April 21, 2004
Welcome to the April edition of ACTion News. This complimentary service is provided by ACT Canada; "building an informed marketplace". It is also available in the Resource Centre of our web site. Please feel free to forward this to your colleagues.

If you would prefer to receive this newsletter in plain text please email your request to andrea(AT)actcda.com.

This newsletter has been sponsored by ACT Canada's 2004 Partner:

A Coinamatic Company

IN THIS ISSUE:

1. Editorial Comment
2. ACI Worldwide Helping To Build New Rwandan Card Payments Network
3. New Smart Card System For Medicaid
4. Keycorp Scores Big Win In Norwegian National E-Commerce Project
5. Retail Logic Smashes £100bn Transactions Barrier
6. Senegal, Africa, To Launch Postal Banking Project Using LaserCardâ Optical Memory Cards
7. Credit Union Central Of Canada & Covarity Sign 5 Year National Service Agreement For Risk Management Solution
8. MasterCard Unveils Online Authentication Service
9. U.S. Department Of Defense Test Biometrics On Contact & Contactless Military Ids
10. Additional Stories Available In Members Only Section

ACT CANADA WOULD LIKE TO THANK OUR NEW & RENEWING MEMBERS:

GENERAL:
CIBC ~ member since 2003

UPCOMING ACT CANADA EVENTS:
Canadian Smart Card Summit & Golf Tournament: June 2nd, Diamondback Golf Club, Richmond Hill
Cardware 2004: September 23 & 24, OBA Conference Centre

Drop by our booth at CTST in Washington next week (booth 1133)
1. EDITORIAL
Source: Catherine Johnston, President & CEO, ACT Canada (04/21)
Innovation. Where would we be without it and where will it take us.

Technology rarely drives innovation, but rather supports it and while necessity may be the mother of invention, things that are necessary don't always drive our passion and conviction. Necessity pushes us to build solutions, but visionaries who see what might be, pull us along through innovation.

Look at the vision that brought Interac debit to Canadians, put payment mechanisms into gas pumps and brought government service kiosks to shopping malls. These and other innovations provide convenience to Canadians and in turn, they reward the innovators through their use of these. Some of those rewards have been very profitable.

Who will be the new innovators? Who will be the first to turn my cell phone, pc or pda into a personal banking machine by giving me electronic money? Who will let me feel more confident about my security and privacy by taking my personal information of the face of the cards I carry in my wallet? Who will make it safe and convenient for me to get through the office door and sign on to the network with one card?

We are beginning to see innovators and leaders in this market. Coinamatic has made it convenient for people to do laundry without having to worry about coins. They serve over 2.5 million Canadians every week. Smart card technology helps support this convenience. Millions of transit users in the Toronto area will benefit from a new fare card that will make it far more convenient when they cross transit authority boundaries. Laser cards, RFID tags and smart cards; both contact and contactless, will be used in innovative ways to please consumers and benefit issuers.

Have you seen an innovative use of advanced card technology? ACT Canada is looking for applications that are on the cutting edge. Let us know and next month I'll tell you how we are going to use the information to help this market.

GET INVOLVED

Innovators are also making decisions about infrastructure. On June 2nd, ACT Canada and Philip Andreae and Associates are hosting the 1st Canadian Smart Card Summit.
This summit will bring together leaders from Government, Banking, Industry & Retailers to share thoughts and ideas related to infrastructure. It's time to bring these key stakeholders together to talk and to create an ongoing forum for dialogue.

We are inviting executives who are responsible within their organization for setting policy and/or defining the framework for services that will employ smart card technology. They will represent Federal and Provincial Government, Industry, Retail, Health, Transit and Finance. Their task will be to work in integrated groups throughout the day to discuss the needs of their sector and/or companies, as well as talking about ways to minimize costs and maximize opportunities. These sessions will be combined with presentations by speakers with diverse opinions, background and card experiences. We want to stimulate the market by bringing these executives together and providing an ongoing forum for their communications. If you would like to participate, please visit our web site www.actcda.com for more information.


If you are interested in serving on a Business Case workgroup, please contact us after May 1st for more information.

Mark your calendar for September 23rd and 24th and join us for Cardware 04 as we look at applications that benefit municipalities, hotels, hospitals, retailers, universities and other organizations that serve the public.

Until next month, let me leave you with a quote from Michael Porter, "Innovation is the central issue in economic prosperity."
2. ACI WORLDWIDE HELPING TO BUILD NEW RWANDAN CARD PAYMENTS NETWORK
Source: ICMA Daily News (03/31)
ACI Worldwide announced that SIMTEL, an organisation set up by the Rwandan government to modernise the national payments network, has chosen ACI's BASE24-es(TM) as the foundation for The Republic of Rwanda's new national inter-bank card payments network. SIMTEL is also implementing the ACI Card Management System(TM) for the management of card accounts and personalisation. ACI software will provide a flexible framework for card transactions and promote the use of cards to Rwanda's unbanked population.

Rwanda's new BASE24-es infrastructure, integrated with the ACI Card Management System, will initially support the issue of Visa Smart Debit and Credit (VSDC) cards. A further phase will enable SIMTEL to issue and manage pre-authorised debit cards, compliant with Visa Horizon and VSDC standards. Pre-authorised debit(1) will allow SIMTEL to offer card services to people without an established credit history where online authorisation is not always possible.

ACI Worldwide is a member of ACT Canada. Fro more information please visit their web site at http://www.aciworldwide.com.
3. NEW SMART CARD SYSTEM FOR MEDICAID
Source: KXAN.com (04/05)
Medicaid fraud is a $75 million a year problem in Texas. What's happening at a local hospital may help curb the problem and save your tax dollars.

Medicaid fraud is often difficult to prove. Just between August and March of this year, the attorney general's office says there have been $22 million in overpayments.

Thirty thousand Medicaid patients in the Austin area don't have to worry about carrying around a piece of paper that says they are covered by Medicaid.

"Because it is an ER, people aren't usually expecting to come here. So they're not sitting at home with their form ready to just come straight to the ER," Frank Arguello with Brackenridge ER Admissions said.

That's where the smart card comes in. It verifies who you are through your assigned Medicaid number and your fingerprint. That's captured on the card the first time you use it.

"The card indicates that this is who I say I am, then this card indicates they're eligible for the services they asked for under Medicaid," Sister Helen Brewer with the Seton HealthCare Network said.

That could save Texas taxpayers literally hundreds of millions of dollars when it comes to paying for healthcare services that were either never performed, mistakenly duplicated or fraudulently sought.

In the Travis County, there are roughly 150 sites that are part of the smart card pilot program. That includes the emergency rooms at Brackenridge and Children's Hospital.

It will likely be expanded if it proves to eliminate waste and fraud within the healthcare system.
4. KEYCORP SCORES BIG WIN IN NORWEGIAN NATIONAL E-COMMERCE PROJECT
Source: Keycorp (03/25)
Keycorp announced that the Keycorp MULTOS smartcard platform had been selected for a major Norwegian national e-commerce project. The Norwegian State Lottery, Norsk Tipping, will issue 2.1 million multi-application smartcards to all of its registered users.

These smartcards will allow Norwegians to purchase lottery tickets and bet on sporting events through the Norsk Tipping network of agents or over the Internet. In addition, the cards will enable secure access to a number of online public services, as well as allowing secure identification and payment to other e-commerce providers.

Buypass has ordered 2.1 million Keycorp MULTOS modules loaded with Keycorp's public key infrastructure (PKI), an electronic ID application that authenticates users.

Currently about half the Norwegian population have Norsk Tipping gaming cards based on the traditional magnetic stripe technology but the new highly secure MULTOS smartcards will allow players a wider range of options.

Buypass has already implemented a scheme for Norsk Tipping using smartcards for on-line gaming and services. Because of its success, Norsk Tipping is now migrating all of its customers to the new MULTOS smartcards.

In addition to use at Norsk Tipping agents throughout Norway, the card can also be used by players from a PC using a card reader and the necessary software. This allows them to authenticate themselves to the Norsk Tipping website, buy lottery tickets, place bets and collect their winnings.

Keycorp is a member of ACT Canada. For more information please visit their web site at http://www.keycorp.net.
5. RETAIL LOGIC SMASHES £100bn TRANSACTIONS BARRIER
Source: Retail Logic (04/02)
Retail Logic reached a major business landmark - new statistics reveal that the company's software handled more than £100 billion worth of UK card transactions in the last 12 months.

Chairman Gareth Wokes, "Our software and services are now in use in more than 1,000 organisations with new household names coming on board each month. This represents well in excess of 250,000 points of sale, making us the clear leader in our field."

Retail Logic has expanded its geographic reach through the signing of a number of strategic partnerships with market-leading companies such as Wincor Nixdorf, which has chosen Retail Logic as software partner for EMV migration worldwide. As a result, projects are already in place with leading European retailers, vindicating the company's strategy of growth through partnership.

"It's great to be able to announce that we've been trusted to upgrade more than 100,000 points of sale to Chip & PIN," adds Retail Logic's Managing Director Tim Stratton. "Chip & PIN now looks set to provide us with a steady revenue stream for at least the next two years. Due to the frustrating lack of stability in Chip & PIN accreditation requirements, it is now clear that a large number of mid-tier retailers will fail to meet the January 2005 migration deadline. Many of them are waiting until their next PoS hardware refresh and we will be introducing new offerings specifically for this area of the market."

Retail Logic is a member of ACT Canada. For more information please visit their web site at http://www.retail-logic.com.
6. SENEGAL, AFRICA, TO LAUNCH POSTAL BANKING PROJECT USING LASERCARDâ OPTICAL MEMORY CARDS
Source: LaserCard (04/06)
LaserCard Systems Corporation announced a purchase order valued at $140,000 for LaserCardâ products for a secure banking project under the auspices of Societe Nationale La Poste, the national Post Office of Senegal, Africa. The order includes LaserCardâ optical memory cards, and secure card encoders and readers, to facilitate consumer banking transactions at post office branches.

The cards and equipment called for by the new purchase order will be delivered by mid-April, 2004. It is anticipated that the project will commence in Dakar, the capital city of Senegal, by early May.

A data capture and personalization system has been supplied for this project to enable the enrollment of cardholders, whose facial image and fingerprint templates will be stored on the card's optical memory for ID verification during each banking transaction at the post office branches

LaserCard is a member of ACT Canada. For more information please visit their web site at http://www.lasercard.com.
CTST 2004 - APRIL 27 - 29, WASHINGTON, DC

For 14 years the CardTech/SecurTech name has been synonymous with progressive content and technology relating to the advanced card, biometric and security technology industries.


Wired prognosticators fed the market's unbridled optimism, until they were driven away by bear-marketers. The debate rages. Meanwhile, in spite of a lingering technology recession, advanced card and biometric technologies have quietly and insistently entered our lives, speeding our transactions, protecting our identities, securing our perimeters and giving marketers a new tool in the fight for consumer loyalty.

Global demand for smart cards is projected to grow at a healthy rate of eleven percent yearly through 2006*. CTST 2004 will survey this "promise fulfilled" of real-world applications in several important sectors, including retail, financial services, government and security.

For more information please visit: http://www.ctst.com/conferences/CTST04/conference.html
7. CREDIT UNION CENTRAL OF CANADA & COVARITY SIGN 5 YEAR NATIONAL SERVICE AGREEMENT FOR RISK MANAGEMENT SOLUTION
Source: Canadian Newswire (04/12)
Credit Union Central of Canada (Canadian Central) and Covarity Inc. announced that they have finalized a five year agreement for credit risk management services. The agreement will provide Canada's credit unions access to Covarity's solution for automating financial statement gathering, credit risk analysis, and financial reporting for small and medium sized (SME) enterprise credit products.

Covarity is a real-time loan monitoring, review and management product designed to assist credit unions in their administration of commercial accounts. Credit unions will now have access to a service that automates and standardizes credit risk management practices associated with portfolio management.

Credit Union Central of Canada is a member of ACT Canada. For more information about the above listed companies, please visit their web site at http://www.cucentral.ca & http://www.covarity.com.
8. MASTERCARD UNVEILS ONLINE AUTHENTICATION SERVICE
Source: ICMA Daily News (04/07)
MasterCard has unveiled an online authentication service in Latin America designed to make users feel more secure when shopping over the web.

The service, called SecureCode, can be used for both debit and credit transactions, and will launch commercially in Brazil "within a few months," and in the rest of Latin America in the second half of the year, MasterCard Brazil chief executive Marcelo Leite told BNamericas.

Instead of having to type the entire credit card number when making a purchase online, customers will be able to use only the last six digits, making it impossible for criminals to copy the number. Additionally, in order for purchases to be made effective the customer will have to provide their bank account number and online password.

For those customers using smart, banks will begin selling a US$10 device to use at home to authenticate credit cards when making online purchases.

In Brazil the offline retail segment was stagnant in 2003, while the online segment grew 40%, according to Leite. The credit card industry in general has a huge interest in migrating commerce offline to online.

The retail segment began asking MasterCard for increased online security two years ago. Its interest in enhancing online payment security is also to move more commerce online, to then save on operational costs, he added.

MasterCard Canada is a member of ACT Canada. For more information please visit their web site at http://www.mastercard.com.
9. U.S. DEPARTMENT OF DEFENSE TEST BIOMETRICS ON CONTACT & CONTACTLESS MILITARY IDS
Source: SecureIDNews Monthly Edition (04/07)
After three Common Access Card (CAC)-biometric technology demonstration (TD) projects, the Department of Defense (DoD) is considering moving into phase 2 of a program that could lead to four-million+ biometric enabled DoD CACs.

But the timeframe is still uncertain. Phase 2, for which vendor support has not yet even been requested, is still on the drawing boards. And once it has begun, it will take more than year to complete, according to Min Chong, Senior Project Manager on the CAC biometrics effort for the DoD Biometrics Management Office (BMO).

There are still key questions to be answered: Will the biometrics be used on the contact or contactless chip? Will the biometrics be stored and matched on or off the card? One thing for certain is that the next generation CAC will include a 64K contact chip versus the 32K chip on current cards, said Mr. Chong. This move will create additional space for the inclusion of biometric templates on the card.

"The DoD CAC-Biometrics Working Group (BWG) was tasked to explore the inclusion of biometrics technology on the CAC and provide a recommendation to the DOD Smart Card Senior Coordinating Group on how biometrics should be utilized with the next generation CAC card," added Mr. Chong. The next generation CAC will have a 64K chip but the incorporation of the contactless capability will be determined at a later date.

The reason is simple. "When you add more functionality, the card becomes more expensive," said Mr. Chong. "The key stakeholders will want to know what the requirements are and what kind of return they can expect on their investment."

The three TDs were performed during the past two years. The first TD explored using biometrics to open the CAC in lieu of, or as an alternative to a PIN. The second TD examined using biometrics stored on a CAC for logical and physical access. The third looked at using the contactless technology with biometrics, explained Mr. Chong.

Here is a more detailed breakdown of each project, as provided by Mr. Chong:

CAC-A
The first project, referred to as CAC-A, focused on the development of four-scenario proof-of-concept designs to accommodate three different types of DoD users. Each design used biometrics in addition to, or as an alternative to, but not as a replacement for the PIN. Phase I consisted of two distinct parts. Part 1 of Phase I solicited contractor teams to develop biometric technology solutions to satisfy the requirements of four demonstration scenarios:

Scenario 1: Store biometric template on the server and perform match operations on the server. This is designed for the desktop PC.

Scenario 2: Store biometric template on the workstation and perform match operations on the workstation. This scenario is designed to meet the needs of the mobile DoD user.

Scenario 3: Store biometric template on the CAC and perform the match operation on the server. This is designed for a DoD user who needs to securely transport his or her biometric to multiple sites and use it in both physical and logical network systems.

Scenario 4: Store a biometric template on the CAC and perform the match operation on the CAC. This is designed to meet the needs of both users identified in Scenarios 1 and 2 but never require the passing of biometric information outside of the CAC or middleware.

Part 2 of Phase I was an effort to develop an applet that supports a generic/non-proprietary PIN/key (buffer) solution for the CAC. The Defense Manpower Data Center (DMDC)-West was responsible for Part 2 of Phase I and is currently developing a new Access Control Applet (ACA) with a biometric plug-in capability.

CAC-B
The second demonstration project, called CAC-B, was a continuation of CAC-A Scenario 3 in which the biometrics template was stored on the CAC and the match operation was performed on the server. This effort used the CAC as a transport device for a biometric template. The purpose of the CAC-B technology demonstration was to demonstrate the use of a Biometric Attribute Certificate on the CAC and test its functionality in both physical and logical access environments. Also, the CAC-B utilized a digitally signed biometric template along with other information that allowed revocation and assurance provided by the X.509 standards and format.

CAC-C
CAC-C, the third demonstration project, focused on the use of biometrics with contactless technology. The goal of CAC-C was to provide the DoD community an open and interoperable contactless physical security solution that uses biometrics as an authentication mechanism for a physical access system, a portable physical access system, and a physical access system utilizing a turnstile. CAC-C demonstrated five scenarios with each scenario employing both Mifare and DESFire contactless technologies.

Scenario 1A:
Store biometric template at reader, match at reader.

Scenario 1B Stationary:
Standalone biometric reader, match at reader.

Scenario 1B Mobile:
Mobile biometric reader, match at reader.

Scenario 2:
Store template on contactless chip, match at reader.

Scenario 3:
Store template on control panel, match at control panel.

Phase II yet to begin

When the project moves into the second phase, said Mr. Chong, CAC-A and CAC-B Phase II efforts will be merged into one effort with two distinct parts.

Part 1:
Concept Refinement will focus on the two distinct possible CAC-Biometric capabilities, the Match-On-Card vs. Match-Off-Card. "This," said Mr. Chong, "requires further analysis and studies to determine if the inclusion of biometric technology on the CAC provides a secure, accurate, convenient, and cost effective authentication mechanism for the DoD."

Part 2, he added," will build on CAC-Biometric Phase I results and lessons learned to develop a prototype capability that reflects the optimized results to attain a potential CAC-Biometric solution for DoD. The BWG will provide an assessment of each of its recommendations in terms of availability of biometric standards."

In essence, "we first wanted to prove that we could use biometrics with the CAC," said Mr. Chong. " Phase 2, not initiated yet, will determine how we would incorporate the biometrics technology with the next generation CAC."

Undecided yet, he added, is which biometric will be used. All types of biometrics-facial, retina scans, but "primarily fingerprints"-were tested in the demonstration projects.

Concludes Mr. Chong, "based on the findings from Part 1, we would build a prototype for Part 2, simulating what the real system would look like-the card specs, the databases, everything. This entire process would take another year."
10. ADDITIONAL STORIES AVAILABLE IN ACT CANADA MEMBERS ONLY SECTION
These additional stories will now be available to ACT Canada members via the Members Only section of our web site. Click on the link below to access this section. If you are a member of ACT Canada but do not have your login details please contact me - andrea(AT)actcda.com.
http://www.actcda.com/members-only/news.htm

GO Transit Drives Smart Card Plan
Multi-Application E-Government & National ID Card Programs To Provide Biometric Security To Kyrgyzstan
$1.7 Million Contract Awarded To Evaluate Biometric Smart Card Pilot For Texas Health & Human Services Commission
Malaysia's National 'MyKad' ID Card Succeeding Through Service To Citizens
Self-Funded PKI - Land Management Makes Business Case For Smart Cards
ACT Canada is an international non-profit association for the advancement of card technologies. We work on behalf of our members to promote the awareness, understanding and use of all advanced card technologies; including optical, smart, capacitive and emerging technologies. If you would like to learn more about ACT Canada membership please visit http://www.actcda.com or contact our office at (905) 426-6360.
Please forward any comments, suggestions, questions or articles to andrea(AT)actcda.com. If you would like to be removed from our newsletter distribution list please reply to this email with the word "REMOVE" in the subject field. Please note that articles contained in this newsletter have been edited for length, and are for information purposes only.
Andrea McMullen
AVP
ACT Canada
tel: 905 426-6360 ext. 24
fax: 905 619-3275
email: andrea(AT)actcda.com
web: www.actcda.com
mail: 85 Mullen Drive, Ajax, ON, L1T 2B3