WILDCAR 2013 GOVERNMENTAL SOLUTIONS from page 4: Trüb supplies Malaysia with polycarbonate datapages New e-ID for Macao from Trüb TrackStar ®4 Workflow Management Solution Upgrade of Estonian e-ID card BANKING SOLUTIONS from page 12: The right card solution for individual needs Trüb‘s «Trusted Service Manager» is ready UBS Access Card based on CombOS® DI v2 New generation CombOS® ACCESS SOLUTIONS from page 18: New generation of RFID cards for public transport Absolute Identity This success was only possible thanks to just two factors: The trust of our customers in Trüb’s efficiency and quality, and their satisfaction with our services. We are very aware of these facts. I would therefore like to take this opportunity to expressly thank you for your support. Maintaining long-term and stable customer relationships is not something that can be taken for granted in an ever more globalized world, which is characterized by increasing dynamics and rising competition. The trust and satisfaction of our customers must be constantly renewed and confirmed - not just to win a new contract. With this in mind, we strive for innovation based on tradition. It is only possible to keep the customers of today tomorrow, and win new ones, by constantly investing in new markets, products, services, and infrastructures. That is why we have been continuously working to further develop the products and services for national identification and identity documents since introducing the Swiss identity card: the world´s first identity card made of polycarbonate in 1995. In this issue of wild card, you can find out more about our innovative security elements, which are being used for the first time by customers in new generations of identity documents. You will also learn about the features of «TrackStar® 4» - the new generation from the personalization solution developed by Trüb - and how you can benefit from its use. Trüb has the right infrastructure today to accommodate tomorrow’s new era of non-cash payment (and other transactions): NFC (Near Field Communication). The «Trusted Service Manager» developed by Trüb in the high security zone, has proven its efficiency in the successful field trials of the past fully integrated ERP system that monitors all of our business processes from creating offers, order processing and production control, to billing and costing. In combination with our newly introduced «TrackStar® 4», we are able to respond to your needs even more flexibly, and provide you with enhanced services. On behalf of Trüb AG, I would like to thank you for your excellent and constructive cooperation – we look forward to continuing to work on lots of exciting projects with you in the future. few months, so now nothing stands in the way of the comprehensive introduction of new mobile services in Switzerland. Read more about it in this issue. Customer loyalty is a challenge, not just for Trüb, but for all companies. With an extended range of tailored or very specific card solutions, we help our customers to differentiate themselves from their competitors and to raise their profile among their own customers. In this issue we report on Access Cards and card solutions for Consumer and Retail. EDITORIAL At the ripe old age of 154, Trüb has already mastered many challenges and survived structural, economic, and political turmoil. We have even weathered the storm of the recent economic and financial crisis. More than that: We achieved very satisfactory results in 2012. Fernando Dal Zotto Delegate of the Board, CEO Likewise, we will inform you about the new generation of the CombOS® product family, the operating system we developed for EMV card solutions. And last but not least, we have again invested heavily in our infrastructure, so that we can continue to provide you with safe, efficient, and reliable services. We have significantly expanded and renewed the security and infrastructure in the production of the card body and personalization. In addition, we are about to introduce a new, EDITORIAL | 3 TRÜB SUPPLIES MALAYSIA WITH POLYCARBONATE DATAPAGES GOVERNMENTAL SOLUTIONS Two pioneers in identity documents: Trüb supplies Malaysia with polycarbonate datapages for the new generation of epassports. Trüb supplies the polycarbonate datapages for the next generation of e-passports for Malaysia. The new e-passports came into circulation in April 2013. The datapages 4 | GOVERNMENTAL SOLUTIONS are equipped with a variety of builtin security elements including the groundbreaking tru/vision™ feature: As the first country worldwide, Malaysia implements exciting true-color UV security elements based on Trüb’s innovative tru/vision™ solution. Malaysia and Trüb: Two pioneers in innovative identity documents In 1998, Malaysia launched a revolutionary type of identity document: the worldwide first electronic passport. At that time, no ICAO specifications for such documents had yet been approved, let alone implemented. A key element of the new generation of Malaysian e-passports is the polycarbonate datapage supplied by Trüb. The datapages from Trüb meet the highest demands for security and fully comply with the ICAO standards. They are made of fused polycarbonate films and laminated without the use of adhesives. As one of the worldwide pioneers of this technology, Trüb has gained substantial experience and expert knowledge since the launch of the world’s first polycarbonate identity card in 1995, the Swiss identity card. The high security element tru/vision™ was developed by Trüb and offers high resolution true-color UV images with high brilliance and outstanding color reproduction. It provides new design possibilities and protects the document against duplication and reproduction. Malaysia is the first country in the world to opt for this innovative feature and has chosen exciting design elements such as the spectacular skyline of Kuala Lumpur. The highly flexible and patented datapage, hinged with the integrated VisiFab™ UV printing element, guarantees a secure and robust sewing of the datapages into the passport booklet. All the datapages, hinges and security elements from Trüb are designed for a lifespan of 10 years. GOVERNMENTAL SOLUTIONS Outstanding security and quality The Malaysian datapage, which is optically personalized by means of laser engraving, comprises a variety of integrated security features including the new tru/vision™ element. In this project, Trüb is a key supplier to the general contractor Datasonic Technologies in Kuala Lumpur/ Malaysia. GOVERNMENTAL SOLUTIONS | 5 NEW E-ID FOR MACAO WITH INNOVATIVE SECURITY ELEMENTS FROM TRÜB vision™. Since 2009, Trüb already supplies the polycarbonate datapages for Macao’s e-passports. GOVERNMENTAL SOLUTIONS A key element of the new generation of the electronic identity solution is the polycarbonate identity card produced by Trüb. Identity cards from Trüb meet the highest standards for security and fully comply with the ICAO standards. They are made of fused polycarbonate films and laminated without the use of adhesives. Trüb has been selected to provide the new generation of electronic identity cards for the Macao Special Administrative Region of the People’s Republic of China. The new e-ID is made of polycarbonate and equipped with a contactless chip module. As a world novelty, the e-ID for Macao includes two innovative security elements which have been recently introduced by Trüb: tru/window™ LOCK and tru/ 6 | GOVERNMENTAL SOLUTIONS Innovative security elements The new generation e-ID for Macao is optically personalized by means of laser engraving and comprises a variety of security elements including two innovative features developed by Trüb. tru/vision™ offers high resolution true-color UV images with high brilliance and outstanding color reproduction. Under UV-light, the e-ID documents reveal the skyline of Macao in true colors. This element is much more than a design element, as it protects the document against duplication and reproduction. GOVERNMENTAL SOLUTIONS Trüb’s security feature tru/ window™ LOCK is designed for laser-engraved polycarbonate documents such as national identity cards and passport datapages. The technology is based on a sophisticated laser ablation personalization process on a metallic foil, which is integrated into a transparent window. A ghost image is inversely personalized into the metal foil so that a simultaneous manipulation of the card holder portrait and ghost image after issuance of the document becomes visible, making any fraudulent tampering of the card holder portrait easy to detect. With the use of the security elements tru/window™ LOCK and tru/vision™, Macao presents a highly innovative security concept which is easy to understand and to verify, resulting in a further increased security level in its new generation of electronic identity cards. GOVERNMENTAL SOLUTIONS | 7 TRACKSTAR®4 WORKFLOW MANAGEMENT SOLUTION FOR PERSONALIZATION CENTERS ..Site configurator for data import and data management workflow definition Stand Driver & ard W Veh orkf icle low e c Ca n & a i l D p p ata rd dA TrackStar®4 Core d In to ifie Int er r Site Co Un iguration Co nf te rf a c e C o n fi g u ra Standard Workfl low kf or W ar ow king & Acce s s C Ban ar ds Stan d S module of the TrackStar®4 workflow engine s Cus t o m ize d 8 | GOVERNMENTAL SOLUTIONS ..Core ce fa Standard Wo rk rkflow Wo ard sport d s n ta Pa TrackStar®4 combines flexible configuration functionality with modular software architecture, such as: ser po m TrackStar®4 is a modular and scalable solution effectively used within centralized high volume production personalization centers, as well as decentralized personalization sites. The entire personalization process chain is governed by a dedicated document production workflow. TrackStar®4 manages the order fulfillment process, from order acknowledgement and ac- ceptance, up to the shipment of a finalized security document. Guided by an easy- to- use «Product Configurator», customers can map their own production process into the TrackStar®4 workflow engine. The solution supports a broad selection of standard or configurable systems interfaces, and is compatible with established personalization equipment. Identity Ca flow rd GOVERNMENTAL SOLUTIONS With more than 20 years of experience in personalization software development, Trüb AG introduces a new workflow management solution: TrackStar®4 is designed to manage the overall document personalization lifecycle in the governmentaland banking business environment. workflow library (e.g. identity card, passport, driver & vehicle cards) ..Standard appliance interface library Trüb’s Workflow Management Solution has been chosen by the Republic of Azerbaijan for personalizing their new passport and e-ID documents GOVERNMENTAL SOLUTIONS ..Standard and appliance configurator for interface configuration (personalization machines, quality control machines, packing and delivery machines, end-check machines) ..Customized workflows (on request) Re-print Import Personalization Quality Assurance Reject Delivery Internet / WLAN Feedback Message Receive Prepare Prepare Prepare Import Assign Assign Assign Prepare Produce Perform Finalize Delivery Feedback Release Certificate (Pre-Datraprep) Certificate (Post-Datraprep) GOVERNMENTAL SOLUTIONS | 9 GOVERNMENTAL SOLUTIONS Estonia’s emergence as one of the most advanced digital societies in the world is encapsulated with the term «e-Estonia», where «e-» stands for the broad use of webbased services that permeate the public and private sectors of Estonia’s economy as well as its society. This incredible success story has grown out of a progressoriented partnership between the government and industry. As a result, Estonia now enjoys a unique landscape of over 700 e-solutions for the daily benefit of its citizens. Trüb has been instrumental in developing the Estonian e-ID solution and is the card supplier for the e-ID Estonia program since the very beginning in 2001. Throughout the project, Trüb has successfully merged Estonia’s requirements with its own expertise from more than 30 national ID projects into a highly secure polycarbonate e-ID card that allows a high level of visual and digital identification while 10 | GOVERNMENTAL SOLUTIONS FIRST IN THE WORLD – UPGRADE OF ESTONIAN E-ID CARD creating a very high barrier for card fraud. In addition, the Estonian government has entrusted Trüb with the local personalization of the e-ID cards, becoming one of only three key holders for the digital keys of the country’s e-ID system. With new technologies and possibilities emerging and experiences gained since the inception of the original Estonian e-ID program, Trüb has worked closely with the Estonian government to implement a modernized version of the national e-ID. This new card was introduced to the public in 2011 and is based on a multi-application Java platform developed by Trüb. The PKI solution includes two qualified digital certificates, one of which is used for authentication and the second for digital signatures. The Java technology enables the addi- tion of new applications to the e-ID in a secure way after the card issuance, which is a critical feature for a country like Estonia, that is so driven by innovation. Owing to a globally new concept introduced at the end of last year, the citizens and residents of Estonia can now easily upload the PKI application on their electronic ID cards and Residence Permits. The documents have a nominal validity of five years – a long time in today’s IT-driven world with its short replacement- and lifecycles. As the e-ID card, with its electronic features and digital signature capabilities, is widely used by the Estonian citizens, it has to be extraordinarily stable and reliable in its daily use. The Trüb e-ID solution has facilitated Estonia’s successful migration from previous products to the new application without limiting or disrupting its citizen’s use of this card, which is so essential in their daily lives. This successful example of transition in Estonia has highlighted the value of a supplier and partner that not only develops complex systems to a customer’s specification, but is also there for them throughout the lifecycle of a national e-ID project; a supplier that can actively consult, manage and help a vital national system to rise to the challenges of rapid changes in commerce, science, technology or other societal developments. With the goal of ensuring a smooth and reliable use of the e-ID cards throughout their valid lifetime, Trüb developed a system that can upload the complete electronic appli- The normal update service is provided at the Estonian police stations is free of charge and only takes 2 to 3 minutes to complete. The police officer authenticates and identifies the cardholder, checks the card and starts the update. After the update, a new set of PIN and PUK are generated and a sealed PIN envelope is issued to the cardholder. Thanks to this system, the electronic functions are available again with upgraded features, even for those who forgot their PIN, until the document expires. It is considered state of the art that Estonians: ..Fill in their tax declarations and make payments to the tax authorities online by using the e-ID ..Found a company through a bureaucracy-free process using just their personal computer. ..Check medical records and make appointments with doctors online Using web-applications is considered as an efficient and convenient way of communicating with the authorities or throughout the commercial world. Until now, more than 1.2 million people in Estonia (over 90% of inhabitants) have an e-ID card to access over 700 e-services. Since its introduction in 2002, the Estonian e-ID card has been used for more than 250 million electronic authentications and almost 150 million digital signatures. GOVERNMENTAL SOLUTIONS cation onto e-ID cards already in circulation. This system is operated by Trüb and corresponds to the highest security needs of a nationwide PKI scheme. It also interacts with the national civil registry and the Certificate Authority (CA) using the underlying maintenance keys so that the card could even be updated at home. GOVERNMENTAL SOLUTIONS | 11 THE RIGHT CARD SOLUTION FOR INDIVIDUAL NEEDS BANKING SOLUTIONS Stable and long-term customer relationships are the foundation for business success. Card solutions by Trüb open the way to profitable and long-lasting customer relationships. The comprehensive services from Trüb offer customers the possibility to individually customize and configure cards as required – a strong sign of appreciation and close ties with the end customers. Whether it is store cards, loyalty cards, membership cards, club cards or warranty cards - the uses of smart cards are virtually limitless. 12 | BANKING SOLUTIONS Trüb offers card solutions and services for a variety of uses with its «Consumer & Retail» product portfolio. Production of the card A variety of options to design a unique card: The solution to every problem begins with an analysis of the requirements. Trüb supports their customers in every project starting from the idea right through to its implementation and wide-scale use. Customers benefit from Trüb’s core competencies in the areas of: An almost unlimited selection of colors and custom colors. System design Support and consulting on the conceptual design of the overall architecture and the definition of components, modules, and interfaces that best meet the needs of the customer. Layout Drafting of suitable card designs in close cooperation with the customers and their advertising agencies. ..Screen printing and offset printing: ..Surface treatment and finishing: An extensive range of finishes from matt, glossy or relief lamination up to hot stamping. ..Security features: The use of security elements underscores the quality of the customer’s products and portfolio. Holograms, micro fonts, UV printing, guilloches, tactile elements (positive/negative surface textures), and Iriodin are available for this purpose. colored card body stand out immediately. They can either be uniform or contrasting in color. Available in white, black, red and white-redwhite (other colors on request). ..Barcode printing ..Key management ..Lettershop, including PIN mailing and insert management Personalization & Lettershop Cards with personality: Trüb offers a wide range of services for the personalization and delivery of cards – even direct to the end customer. ..Data processing ..Visual personalization (embossed in gold or silver, and thermal printing in white or black) ..Electronic personalization of contact-based or contactless chip modules, and the magnetic strip Luxury Cards – a value your customers deserve Extraordinary and elegant: With their Luxury Cards, Trüb supports their customers in a more targeted approach to special customers, which distinguishes them from their competitors. The Luxury Cards underline the high standards on which the customer’s products and services are based. The Luxury Cards outwardly exemplify the essence of the customer! Precious metals such as gold and platinum, and precious stones such as diamonds, rubies, sapphires, emeralds, etc., adorn the extravagant cards and give them their look of luxury. BANKING SOLUTIONS ..Colored card body: Cards with a ..Picture or logo print Trüb is happy to present their Luxury Cards Portfolio in person to all interested customers. BANKING SOLUTIONS | 13 TRÜB‘S «TRUSTED SERVICE MANAGER» IS READY FOR THE SWISS MARKET BANKING SOLUTIONS After Trüb conducted their field trials with NFC-enabled smartphones in 2012 together with Swisscom and various card issuers, the focus in 2013 shifted to the construction of the Trusted Services Management Infrastructure (TSM), the implementation of «over-theair» trials and preparation of the Service Provider TSM Service (SPTSM) for its commercial launch in Switzerland. Trüb developed their SP-TSM in the first half of 2013, in their high security zone and integrated it with Swisscom, Switzerland’s leading mobile network operator. It allows the personalization of MasterCard PayPass and Visa payWave applications within a secure storage element (Secure Element) on smart 14 | BANKING SOLUTIONS phone SIM cards over the cellular network. In addition to other technical solutions, this integration is an important precondition for the quick and efficient spread of Mobile Contactless Payment. MasterCard and Visa have certified the SP-TSM at Trüb’s site in Aarau. The certification ensures that the OTA personalization of the secure element on the SIM card is conducted in compliance with the strict EMC guidelines, and the same high security standards that apply to the conventional card industry. All the indications from the Swiss market point to an impending commercial launch of the Mobile Contactless Payment. More and more credit cards with a contactless chip are in circulation, and major retailers have upgraded their payment terminals with the contactless feature. Trüb has taken up the challenge and made the necessary investments. We are looking forward to a new, «cool» kind of cashless payment in the Swiss market. UBS ACCESS CARD INTEGRATES TWO ADDITIONAL PRODUCTS BASED ON COMBOS® DI V2 Access Card NFC Cutting edge technology - The best way to secure e-banking UBS relies on a unique system consisting of personal forms of identification for logging into UBS Online Services: Contract number Access Card Display or Access Card NFC Personal Identification Number (PIN) Card reader or Access Key .. .. .. .. With the Access Card Display in the form of a convenient card and the Access Card NFC, it is even easier for UBS customers to login on the go. The login is based on what is known as the Challenge-Response procedure. The access code is recalculated for every login and is only valid for a short time. The access data are protected on the Access Card. BANKING SOLUTIONS Access Display Card – High security thanks to leading technology Access Card Display provides effective protection for access to UBS online services and therefore personal customer data. In addition to the usual access from home, the Access Card Display is suitable for mobile access to UBS Online Services for people on the move, because the Access Card Display can also be used without a card reader. Access Card Display BANKING SOLUTIONS | 15 NEW GENERATION COMBOS® BANKING SOLUTIONS Trüb is one of the prime suppliers of native operating systems for payment solutions. Numerous customers worldwide trust in the expertise and experience provided by Trüb when it comes to innovative smartcard technologies for secure payment transactions. With the new generation of CombOS® products based on chip hardware using flash technology and enhanced security supported by a dual CPU, Trüb EMV solutions meet the latest market challenges. By using the chip hardware with flash technology for the new CombOS® products, Trüb creates a significant advantage for customers by offering greater logistical flexibility and thus enabling a faster order to delivery process. The products are developed according to the latest available specifications from MasterCard M/chip Advance and Visa VSDC 1.5 with VCPS v.2.1.1. The issuers can benefit from the full feature set which allows the implementation of multi-applica- 16 | BANKING SOLUTIONS tion cards combining payment with additional functionalities like transport supported by MasterCard Data Storage or PKI and loyalty applications by the ISO 7816 command set. Increased transaction speed and support of five different currencies provide added value to the new CombOS® chip platforms. The growing requirements regarding the EMV card security in payment transactions are addressed with the CombOS® DDA/CDA v3 cards and secure authentication solutions for e-banking. Contactless payment is a visible trend for low-value transactions where speed and customer convenience are key issues. CombOS® Dual Interface v2 is an ideal chip platform for fast contactless transactions. Additional services like transport or access schemes based on Mifare technology are available through this product. For markets focusing on online transaction payment products, the new CombOS® portfolio also includes a cost-effective SDA v3 product. Customized EMV CPA-based payment solutions round up the product portfolio. The CombOS® chip platforms are available as chip modules or embedded components in the card. Chip personalization is supported by EMV CPS or proprietary specifications. Thus a vast partner network of issuers, personalization centers and card manufacturers can benefit from the CombOS® portfolio in domestic and international markets. CombOS® Dual Interface with Mifare emulation is enjoying growing success in the Kenyan market. Special multi-application cards have been issued for universities that are co-branded with MasterCard and the issuer. Students can pay their fees, have access to libraries, canteens and copy centers and make payments for further services. Leading Swiss banks have decided to migrate to the new generation CombOS® chip platforms in order to benefit from the advanced technology and flexibility offered by these products. The main roll-outs have already started in 2013. Chip hardware CombOS® SDA v3 CombOS® DDA v3 CombOS® DI v2 Newest Infineon SLE77 range: real Chip: Infineon SLE78 series type Chip: Infineon SLE78 series type 16 bit ROMless security controller in SLE78CFX1844P with Flash Memory SLE78CFX2406PM with Flash 90nm CMOS technology (total 184 kB, ca. 14 kB user space) Memory Flash PROM (156 kB) for program 3DES RSA co-processors (total 240 kB, min. 17 kB user space) and user memory alllowing quick 3DES & RSA co-processors customization 8-10 kB EEPROM Technical data Applications Visa: VSDC 1.5 SDA Applications Visa: VSDC v1.5 Applications Visa: VSDC v1.5 (EMV 2000 v4.2) DDA, DPA authentication VCPS v2.1.1, DPA authentication Visa DPA Applications MasterCard: M/Chip Applications MasterCard: M/Chip Applications MasterCard: M/Chip Advance, SecureCode CAP Advance, Data Storage, SecureCode Advance (EMV 2000 v4.2) Applications ISO: a selection of CAP authentication MasterCard SecureCode CAP ISO7816 commands for loyalty Applications ISO: a selection of ISO 7816 file system (e.g. for loyalty) applications ISO7816 commands for loyalty Personalization: EMV CPS or Personalization: EMV CPS or applications propietary proprietary Personalization: EMV CPS or proprietary Special / new MasterCard Data Storage functionalities Mifare BANKING SOLUTIONS | 17 BANKING SOLUTIONS 3DES co-processor NEW GENERATION OF RFID CARDS FOR PUBLIC TRANSPORT Cardag Deutschland GmbH, a major supplier of RFID cards for the public transportation network (ÖPNV) with sales of over 8 million cards, is now offering a new generation of RFID cards. The cards are characterized by quicker transaction times and a more attractive price. The Trüb Group planned and implemented the development of the operating system within one year. The AFC-OS operating system contains essential components of the CombOS® operating system which was developed by Trüb AG. The new RFID cards are initially available in two versions: standard and with Mifare emulation. All the components required to produce the cards originate from Europe, mostly from Germany. ACCESS SOLUTIONS Cardag Deutschland GmbH will continue to consolidate its marketleading position with this technological advancement. 18 | ACCESS SOLUTIONS 14th year Publisher and editorial team Trüb AG, Corporate Communication, Aarau/Switzerland Printed by Kromer Print AG, Lenzburg/Switzerland Print run 3 500 copies © Trüb AG 11.2013 Reproduction not permitted without consent ACCESS SOLUTIONS | 19 ACCESS SOLUTIONS Imprint © Trüb AG 11.2 013 Secure your ident i ty Trüb AG Hintere Bahnhofstrasse 12 5001 Aarau Switzerland Trüb Baltic AS Cardag Deutschland GmbH IDpendant GmbH Laki 5 10621 Tallinn Estonia An der Allee 6 99848 Wutha-Farnroda Germany Edisonstrasse 3 85716 Unterschleissheim/München Germany Tel. +41 62 832 00 00 Fax +41 62 832 01 00 info@trueb.ch www.trueb.ch Tel. +372 658 11 33 Fax +372 658 11 39 info@trueb.ee www.trueb.ee Tel. +49 36 921 30 70 Fax +49 36 921 30 711 info@cardag.de www.cardag.de Tel. +49 89 3700 110 0 Fax +49 89 3700 110 10 info@idpendant.com www.idpendant.com