Standards

national smartcard project logo

Routemap WP3-10v2.0

Tuesday, 4 May 2004

Smart Card Routemap Overview

Word WP3-10 Routemap Overview v2.0 Release (819.00kb)

This overview report is mainly based upon a piece of work commissioned from Consult Hyperion to map out and draw inferences from technical, political, social, standards and business drivers and inhibitors over the medium to long term and to provide guidance to Local Authorities making investment decisions in an uncertain world.

The underlying Consult Hyperion report has been exposed to extensive critical review, has stimulated considerable discussion, and was taken as input to this overview.  It is being published by the project as a detailed technical paper.

Both documents outline drivers, barriers, trends and make predictions.  This work represents a snapshot of current thinking that needs to be maintained over time if it is to continue to have value.   The underlying report also contains introductory material that will be of great interest to newcomers to smart cards.

This overview concentrates on the general guidance and over thirty recommendations arising from this work.  It is true to say that there are no "right" answers to a number of issues that this work has raised but where there have been comments and observations, this paper sets out to raise the issues that need to be considered and to offer general guidance.  

Accessibilty WP3-04v3.0

Tuesday, 4 May 2004

Accessibility & Social Inclusion

Word WP3-04 Accessibility V3.0 Release (655.50kb)

Consumers want user friendly systems which have the appropriate level of security, but are simple to use.  Local authorities want to optimise their service level, and to maximise their market penetration.  If local authorities do not understand the needs of their consumers, they are likely to find consumers reluctant to use smart card based systems.

Cardholder identification should involve the consent of the user who may wish to withdraw their consent at a later date.  Authentication provides the user with a secure way to prove their identity during a transaction, but does not necessarily mean that they are authorised to access a specific service. 

The Disability Discrimination Act requires local authorities to give consideration to needs of people with disabilities but there is a wider agenda of people with special needs.  This includes older people, children, people whose primary language is not English, as well as people with disabilities.  However the introduction of smart card systems offers exciting possibilities for making life easier for all these groups, and those who are presently socially excluded, if their needs are considered before new systems are introduced. 

The take-up of smart card based services will be affected by the users’ perceptions of:

  • the confidentiality of any data on the card or in a related computer system
  • ease of use
  • confidence that there is a simple system for handling lost or stolen cards

Applicable Standards WP3-03v4.0

Tuesday, 4 May 2004

Definition of standards that apply to Local Authority smart cards used in different applications.


Word WP3-03 - Applicable Standards Paper - v4.0 release (829.00kb)

Technical standards and operating rules are necessary to allow local authorities to purchase cost-effectively and with confidence that they will not be locked in to a restricted supply situation or implement systems that will become obsolete.   Common sets of standards and rules are important to define and enable interoperability between local authority systems across the UK where such interoperability is felt to be desirable Standards are needed as base level building blocks for the development of products and services; they are not detailed specifications.  This is to encourage competition, diversity of design and new initiatives among suppliers.  The balance between generality and detailed specification in standards is one which is difficult to achieve and different standards take different approaches.  Nevertheless, a standard is not normally a specification. 

This paper defines those standards that apply to Local Authority smart cards used in different applications.  The initial selection of applicable standards are taken from the e-GIF specification produced by the Office of the e-Envoy, augmented by additional application level standards not included in e-GIF but seen by LASSeO to be applicable.  Other "standards" may also be included based upon industry generated, de facto standards as well as CEN/ISSS Workshop Agreements.   Unfortunately, at this time all necessary standards are not defined, which only serves to add to the complications in defining baseline standards and accompanying business rules. 

Developing standards in other parts of the world could well have a long term effect upon standards in the UK and Europe and are considered. 

The paper covers microprocessor cards with contact interfaces, with proximity contactless interfaces and cards with both (dual interface cards).   It addresses Baseline standards for cards, Test standards for cards, Relevant consortium and industry de facto standards and specifications, Application level standards and specifications, and, Security standards and specifications.  These standards are listed with commentary and crucially, a table is provided of de facto and de jure standards that should be reviewed before implementing any card scheme. 

It is to be noted that this paper is just a starting point.  Technology does not stand still and standards continue to develop.  Therefore, the recommended list of standards, coupled with the policies and rules to fill the gaps, will require constant revision and such a process needs to be designed and maintained.  It is suggested that LASSeO is the right organisation to carry out this work, feeding the e-GIF with information about newly developed de facto and de jure standards as they appear.

Interoperability within the Local Authority Sector WP3-02v3.0

Tuesday, 4 May 2004

Interoperability within the local authority sector:
Approaches to standards; defining and classifying interoperability; typical applications.

Word WP3-02 - Interoperability within the local authority sector - v3.0 Release (301.50kb)

Interoperability is the cornerstone of “Anywhere, Anytime, for Anyone” card use and this paper introduces the subject and sets out some definitions. It classifies technical and business interoperability from the citizens’ perspective and proposes appropriate levels for typical local authority services.

It introduces the need for technical standards and suggests what is required to sustain them; develops a view of the relationships between technical and business interoperability and attributes values; and considers what this means for a variety of local authority applications.

The value of interoperability level combinations is shown in a matrix and a second table shows a range of services with preferred and minimum values.

In summary:

  • Technical interoperability is needed to ensure that cards can be read anywhere and this means using standards and common specifications;
  • Business interoperability is needed to deliver services across organisational and geographical boundaries and this means developing common business rules, policies and commercial arrangements.
  • Each card scheme needs a Card Community to develop its own character, ethics, policies, and rules, but must be interoperable with other schemes to have any practical value for card users.
The paper draws upon other detailed work from the National Smart Card Project (NSCP)

Considerations for Multi Application Multi Sector Smart Cards WP3-01v5.0

Tuesday, 4 May 2004

Guidance for local authorities as they contemplate setting-up card schemes.

Word WP3-01 - Considerations for Multi Application Multi Sector Smart Cards - v5.0 Release (632.50kb)

This paper is intended to provide guidance to local authorities as they contemplate setting-up card schemes. It is intended that this document should be a starting point for new entrants to this area as it sets out the policy management issues that need to be considered for both large and small schemes.   It is also a fundamental tool in the continuing development of policies, rules and standards for public sector use of smart cards.

In this context, Policy Management is primarily about governance of a scheme, including directing the operation of a scheme. The paper sets down and describes a series of applicable policies and for each one, indicates where specific rules are required or where flexibility is allowed which will enable the scheme operator to apply its own rules

It sets out the key items requiring attention and indicates whether rules should be centrally or locally defined and controlled. The purpose of this is to identify the relationship between policy, rules and standards, required to support a degree of interoperability within and between Local Authority Smart card schemes without unnecessarily restricting freedom of choice at the local scheme level.

The approach has been validated against two schemes and is ready for use for new schemes where this thinking should bring significant benefits to would-be implementers.  It has great value even if only used as a check list of issues that need to be addressed before getting a scheme off the ground.