GlobalPlatform has qualified the Collis Compliance Test Suite for GlobalPlatform Open Mobile API, enhancing UL’s portfolio of compliance test suites for mobile device testing. This test suite has achieved qualified status under the GlobalPlatform Compliance Program. The Collis Compliance Test Suite for GlobalPlatform Open Mobile API implements the official test plan developed for the GlobalPlatform Compliance Program. The test suite ensures the compliance of a mobile device that implements the SIMalliance Open Mobile API test specification (version 2.05) for Transport API (version 1.0). This test specification specifies how to test the Transport API part of the Open Mobile API. UL is a GlobalPlatform (GP) qualified laboratory that provides test certification services to confirm a product’s compliance to GP specifications using GP qualified test tools. UL has been qualified under the GlobalPlatform compliance program for approvals testing according to GP configuration specifications.
ULUL is pleased to announce the qualification by GlobalPlatform of two new Collis Compliance Test Suites: GlobalPlatform SE Access Control Card and GlobalPlatform SE Configuration, which further enhances UL’s compliance test suite portfolio. The Collis Compliance Test Suite for GlobalPlatform Secure Element (SE) Configuration implements the official test plan developed for the GlobalPlatform Compliance Program. The test suite ensures the compliance of a Secure Element that implements the GlobalPlatform Card Secure Element Configuration specification which is based on GlobalPlatform Card version 2.2.1 technology. The Collis Compliance Test Suite for GlobalPlatform Secure Element (SE) Access Control Card Configuration implements the official test plan developed for the GlobalPlatform Compliance Program. The test suite ensures the compliance of an ARA-M applet on a Secure Element that implements the GlobalPlatform Access Control specification.
Clear2Pay today announces that EMVCo, the EMV standards body has qualified the Clear2Pay EMV Contactless Card and Device Type Approval Level 1 Test Suites. The update of the EMV Contactless Card Test Suite is particularly interesting since it now incorporates EMVCo enhanced scenarios for card emulation in mobile devices testing. Dedicated test scenarios are fundamental because a mobile device that emulates a contactless payment card typically has a more dynamic behavior than a “traditional” chip-based contactless payment card. The enhanced test scenarios simulate ‘real life’ mobile payment behavior (including the UICC) and allow for more extensive testing.
FirstBank, Tennessee’s largest independently owned and operated bank, has licensed Paragon’s ATM configuration management software, ConfigBuilder, to enhance its ATM configuration file development. FirstBank required a solution that would provide more control over its ATM screens and fully test its ATM load files prior to deployment. With ConfigBuilder, FirstBank can customize its ATM screens with…
The NFC Forum approved the Clear2Pay NFC Test Solution. The next generation payment solutions announced its test tool is developed to enable the industry confirm compliance of their products to the NFC Forum standards-based specifications. The Integri branded solution will be used by certification test laboratories for the official validation of digital protocol conformance of NFC products worldwide. The solution is also available for NFC device manufacturers’ debugging and pre-certification needs.
The Korea Electric Testing Institute (KETI) has selected Clear2Pay’s “Integri” test tools
for digital communication testing between Near Field Communication (NFC) devices.
Supplying key testing technologies and certification services for companies, KETI
focuses on helping introduce mpayment infrastructures based on NFC technology.
Clear2Pay delivered three different tools that enable KETI to validate its NFC
devices, including the “Listen Device Test Suite,” the “Poll Device Test Suite,” and
the “Peer-to-Peer Device Test Suite.”
Innova Card’s USIP platform solution has been given EMV Level 1
type approval by T-Systems. T-Systems has given the solution a rating
certifying it to meet the requirements needed to comply with PCI PED
security standards. In doing so, Innova offers debugging and support
customers who seek easy design and are concerned with quickly
receiving the EMV Level 1 Type Approval of their terminals. The company
also offers software development tools, security, and professional
services for PCI
PED and EMV certifications.
Munich-based Giesecke & Devrient has selected Teradyne’s “J750k VLSI Test
System” for design verification and electrical qualification of contacted
smart cards. The small footprint of the “J750k” enables G&D to perform
design verification and qualification test up to 32 sites in parallel in an
engineering laboratory. The “J750k” features IG-XL test software. The basic
configuration starts with 64 pins at 50MHz and can be expanded up to 256
pins at 100MHz.
ASK has rolled out its “HCR” family of handheld readers designed for contactless smart card applications requiring portable reading devices. “HCR” portable readers weigh 10.6 ounces including the battery, and measure approximately 7 by 3-1/4 inches, about the size of a TV remote control. It features a large backlit LCD that displays approximately 20 lines by 26 characters; control LEDs; menu, OK and cancel keys, and an up/down navigation key. The “HCR800” model offers an additional 12-key keyboard. All models feature a rechargeable lithium-ion battery with an operating cycle exceeding 1000 transactions over a period of 8 hours.
Datacard Group introduced an applet
development kit (ADK) for its Aptura Smart Card Operating System today at
Cartes 2001 in Paris. The kit includes all the software and hardware tools
needed to develop and debug Java Card applets intended to run on Aptura,
and is fully compliant with Java Card 2.1.1 and Open Platform 2.0.1′
According to Martin Kearsley, senior vice president and managing director of
Datacard’s software solutions division, the new ADK will allow smart card
developers and integrators to more accurately assess the quality and
performance of their smart card applications before they are released to
“The new Aptura ADK adds to the breadth of our smart card portfolio,” Kearsley
“The Aptura ADK is a more advanced development kit adding an important
capability that smart card developers and integrators will not find in other
development kits currently on the market. It contains unique diagnostic
capabilities, which are essential for a successful smart card program.”
“The Aptura ADK provides developers with greater confidence in the applet
debugging process.” Kearsley said. “It includes development cards that have
same functionality as the Aptura operating system used in production cards, so
applets can be moved from development into production with confidence.”
The Aptura ADK contains four Aptura development smart cards, a smart card
reader, development software and complete user documentation. The software
offers a number of key features, including applet debugging, application
loading and management tools.
“In addition to the Aptura ADK, Datacard offers everything smart card issuers
need for a successful program.” Kearsley said. Offerings include the Aptura
smart card operating systems, server-based smart card personalization
a full range of card personalization systems, multi-application smart card
cycle management systems and a full range of consultative services, including
chip security evaluation and life cycle management.
The Aptura OS for production cards comes pre-installed on a chip ready to drop
into card plastic. Aptura is based on the Hitachi(R) AE45C smart card
microprocessor with 32k bytes EEPROM.
Datacard Group provides financial institutions, corporations, consumer
marketers, governments, schools, healthcare providers, service bureaus and
other enterprises with the software, systems and professional services they
need to build successful card programs. The company’s portfolio includes the
world’s best-selling smart card solutions and card issuance systems, as
a complete line of digital identity systems. Consultative services include a
smart card security laboratory that serves the world’s leading smart card
issuers. DataCard Corporation, doing business as Datacard Group, is privately
held and based in Minnetonka, Minn. Datacard Group serves customers in more
than 200 countries. www.datacard.com
Further to the recent unveiling of its new tiers of membership, the MULTOS
Consortium announced the intention of Schlumberger to become an
“Schlumberger is an important addition to our already impressive list of
member companies. The company is known for innovation in the smart card
industry and will bring a number of initiatives as well as focus to aspects
of our technical and business development,” said John Wood, Chairman of the
Drawing on 20 years experience in pioneering smart card innovations,
Schlumberger is continuing to evolve the new generation of smart cards,
parking terminals, ticketing machines, payphones, banking terminals,
servers, software, applications and systems integration that will play a key
role in the 21st century’s digital age.
” Schlumberger is delighted to join the MULTOS Consortium and help
contribute to the ongoing development of MULTOS operating system
specifications,” said Martin Djunte-Ghomsi, Product Manager Banking Smart
Cards. “Our involvement enables us to position the company as a global
supplier of MULTOS-based solutions, encompassing card manufacturing,
consulting, personalisation and MIP services. Our aim is to deliver high
standard value added services based on smart card technology.”
Notes to Editors
How the Membership Works
Founder membership is most appropriate for companies wishing to develop
their own implementation of the MULTOS specification or who want to
contribute to the governance of the Consortium. Key founder members are
operating systems implementers, silicon vendors, card vendors, major
infrastructure suppliers, etc.
Discover Financial Services
Dai Nippon Printing
Fujitsu Group (includes ICL and Amdahl)
Giesecke & Devrient
Alliance membership is for companies that don’t initially intend to
implement the MULTOS specifications but wish to contribute to their
technical development through technical expertise in specific areas or
markets. Principal participation is through the Technical Advisory Group
and associated working groups. Examples of potential alliance members
include technology systems integrators, application developers, technical
card issuers, card vendors, key management systems companies, etc.
Observer membership companies wish to track the development of the
specifications and the workings of the council but their contribution may be
sporadic or non-technical. Typical observer companies could be governmental
bodies, advisory groups, trade associations, non-technical consultancies,
card issuers and systems integrators. Observer membership is not intended
for companies whose smart card product related revenues exceed $1,000,000
per annum, although the Full Consortium members may vote to waive this
Founder membership includes an implementation license and is currently set
at approx. USD 500,000; Alliance membership is USD50,000 for the first year
and USD35,000 renewal; Observer membership is set at USD7,500.
STIP Consortium Releases STIP v2.0
A Java API bringing interoperability to payment terminal market as well as
e- and m-commerce market
Allows PDA, mobile phone, set-top box- designers to use the expertise of
payment terminals manufacturers to tap into secure transaction expertise
San Francisco, May 15, 2001.
The STIP Consortium announces the release of STIP v2.0, enhancing the
ground-breaking Java API specification released last year.
STIP v2.0 provides for the practical deployment of STIP Technologies on a
wide range of devices that have limited memory and processing power but are
required to support applications that meet the strict security, performance
and cost requirements of traditional electronic payment and emerging
“STIP v2.0 solves one of the main practical problems of application
inter-operability” announces Jean-Paul Billon, Chairman of the STIP
Consortium.” The new XML-based User Interface specification allows
applications to easily adapt to a range of device configurations and
accommodate regional variants; multi-application support enables resources
to be shared securely; and the new cryptographic API simplifies support for
secure payment and application management.”
Devices such as payment terminals, payphones, vending and ticketing machines
and PC connected intelligent smart card readers benefit from the flexibility
of STIP since the hardware independent layer it provides allows applications
to be written for one device and then easily ported to another. This
drastically reduces development and certification costs, speeding deployment
and increasing profitability of new applications .
Secure transaction expertise is a hot topic in the e-commerce and m-commerce
markets. Using STIP technology, providers of PDAs, 2.5G and 3G mobile phones
and set top boxes can benefit from the experience of the consortium members
who’s expertise is in providing secure payment solutions.
“Texas Instruments sees the publication of the STIP API 2.0 as a positive
step toward providing secure wireless applications for 2.5 and 3G devices,
said Loic Hamon, European Strategic Marketing Manager Texas Instrument. “The
security features built in STIP 2.0 not only provide an enhanced framework
for secure transaction, but also control features for future STIP-based
” We strongly support the STIP technology as it creates the huge advantage
of complete interoperability of POS platforms worldwide”, says Benoit
Perrin, product-marketing manager Schlumberger. ” By joining forces with the
STIP-members we succeeded in developing a practical and easy-to-implement
API which generates the main advantages of fast roll-out of new applications
and easy maintenance of the installed POS-base for our customers”.
“Ingenico welcomes the publication of STIP 2.0. This is an important
milestone toward interoperability between secure transaction devices. Such
interoperability is needed to accelerate the deployment of secure payment
solutions, especially those based on smart cards. The technology proposed by
STIP 2.0 will help the industry of traditional payment devices to adapt to
the new exigences of the market. It will help also this industry in
exporting its know how in matter of payment and security to new emerging
markets like e- and m-commerce.” said Bernard Morvant, General Manager/
corporate business development & partnerships of Ingenico. “Ingenico is
deeply involved in specifying, experimenting and providing the new standard
that is emerging of the efforts of converging initiatives like STIP, FINREAD
and Global Platform.”
“As a founding member of STIP, VeriFone is enthusiastic about the prospect
of achieving cross-platform interoperability for our industry,” said Eric
Lecesne, general manager of VeriFone’s Technology and Product Operation.
“STIP has the potential to bring greater efficiencies to the development and
certification process, giving developers more incentive to create new
applications that can
run, virtually unaltered, on a range of devices with differing operating
systems. We expect this to further enhance the benefits of our
multi-application Verix platform and our multi-purpose Verix-based
“Cardsoft congratulates the STIP Consortium for the publication of STIP API
2.0. With this version 2.0, STIP has become a major and mature reference for
secure transaction and payment industries. Cardsoft is proud to participate
with some of the main players of the industry in the elaboration,
validation, and, now, deployment of STIP technology. Cardsoft is already
marketing several products related to STIP 2.0 technology. A portable STIP
2.0 platform, eASP, will be available in June of this year for beta-test, as
well as a variant of this platform, eAFINREAD, based on FINREAD
specifications themselves including STIP 2.0 technology. Cardsoft will also
offer a development environment for these platforms, including a PC
implementation of eASP/eAFINREAD, for testing and debugging purpose” said
Donald Sweet, CEO Cardsoft Inc.”STIP 2.0 is essential for bringing
interoperability and security on small devices running secure transactions
applications, and Cardsoft is positioning itself as a major expert and
provider of this technology.”
“We at Thales e-Transactions strongly believe that this latest release of
STIP is a significant milestone on the road to true interoperability on
secure transaction devices. ” said Mike Kerrigan, director of Strategic
Marketing at Thales e-Transactions. “The benefits to our customers in
decreased time to market for new applications will ensure that they can
profitably meet the ever increasing expectations of cardholders and
About STIP Consortium
STIP Consortium (www.stip.org) is an independent
incorporated in March 2000 that defines and promotes the Small Terminal
Interoperability Platform specification. STIP is a complete, royalty free
platform for secure transaction devices such as EFT/POS terminals, mobile
phones, vending machines and payphones and PDAs when used for secure
transactions. STIP is defined to run on Sun’s CLDC configuration.
STIP Consortium’s members comprise the traditional powerhouse of embedded
secure transactions and e-commerce solution providers – manufacturers of
payment terminals, mobile device chipsets, payphones and smart cards.
Current principal members are Bull CP8, Cardsoft, Gemplus, Ingenico,
Keycorp, Landis & Gyr, Lipman Electronic Engineering, Schlumberger,
SmartMove, Texas Instruments, Thales e-Transactions (formerly
Racal-Transcom, Dassault A.T, Krone and ICS) and VeriFone.
The goal of STIP Consortium is to enable Java applications to run with
limited resources on a compact virtual machine and API platform and to make
these applications interoperable among a variety of devices utilizing
different operating systems and microprocessors.
Microsoft released the ‘Microsoft Windows Smart Card Toolkit’ yesterday at Comdex. Windows-powered smart cards have a crypto-capable microprocessor and can perform a number of applications including: secure corporate logons for Windows 2000; Web and phone authentication; medical data storage; and debit, credit or cash transactions. Microsoft also announced a pilot program with British Telecom that will provide BT’s 35,000 mobile workers with one-touch remote network access from any device through ‘Windows for Smart Cards’ technology. Microsoft says its ‘Smart Card Associates Program’ now has 50 members who will begin releasing ‘Windows for Smart Card’ products this month. MN-based DataCard announced Monday the implementation of the first smart card campus using Windows-powered smart cards. Other Windows smart card announcements are expected this morning.