e
Presentation to the Smartcard Networking
Forum
11th April 2006
e-purse case study
Jayne Ward
Bracknell Forest Borough Council
[email protected]
+
e-purse
e
• The current BFBC e-purse is based on
the Common Electronic Purse
Specification (CEPS) standard
• First CEPS implementation in the UK
• CEPS can co-exist with other
applications on the same chip and can
be used in a variety of networks
+
History
e
• BFBC has a Managed Service for its smart
card
• Bespoke development of e-purse in 2001 for
use with a MiFare 1K card
• Proprietary system using proprietary readers
• Re-procurement in 2004/05- New Managed
Service Provider
• Choice between no e-purse or a redeveloped
e-purse
+
Implementation
• Currently deployed to
– 9 Libraries
– 4 Leisure Centres
– Concessionary Fare Pass
– Local Retail Discount Card
– Proof of Age PASS accreditation
– 4 Secondary Schools
• Cashless catering
e
+
Why CEPS?
e
• Only international standard for e-purse
• Complies with the National Smartcard Project
• Complies with Europay, Mastercard and Visa
(EMV) as an open e-purse system due to its
(in theory) interoperability
• EMV infrastructure discounted as being too
involved with banks and involving transaction
fees
+
Why CEPS?
e
• Wish to move towards interoperability
• Did not want another proprietary e-purse
• Need to be open rather than closed and
inclusive
• New provider, familiar with CEPS, offered
‘CEPS Lite’
• Royalty free right in perpetuity available to all
ACTVaR councils
• Not a lot of alternatives
+
What is CEPS Lite ?
e
• CEPS with multicurrency and incremental
purchase capabilities stripped out
• Adapted to fit on the e+ JCOP 30 card
• Card application and terminal application
written to work on standard PC’s
• Purchase Secure Access Module (PSAM)
software deployed to keep the cost of readers
down
+
The Bad News
e
• All existing cards in circulation needed
to be converted to work with new epurse
• To allow the e-purse balance on the
contactless chip to be read via a contact
reader
• Conversion done by frontline staff on
first presentation of card
+
Contact Chip
e
• The JCOP30 contact chip contains
– The CEPS Lite Applet that includes the purse
balance and the 4 most recent e-purse
transactions ( i) debit/credit,
ii) amount, date
and time, iii) balance after the transaction, iv)
issuer I/D)
– The Infineer Applet as an identifier for cashless
catering
(where applicable for school meals)
– A HAD Applet enabling the data on the contactless
chip to be read from a contact reader
+
Contact Chip
• Needed Contactless solution as used
previously
• T=CL readers – IDTronic desktop
ISO14443A/B(RDT-OEMMF)
• Staff have 2 different readers.
– 1 for conversion
– 1 for Management System and e-purse
e
+
42,000 existing edge cards
e
+
New Branding
e
• edge re-branded to e+
• Happened at same time as change to new
provider
• All edge cards in circulation needed to be
converted before they would work with new
ChipPURSE e-purse system
• Post Issuance solution using a contact reader
• All e+ cards work on the new system
+
e+ Card
e
+
Card Conversion
• A DLL software
security module was
required
• Cards converted
using a contact
reader
e
+
Conversion Process
e
+
Conversion Process
e
+
Conversion Process
e
• Most edge cards convert without problems in
90 seconds
• Conversion done via internet connection to
cardholder Multi Application Smart Card
System (MASCOT) database
• During conversion the existing e-purse
balance is moved from the contactless chip to
the contact chip
• Just another 30,000 or so to go
+
How The System Works
•
•
•
•
System called ChipPURSE
ChipPURSE interfaces with MASCOT
Very easy for staff to use
Up to £100 can be loaded on a card and
spent at any one of 13 locations in the
Borough
• Money is loaded by staff
• 2 receipts. 1 for customer 1 for till
• Money protected once card reported lost or
stolen
e
+
How The System Works
• Purse screen activated
by placing card on
contactless reader
• Pop up box appears on
top of the screen in
libraries- integral with
LMS
• Allows credit and debit
transactions and
balance queries
e
+
Chip PURSE Overview
e
+
How The System Works
e
• Only credit transactions need an on-line
connection to MASCOT
• Debit transactions do not need to be on-line
and are downloaded to the MASCOT
database daily
• No transactions are PIN protected
• The CEPS transactions are uploaded directly
to the merchant acquirer (entity responsible
to clear and settle transactions) on start up of
the terminal application
+
Receipts
e
+
Replacement Cards
e
• No funds on replacement cards
• Letter stating e-purse balance sent out
with card
• Cardholder presents letter at library /
leisure centre for balance to be loaded
• Letter retained for audit trail
+
Settlement
e
• ChipPURSE interfaces with MASCOT
and records, amongst other things,
– Time
- Transaction type
– Location
- APACS number
– Terminal
- Previous value
– Transaction value - Transaction result
• BFBC accounts staff deal manually with
all transactions via a holding account
+
Reports
• On-line reports available detailing
–
–
–
–
Cardholder statement
Daily totals of debits and credits
List of each daily transaction
List of all balances including total of all balances
representing the amount of funds held by the
Council which have not been used by the
cardholder
• Library staff can get daily and weekly
reported including all branch PC’s
e
+
e-Purse Usage
•
•
•
•
No obvious pattern of usage
Average transaction value is £1.70
Average credit transaction is £10.55
Currently only 5% of cardholders are
regular users of e-purse.
• Usage split 55% men 45% women
• Main use in largest leisure centre
e
+
Feedback
•
•
•
•
e
People who use the e-purse find it useful
Useful tool for teaching youngsters to budget
Usage increased once leisure was included
Front line staff not good at encouraging use
of e-purse
• Target is to promote and increase use of the
system
+
The End
Any Questions ?
e
+