October 28, 2004
Welcome to the October edition of ACTion News. This complimentary service is provided by ACT Canada; "building an informed marketplace". It is also available in the Resource Centre of our web site. Please feel free to forward this to your colleagues.

If you would prefer to receive this newsletter in plain text please email your request to andrea(AT)actcda.com.

This newsletter has been sponsored by ACT Canada's 2004 Partner:

A Coinamatic Company

IN THIS ISSUE:

1. Invitation To Participate In Smart Card Survey
2. ICMA Announces Results Of Its 6th Annual Card Manufacturing Global Market Survey
3. SCM Microsystems Delivers Smart Card Readers For Belgium's National E-Id Program
4. US Government Selects Axalto To Provide E-Passport Technology
5. Motorola To Launch Trial Of Handsets With MasterCard PayPass Technology
6. Access To Paymentech's Netconnect Now Available For Dial-Based Terminals
7. Consumer Mistakes Continue To Aid Identity Theft According To Nationwide Survey
8. Visa Acquirer Device Validation Test Scripts Available Directly From ICC Solutions
9. NIST Releases First Draft Of Personal Identity Verification Standard
10. Additional Stories Available In Members Only Section


UPCOMING EVENTS:

Visit ACT Canada at booth 3F42 at Cartes, November 2-4, 2004.

ACT Canada Members receive discounts at the following event:

Inside ID: The Identification Solutions Mega Show
November 15 - 17, 2004
Washington, DC, USA
http://www.insideid.com
1. INVITATION TO PARTICIPATE IN SMART CARD SURVEY
Source: ACT Canada + PA&A
In June of 2004 ACT and PA&A sponsored a Smart Card summit designed to bring individuals from Banking, Government, Retail and industry to discuss the various challenges that face Canada as it moves towards a smart card enabled and more importantly secured society. As an outcome of the conference all participants expressed the view that many of the applications they are contemplating must adhere to International standards if they are to provide the benefits smart cards offer. The move of Credit and Debit card payment systems are migrating globally based on the EMV specifications, Passports will adhere to the new ICAO specifications, The airline industry has established standards via IATA. Other sectors are in various stages of debate and such implementations as drivers' licenses and Healthcare cards require international standards is police, car rental, medical professionals are able to secure the true value of an electronic version of these means of identification.

In order to more fully understand the various dimensions of a global migration of various applications to smart cards we would appreciate it if you could allot some of your time to participate in this survey. Your name will not be linked to your answers when the report is published. Analysis will be done by sector and geographic region. This survey should take less than 15 minutes and we thank you for your time and input.

The goal of this second phase of our survey is to expand on the results to a limited Canadian only survey that already identified some key trends and requirements that demand global attention. We intend to publish our summary finding on the http://www.actcda.com and http://www.andreae.com web sites. Those wishing more detailed reports will be offered the opportunity to purchase the complete results

The survey is available at
http://www.surveymonkey.com/s.asp?u=8617687595

Thank you in advance for your input.
2. ICMA ANNOUNCES RESULTS OF ITS 6th ANNUAL CARD MANUFACTURING GLOBAL MARKET SURVEY
Source: ICMA (10/20)
The International Card Manufacturers Association (ICMA) announced the results of its Sixth Annual Card Manufacturing Global Market Survey. The Survey, measuring results for 2003, revealed for the sixth consecutive year that while the North American Region leads the world in the total number of cards manufactured, Europe continues to be the most lucrative market as measured in dollars.

The survey measured numbers of cards manufactured and market volumes. Major findings revealed that globally, in 2003, approximately 11.7 billion cards were manufactured, a 9.3 percent growth rate. The global card marketing measure in U.S. dollars increased 27.1 percent to $6.1 billion, resulting from the impact of microprocessor chip card growth.

The regions surveyed were North America, Europe, Asia Pacific, Latin America and MEA (Middle East/Africa). The products surveyed were plastic cards of all thicknesses including traditional cards-with and without magnetic stripe, and chip cards that include contact, contactless and combi-cards for diverse applications such as financial hologram cards, ID cards, telecom cards, gift cards and more.

The Survey revealed the following growth statistics:
~ 9.3% global unit market growth to 11.7 billion cards
~ 27.1% global dollar market increase to $6.1 billion. . .impacted by microprocessor chip card growth.
~ North America #1 in units slipping to #4 in dollars…lagging in chip card growth.
~ Europe #1 in dollars and #2 in units…driven by microprocessor chip cards in the financial and other secure (GSM) sectors.
~ Asia/Pacific card market #2 in dollars and #3 in units…driven by China and chip card growth.
~ Latin America now #3 in dollars.

The Survey analyzed card-specific statistics and reported the following:
~ Traditional cards represent 83.8% of the units and 21.3% of the dollars while chip cards represent 16.2% of the units and 78.7% of the dollars on a global basis.
~ Non secure cards represent 42.9% of the global card unit market.
~ Financial hologram cards represent 11.9% of the global card unit market.
~ North American unit card market remains #1 in 2003 with 53.1% share while Europe is #2 with 22.1% and Asia/Pacific #3 with 17.8%.
~ Financial hologram units increased by 9.5% and dollars increased by 46.8% impacted by EMV migration to chip card.
~ ?Other secure cards had significant growth with 7.7% on units and 42.7% on dollars impacted by GSM/telecom and transit chip cards. Memory chip cards (prepaid telephone) have rapidly declined in most markets.
~ Non-secure units are up 10.9% driven by the Loyalty and Gift card sector. The dollar value declined by 10.0% impacted by price pressure.
~ Chip Card units grew 6.3% to 1.9 Billion while dollars grew slightly to $4.8 Billion influenced by GSM/Telecom growth, transit growth, EMV migration, prepaid telephone memory card rapid decline, healthcare growth, overall price pressure

For more information visit http://www.icma.com.

3. SCM MICROSYSTEMS DELIVERS SMART CARD READERS FOR BELGIUM'S NATIONAL E-ID PROGRAM
Source: ICMA Daily News (10/26)
SCM Microsystems, Inc. announced it has delivered smart card readers to international technology group Giesecke & Devrient (G&D) for use in Belgium's National e-ID program.

Belgium is becoming the first European country to standardize the electronic identity card. By the end of 2009, every Belgian citizen will be required to own an electronic ID card. To meet this requirement, close to ten million cards will be issued to the country's citizens over the next three to five years.

G&D specified SCM's Secure Trusted Readers, which will be installed at all Belgium municipalities for use with National e-ID smart cards. Secure Trusted Readers are dedicated to applications requiring high levels of security, such as the security needed for Belgium's e-ID program.

"We chose SCM as our exclusive supplier of smart card readers because their products deliver the high performance needed for the e-ID program," said Jan Van Eenoo, sales director of G&D Belgium. "SCM smart card readers provide highly secure access to sensitive, personal data such as that contained on Belgium's e-ID."

The Secure Trusted Reader is a programmable device that includes a smart card reader, a display and a secure PIN (Personal Identification Number) pad. It features embedded 1024 bit public key cryptographic functions for stronger authentication and a tamper evident design.

The e-ID cards, valid for five years, will contain an embedded microchip storing the holder's personal data, including date of birth, family tree, civil status, current and past addresses and military situation. The chip will also contain a digital certificate that will allow remote access authentication. With the card, users can access e-government applications, attaching an electronic signature to certify the authenticity of data transmitted when needed. These digital signatures will have the same legal value as hand written signatures. In addition, private companies such as banks expect to develop services that will leverage the electronic ID card. Initially the card will not contain biometric data, but this can be included at a later stage if deemed necessary

Giesecke & Devrient and SCM Microsystems are members of ACT Canada. For more information visit http://www.gdai.com & http://www.scmmicro.com.

4. US GOVERNMENT SELECTS AXALTO TO PROVIDE E-PASSPORT TECHNOLOGY
Source: ICMA Daily News (10/15)
The GPO will use this technology to manufacture the US passport booklet provided to US citizens.

Axalto will deliver immediately initial quantities of passport electronic covers, related readers and software for test and qualification in the GPO passport-manufacturing environment. The GPO expects to ramp up production to quantities above 1 million electronic passports in 2005. By 2006, all new passports are expected to have the electronic capability incorporated. The GPO currently produces more than 7 million passports each year.

The electronic passport technology from Axalto includes the company's highly secure operating software with biometric capabilities running in a large capacity contactless microprocessor chip that is embedded in a module that is highly resistant to damage.

This module is integrated in the passport booklet cover. The Axalto electronic passport technology was developed based on the company's proven smart card security technology and designed to provide superior durability and performance over the passport's 10-year life span.

Axalto is a member of ACT Canada. For more information visit http://www.axalto.com.

5. MOTOROLA TO LAUNCH TRIAL OF HANDSETS WITH MASTERCARD PAYPASS TECHNOLOGY
Source: MasterCard (10/12)
Motorola announced that it will conduct a field trial of mobile phones enabled with MasterCard PayPass, a new "contactless" payment option and Near Field Communications (NFC) technology. Consumers will enjoy the benefits of simpler and faster transactions conducted with their mobile phones.

The handsets will incorporate a number of security features to protect financial data and to ensure consumers a secure financial transaction.

The Motorola phones will be equipped with NFC technology, which enables the device to run multiple proximity applications as well as payment. In the future, these may include applications such as contactless ticketing for mass transit or events. In addition, the phone can function as a contactless reader, paving the way for a variety of marketing and promotional applications. Applications can be loaded into the secure area of the phone 'over the air,' offering potential operational savings to card issuing financial institutions, as well as revenue opportunities to wireless network operators.

The Motorola phones enabled with MasterCard PayPass technology are expected to be trialed by the end of this year in a variety of locations in the U.S.

MasterCard Canada is a member of ACT Canada. For more information visit http://www.mastercard.com or http://www.motorola.com.

6. ACCESS TO PAYMENTECH'S NETCONNECT NOW AVAILABLE FOR DIAL-BASED TERMINALS
Source: Precidia Technologies (10/12)
Precidia Technologies announced the Class B certification of its POSLynx retail router for Paymentech's NetConnect, a secure, direct Internet connection to its card authorization center. With the first commercial release of the POSLynx now available, merchants can easily connect dial-based terminals to the Internet over DSL or other broadband networks for faster, more cost-effective payment transaction processing.

Converting up to four point-of-sale terminals to IP using SSL, the POSLynx helps small to mid-size merchants reduce communication costs by eliminating the need for dedicated dial lines. With no changes required to terminal applications, implementation of the POSLynx is quick and painless; merchants are up and running immediately without additional expense or training. Furthermore, this low/no maintenance device features built-in reliability via dial back-up.

Paymentech is a member of ACT Canada. For more information visit http://www.paymentech.com & http://www.precidia.com.

7. CONSUMER MISTAKES CONTINUE TO AID IDENTITY THEFT ACCORDING TO NATIONWIDE SURVEY
Source: EDS (10/27)
Despite millions of cases of identity theft every year, American consumers continue to surrender too much personal information over the phone or Web, according to the 2004 Identity Management Survey. The survey, commissioned by EDS and the International Association of Privacy Professionals (IAPP), and conducted by the Ponemon Institute found consumers are not practicing all security precautions to protect themselves despite repeated warnings of identity theft.

"While consumers have learned not to divulge information such as their Social Security number and debit card number over the phone or on the Web, our survey indicates that they are still naïve and share significant amounts of information from the contents of their wallet -- putting them at greater risk for identity theft and phishing," said Peter Reid, portfolio strategist for EDS Security and Privacy Services.

Key survey findings show that more than 70 percent of consumers will share information, such as their name, address, postal code, phone number, account number or give the answer to a security question to an unsolicited call or email. Other findings in the survey include:
~ A majority of consumers (61 percent) do not want to be forced to change passwords, a common procedure mandated to enhance security;
~ Over half of respondents (57 percent) do not want their accounts locked down after three failed attempts to provide identification verification information;
~ Two-thirds of consumers (66 percent) believe it is worse to endure the inconvenience of being denied access due to a systems glitch than it is to be given access without proving their identity;

Reid, who will release the overall survey results in a white paper, Privacy and Identity Management Survey, during the IAPP Conference on Oct. 29 in New Orleans, said consumers continue to repeat the mistakes that resulted in nearly 10 million identity theft victims in the United States last year as reported by the Federal Trade Commission.

The Identity Management Survey was conducted to evaluate consumer sentiment about sharing personal information, different methods organizations currently use to verify identity and what remedial action consumers expect organizations to take following a security breach.

"These findings are a clear indication that consumers are not willing to spend time with identification verification processes that serve to protect their personal information and their identity," said Reid. "However, the survey results also indicate that consumers want identification methods to be just as secure as they are convenient and that, perhaps, is one of the reasons why consumers are now more open to alternative identification verification methods."

The survey also gauged consumer interest toward innovative methods of identification verification, such as biometrics and a single secure and private identification credential. Results suggest that a majority of consumers are open to alternative methods of identification management solutions:
~ More than 69 percent are open to the idea of using biometrics for identity management. Only 12 percent said no to biometrics, while 19 percent are unsure;
~ 88 percent of respondents who are willing to accept biometric identification methods are in favor of this technology because it is convenient and does not require them to remember passwords;
~ 85 percent chose finger prints and 84 percent chose voice recognition as preferred methods of biometric identification for convenience and speed;
~ More than 75 percent of respondents believe that one secure and private identification credential, issued by a trusted organization, would make it much more convenient to prove their identity to various organizations.

"This survey confirms the fact that, in spite of issues like identity theft, consumers value convenience over privacy, presaging a real need for technologies and techniques that offer superior privacy protection while enhancing the customer experience," said Trevor Hughes, executive director, IAPP. "Clearly, the development and adoption of technologies such as biometrics and identity management solutions are vital to meeting our responsibilities to the consumer."

According to the Identity Management Survey, 77 percent of consumers expect organizations to have strong identification safeguards in place. The top five organizations that consumers expect to have the strongest identification and authentication safeguards are law enforcement (94 percent), credit card companies (94 percent), hospitals and clinics (91 percent), banks (89 percent) and airlines (84 percent).

"Several times a day, many consumers are asked to share their personal information in order to establish a relationship with a company or to purchase a product online," said Dr. Larry Ponemon, chairman and founder of Ponemon Institute. "This is the first study that attempts to understand the concerns consumers have about sharing information and what they expect organizations to do to protect their information. I believe organizations will find the results interesting and valuable as they define their identity management strategies for the future."

While consumers may be divulging important personal information and demand convenient security, they clearly value the protection of their personal information. Survey findings indicate 85 percent of consumers believe their access should be denied if their identity cannot be verified. In addition, 84 percent want to be notified when an organization determines that an unauthorized person has been given access to their information.

"As a leading identity management solutions services provider, EDS has a responsibility to its customers to understand the evolving privacy and identity management consumer demands," said Gail Magnuson, global offering manager, EDS Security and Privacy Services, and co-author of the Privacy and Identity Management Survey white paper. "EDS chose to sponsor this major market survey to assist our clients in the development of identity management solutions that fit the needs of their customers."

The Ponemon Institute administered the large scale, Web-based national study between Sept. 7 and Sept. 30, 2004. The survey was sent to more than 7,300 individuals, 18 years of age and older, with a response rate of 1,197.

EDS is a member of ACT Canada. For more information visit http://www.eds.com; http://www.privacyassociation.org & http://www.ponemon.org.

8. VISA ACQUIRER DEVICE VALIDATION TEST SCRIPTS AVAILABLE DIRECTLY FROM ICC SOLUTIONS
Source: ICC Solutions (10/12)
ICC Solutions Limited announced their participation in the development and issuance of Test Scripts to satisfy the requirements of the Visa Acquirer Device Validation Tool (ADVT) Kit.

The ADVT Test Scripts are designed to be used on terminals to ensure correct terminal configuration, to assist with integration and interoperability testing, and to ensure that Visa's terminal requirements are being met. Visa encourages Acquirers to execute these tests on all terminal types prior to deployment.

ICC Solutions Limited was commissioned to develop the ADVT Test Scripts based on the recently released ADVT Version 3.0. The ADVT Test Scripts are immediately suitable for use with the ICCSimTT / ICCSimDE products, and have been validated by Visa International.

Denny Jensen, senior vice president, Product Platform Implementation, Visa International adds "The availability of Visa's Acquirer Device Validation Toolkit on the ICCSimTT and ICCSimDE platform is a timely contribution to our ongoing efforts to maintain chip interoperability worldwide, particularly as we continue to develop new features and functions to enhance our current chip offerings".

As the migration to chip cards within the Payment Systems industry is now rapidly underway on a global scale, the crucial importance of testing is being widely recognized, in order to ensure a smooth, efficient and painless transition.

ICC Solutions and Visa Canada Association are members of ACT Canada. For more information visit http://www.iccsolutions.com & http://www.visa.ca.

9. NIST RELEASES FIRST DRAFT OF PERSONAL IDENTITY VERIFICATION STANDARD
Source: SecureID News (10/20)
The U.S. National Institute of Standards and Technology (NIST) has announced the preliminary draft of the Federal Information Processing (FIPS) 201 standard. The Federal Personal Identity Verification standard is being developed in response to HSPD-12 and specifies "a framework, architecture, and technical requirements for a comprehensive federal personal identity verification system."

NIST will be accepting comments until October 30th, to view the draft visit http://csrc.nist.gov/piv-project/fips201-support-docs.html

10. ADDITIONAL STORIES AVAILABLE IN ACT CANADA MEMBERS ONLY SECTION
These additional stories will now be available to ACT Canada members via the Members Only section of our web site. Click on the link below to access this section. If you are a member of ACT Canada but do not have your login details please contact me - andrea(AT)actcda.com.
http://www.actcda.com/members-only/news.htm

NEW GOVERNMENT REPORT SHOWS STRONG PROGRESS IN AGENCY SMART CARD PROJECTS
Secure ID News Sept 04 (09/29)

Smart cards are alive and well in Washington, D.C. even though some 28 projects have disappeared in the past 18 months…

MALAYSIA ISSUES DUAL INTERFACE 'MYKAD' ID CARD NATIONWIDE
Source: Contactless News Sept 04 (09/30)

By the end of 2005, all Malaysian citizens over the age of 12 will be carrying a dual interface contact/ contactless smart card as their national ID. With a population of 23 million, the Malaysian program is both one of the world's first national ID card programs and one of the largest issuances of dual interface technology. The multi-purpose MyKad cards incorporate both government and private sector applications onto a single card…

ACT Canada is an international non-profit association for the advancement of card technologies. We work on behalf of our members to promote the awareness, understanding and use of all advanced card technologies; including optical, smart, capacitive and emerging technologies. If you would like to learn more about ACT Canada membership please visit http://www.actcda.com or contact our office at (905) 426-6360.
Please forward any comments, suggestions, questions or articles to andrea(AT)actcda.com. If you would like to be removed from our newsletter distribution list please reply to this email with the word "REMOVE" in the subject field. Please note that articles contained in this newsletter have been edited for length, and are for information purposes only.
Andrea McMullen
AVP
ACT Canada
tel: 905 426-6360 ext. 24
fax: 905 619-3275
email: andrea(AT)actcda.com
web: www.actcda.com
mail: 85 Mullen Drive, Ajax, ON, L1T 2B3