Why a Calypso “certification” ?

The first Calypso ticketing systems that were implemented in the past fifteen years were mainly in closed environments: a fare collection integrator responsible of the whole project took charge of all compatibility problems between the different components of the system, in particular cards and terminals. This integrator guarantees his customer the running and the performances of the system only for one kind of card, heavily tested with his own terminals. If necessary he made some adjustments on his terminals.

In this case, for each new cards issued by a card embedder, or a new portable object, the integrator requires his customer to do a new test campaign, to be paid by the embedder, before the introduction of this new media. If not, the integrator no longer guarantees the running or performances of his system.

Now, the ticketing systems are in a more and more open environment: after years of discussions on interoperability, operators and authorities implement it concretely; in Calypso environment, the launching of Triangle is now under way; operators want to accept new media such as mobile phones, EMV credit cards, USB keys and so on, on their networks. The policy of specific tests by the integrator is no longer a solution to ensure the running of a system with all these new media.

There is only one way to face these issues: the setting-up of a policy of certification and compliance of the different products used in a ticketing system, as it has been done for many years in the bank sector.

Today CNA is able to propose a policy of certification at different levels of a ticketing system.

 

The different Calypso “certifications”.

Different certifications are necessary to ensure the running of a system (by reference to the Transaction Layers Scheme):

  • At the low layers of the transaction, i.e. the contactless layers, that have to fulfill the ISO 14443 standard: Calypso technology is independent of the contactless transmission chosen, but CNA decided to strongly support the initiative of certification of the contactless transmission that is taken in charge by the Smart Ticketing Alliance, with ITSO, VDV and AFIMB. As soon as ready, this certification of contactless transmission will be integrated in the set of certification that CNA will offer to its members.
  • At level 3 of the secure exchanges of data, the heart of the Calypso transaction, CNA proposes:
    • For terminal manufacturers, a Terminal registration, this consists in a set of tests, checking that the implementation of Calypso is correctly achieved within the terminal.
    • For the manufacturers of portable objects (card embedders, IC manufacturers), a Certification of portable objects based on a technical evaluation made by an independent laboratory. The certificate that delivers Calypso ensures that the object is strictly compliant with Calypso specifications (at this moment, rev. 3.1.).
  • At the application layer, even if it is outside Calypso responsibility, CNA proposes, in its role as Triangle issuer, a set of mandatory tests to be realized at the level of the implementation of Triangle in a ticketing system, in order to ensure that the applicative software respects the rules fixed for a normal behavior of the sale terminal and a compliant management of the contract area within the card. CNA represents in fact the whole community of Triangle members, who want to be sure that a new implementation is conform and without any problem for them). Find here the guidelines for the Hoplink conformity.