e+

Presentation to the Smartcard Networking Forum

11th April 2006

e-purse case studyJayne Ward

Bracknell Forest Borough CouncilJayne.ward@bracknell-forest.gov.uk

e+

e-purse

• The current BFBC e-purse is based on the Common Electronic Purse Specification (CEPS) standard

• First CEPS implementation in the UK

• CEPS can co-exist with other applications on the same chip and can be used in a variety of networks

e+

History

• BFBC has a Managed Service for its smart card

• Bespoke development of e-purse in 2001 for use with a MiFare 1K card

• Proprietary system using proprietary readers• Re-procurement in 2004/05- New Managed

Service Provider• Choice between no e-purse or a redeveloped

e-purse

e+

Implementation

• Currently deployed to– 9 Libraries– 4 Leisure Centres– Concessionary Fare Pass– Local Retail Discount Card– Proof of Age PASS accreditation– 4 Secondary Schools

• Cashless catering

e+

Why CEPS?

• Only international standard for e-purse• Complies with the National Smartcard Project• Complies with Europay, Mastercard and Visa

(EMV) as an open e-purse system due to its (in theory) interoperability

• EMV infrastructure discounted as being too involved with banks and involving transaction fees

e+

Why CEPS?

• Wish to move towards interoperability• Did not want another proprietary e-purse• Need to be open rather than closed and

inclusive• New provider, familiar with CEPS, offered

‘CEPS Lite’• Royalty free right in perpetuity available to all

ACTVaR councils• Not a lot of alternatives

e+

What is CEPS Lite ?

• CEPS with multicurrency and incremental purchase capabilities stripped out

• Adapted to fit on the e+ JCOP 30 card• Card application and terminal application

written to work on standard PC’s• Purchase Secure Access Module (PSAM)

software deployed to keep the cost of readers down

e+

The Bad News

• All existing cards in circulation needed to be converted to work with new e-purse

• To allow the e-purse balance on the contactless chip to be read via a contact reader

• Conversion done by frontline staff on first presentation of card

e+

Contact Chip

• The JCOP30 contact chip contains– The CEPS Lite Applet that includes the purse

balance and the 4 most recent e-purse transactions ( i) debit/credit, ii) amount, date and time, iii) balance after the transaction, iv) issuer I/D)

– The Infineer Applet as an identifier for cashless catering (where applicable for school meals)

– A HAD Applet enabling the data on the contactless chip to be read from a contact reader

e+

Contact Chip

• Needed Contactless solution as used previously

• T=CL readers – IDTronic desktop ISO14443A/B(RDT-OEMMF)

• Staff have 2 different readers.– 1 for conversion– 1 for Management System and e-purse

e+

42,000 existing edge cards

e+

New Branding

• edge re-branded to e+• Happened at same time as change to new

provider• All edge cards in circulation needed to be

converted before they would work with new ChipPURSE e-purse system

• Post Issuance solution using a contact reader• All e+ cards work on the new system

e+

e+ Card

e+

Card Conversion

• A DLL software security module was required

• Cards converted using a contact reader

e+

Conversion Process

e+

Conversion Process

e+

Conversion Process

• Most edge cards convert without problems in 90 seconds

• Conversion done via internet connection to cardholder Multi Application Smart Card System (MASCOT) database

• During conversion the existing e-purse balance is moved from the contactless chip to the contact chip

• Just another 30,000 or so to go

e+

How The System Works

• System called ChipPURSE• ChipPURSE interfaces with MASCOT• Very easy for staff to use• Up to £100 can be loaded on a card and

spent at any one of 13 locations in the Borough

• Money is loaded by staff• 2 receipts. 1 for customer 1 for till • Money protected once card reported lost or

stolen

e+

How The System Works

• Purse screen activated by placing card on contactless reader

• Pop up box appears on top of the screen in libraries- integral with LMS

• Allows credit and debit transactions and balance queries

e+

Chip PURSE Overview

e+

How The System Works

• Only credit transactions need an on-line connection to MASCOT

• Debit transactions do not need to be on-line and are downloaded to the MASCOT database daily

• No transactions are PIN protected• The CEPS transactions are uploaded directly

to the merchant acquirer (entity responsible to clear and settle transactions) on start up of the terminal application

e+

Receipts

e+

Replacement Cards

• No funds on replacement cards

• Letter stating e-purse balance sent out with card

• Cardholder presents letter at library / leisure centre for balance to be loaded

• Letter retained for audit trail

e+

Settlement

• ChipPURSE interfaces with MASCOT and records, amongst other things,– Time - Transaction type– Location - APACS number– Terminal - Previous value– Transaction value - Transaction result

• BFBC accounts staff deal manually with all transactions via a holding account

e+

Reports

• On-line reports available detailing– Cardholder statement– Daily totals of debits and credits– List of each daily transaction– List of all balances including total of all balances

representing the amount of funds held by the Council which have not been used by the cardholder

• Library staff can get daily and weekly reported including all branch PC’s

e+

e-Purse Usage

• No obvious pattern of usage

• Average transaction value is £1.70

• Average credit transaction is £10.55

• Currently only 5% of cardholders are regular users of e-purse.

• Usage split 55% men 45% women

• Main use in largest leisure centre

e+

Feedback

• People who use the e-purse find it useful• Useful tool for teaching youngsters to budget• Usage increased once leisure was included• Front line staff not good at encouraging use

of e-purse• Target is to promote and increase use of the

system

e+

The End

Any Questions ?