Windows ® for Smart Cards Virtual Machine and API Microsoft ® Windows ® for Smart Cards Virtual Machine and API Other Proprietary OS Choice of Runtime Environment Choice of Operating System Choice of Chip and Card Platform Microsoft Windows for Smart Cards OS OR ISO 7816 Compliant and EMV Compliant

Systems Committees Objectives Standardize back-end systems infrastructure for smart card management Identify back-end systems as well as their roles and responsibilities Standardize interfaces between logical entities in card lifecycle management infrastructure Standardize processes throughout card and application lifecycle management Support a distributed implementation model that allows different entities to share information

Device Committees Objectives Enable and support the acceptance of multi-application smart cards Facilitate the rapid development and deployment of acceptance device applications Enable coordinated development between manufacturers of card and device components of smart card applications Enable development of portable device applications

Agenda Summary Secure Multi-application card management Strategic Plan Mission Vision and Objectives Define GlobalPlatform Committees

Value of the Multi-Application Card Relationship Optimization Tool: Delivering the next generation of customer relationship management and customer self- service: leading the move from Customer Management to Customer Empowerment GlobalPlatform = Interoperability Customer Empowerment Tool: Granting freedom of choice and comparison- through a dynamic portfolio of personally relevant, evolving services GlobalPlatform = Scalability Cross-Industry Applicability: Meeting the diverse needs of Issuers across all sectors-private and public-to deliver customer, constituent and employee based services. GlobalPlatform = Flexibility Global Utilization: Insuring usage of services and identity, anytime, anywhere through multiple channels and touch points GlobalPlatform = Portability

Examples of Multiple Applications Loyalty Services: E-Coupons, Rewards, Delivery of Soft and Hard Benefits, High Barrier of Entry for Competition GlobalPlatform = Delivery Across Multiple Channels Credit & Debit Services: Cash Access, Variable Credit, Revolving Credit GlobalPlatform = Security Across Multiple Platforms Identity Service Tool Delivering the next generation of authentication for potential elimination of chargebacks, lowering of interchange rates, fraud reduction, physical access and logical access to distributed applications GlobalPlatform= Broadening Warranty Across Networks

The Multi-Application Model GlobalPlatform’s Role Leading the migration from restrictive proprietary environments to an open, interoperable smart card infrastructure Defining and developing an intrinsic end to end, Best of Breed architecture Delivering a proven, stable solution in an emerging market

GlobalPlatform Implementation U.S. Department of Defense Common Access Card (CAC) U.S. Department of Defense Common Access Card (CAC) Deployed in ,000 cards issued by Q from100 out of 900 issuance sites Plans to issue 4 million cards by 2002 Logical Access: Network security and secure remote access to personal data PKI/three digital certificates: Network ID authentication Digital signatures Encryption of electronic documents Identification: Personnel identification-photo and credentials Physical Access: Buildings and facilities Future Possibilities: Biometric identification Travel Defense System (streamlining of travel and expense processing) via authentication and auto form fill Armed service applications CAC Applications

Smart Card Access Project CardSystemDevice Based on Card Specification v2.0.1 Based on Terminal Framework v 1.5 Based on SCMS Functional Requirements v 3.3 Multi-application Smart Card Secure Access to Member Website Vote signage capability Personalization over the internet PIN unblock over the internet Post issuance download of applets Access to All Member Meetings Coupon Redemption Badge Print out Personalization Name Organization Address Member Access Gift Redemption

Agenda Summary Secure Multi-application card management Strategic Plan Mission Vision and Objectives Define GlobalPlatform Committees

Benefits of Member Participation Facilitate collaborative commerce and identify new cross-industry partnerships and commercial structures Define and create (customizable) standardized, interoperable smart card solutions to transcend technical barriers of proprietary systems Deliver thought leadership & strategy Government Retail Financial Services Telecom Transportation Healthcare

Summary GlobalPlatform is rapidly becoming the defacto standard for multiple application smart cards –Specifications based on strong business justification –Specifications address multiple points in the value chain –Specifications reflect cross-industry interests Membership in GlobalPlatform is open –Functional areas of focus include cards, devices and systems –Participants come from issuer, vendor, developer and technology organizations –Global participation from North and South America, Europe, Asia and Australia More information is available at: –Web: – –Telephone:

Steve Brown BT Ignite Steve Brown BT Ignite