Modernising Government Conference 29 October 2004 Mike Eastham Head of Technology ITSO Ltd

What is ITSO? ITSO is a membership organisation (hence not a profit distributor) ITSO was created to solve the challenge of implementing multi-player smartcard scenarios, (focused initially on transportation)

ITSO Objectives To facilitate the development of an interoperable smart environment by developing and then operating and managing a specification for an interoperable smart ticketing environment.

Which required Writing and Publishing a Specification (now V2.1) Setting up and managing a security domain Delivering a compliance system (Certification) Providing a Registrar function

Security Domain Development of a Security Management Service Development of a Secure Application Module (The ITSO SAM)

Certification Supplier Registration - To be registered as a provider of ITSO Certified equipment, systems etc. for use within the ITSO Environment - (Free for Members) Purchase Test Tools & Scripts (Optional) Testing & Certification of Equipment to gain an ITSO Compliance Certificate

Registrar Schemes Products Shells Organisations

The ITSO Environment ITSO Shell Retailers Service Operators Security Management ComplianceCertification / TestRegistrar Core Services ITSO Shell OwnersProduct Owners Product Retailers Collection & Forwarding Operators

So How does ITSO work?

ITSO delivers Trust between its licensed members…

…by implementing loss- less security…

…across inherently insecure communications paths…

…and through inherently insecure ‘existing’ systems Transactions are securely passed from one part of the ITSO process to the next – minimising impact on existing systems.

ITSO Product Entities (IPEs) can model just about anything through fixed and variable data…

…and the ITSO directory presents the Smart Products independently & interoperably… …with each owner’s key used to seal…

..onto a range of media types

What is Interoperability? Interoperable between Modes i.e. Rail, Bus, Tram, Ferry etc. Interoperable between Systems or Schemes i.e. London, Scotland, Manchester, Birmingham etc.

The “Martini” Principle Any time Any place Any where Any media (card or other)

Why use ITSO? ITSO is now mandated for all transportation schemes receiving government support. ITSO provides the potential for a national environment within a single security domain facilitating “Martini”.

For the User ITSO can facilitate –Purchase a ticket at any ITSO participating location –Use the “ticket” at any ITSO participating location (Gives True Interoperability)

For the (Service) Operator Implement an ITSO service in the knowledge that: –Service can participate in any ITSO scheme –Media can be used interoperably (with suitable commercial product agreements) –Systems and Equipment are not proprietary –Additional Add-ons may be made with confidence that the new will work with the old.

For the ( Scheme ) Operator Implement an ITSO scheme in the knowledge that: –Media can be used interoperably (with suitable commercial product agreements) –Systems and Equipment are not proprietary –Additional Add-ons may be made with confidence that the new will work with the old.

For the Supplier Suppliers are being encouraged to develop their equipment to become ITSO compliant. Clearly this means an end to “proprietary schemes”. But once development is complete facilitates entry to otherwise “closed” areas of the market.

How Much Will ITSO cost in Scotland? About 0.1% of Annual Turnover once mature (<£200k on £211million t/o) Take up costs around £150k ISAMs around £250k (assumes 5000 purchased

For the Scottish Public Sector ITSO provides the capability to inter-operate both between (inter and intra) schemes and modes of transport with an industry wide standard framework that works for all. This allows for a number of levels within the environment and can facilitate a single ITSO membership for the entire Scottish Public sector.