Come and visit us in the dm-arena, booth C21.
Don't miss our sessions about Open Source SDK and Blockchain forcast for ticketing
Take advantage of one of the biggest events in transportation and ticketing in order to exchange with our dediacted team about mobile solution, Calypso products, interoperability and much more.
Want to know more about the Calypso Open Source SDK ? Be there the 7th of March 2018 at 11 a.m, Conference Room 4/5 to assist to the presentation of Philippe Vappereau, CNA Chairman.
We also be part of the Smart Ticketing Lecture the 8th of March from 9 am to 10.30, Conference Room West : Blockchain Forecast: Opportunities for Mobility and Ticketing. by Valentina Zajackowski, Marketing Manager, Calypso Networks Association.
See you in Karlsruhe !
When it is not possible to implement a secure Calypso applet into a SE (Sim card or eSE), CNA has defined an HCE-based solution for Android mobile phones. This solution is based on two documents: the Calypso HCE application specifications and the Calypso HCE Guidelines.
Many Calypso networks aim at providing to their customer a ticketing solution for Android mobile phones, while preserving as much as possible compatibility with their installed AFC system, in particular with the validators.
CNA provides a solution with an acceptable level of security compatible with the Calypso brand which ensures that the security of the existing system is not jeopardized.
Specification of a Calypso HCE application
CNA published the revision 1.3 of the specification of a Calypso HCE application using a Public Key Infrastructure (PKI) that guaranties the security of the exchanges between the mobile phone and the central system, to load initial data or to load rights (such as transportation rights).
> By delivering HCE Authorization Modules (HAM) with certificates to HCE application providers and service providers, CNA is acting as the Certification Authority in this PKI.
For security reasons, transactions using the personalization key or the load key are not possible through the NFC interface, and must be done with a secure connection to a server.
Only the Calypso debit key is stored in the HCE application for validation on entrance and control during travel, coupled with a mechanism of renewal of the Calypso Serial Number (CSN) to mitigate the risk of fraud : a part of the CSN contains date and time of validity of the debit key which shall be checked by the terminals.
Calypso HCE Guidelines
Unlike a secure element built to protect data for a long period, a mobile device can only ensure their protection for a very limited period of time depending on the security techniques adopted to delay the attacks on the software and the countermeasures implemented to detect a fraud at the level of the central system, based on a constant back-end monitoring. These techniques are the mandatory supplement to the specification and are in the scope of the Calypso HCE Guidelines, revision 1.0.
They rely on the recommendations of a security study ordered by AFIMB, The French agency for multimodal information and smart-ticketing, realized by an independent expert from the “Mines Telecom Paris Institute”. Get More details
Combined with the requirements of the specification, the main features which may imply an evolution of the terminals are the following:
· Support of a rev 3.1 Calypso application
· Support of TDES keys
· Check of a specific range of CSN dedicated to HCE application.
· Check of the debit key validity date (the Guidelines enforce a minimum frequency of the CSN renewal)
· Check of the mandatory contracts signature
Both documents define a coherent and secure way to implement HCE in a Calypso environment and are mandatory to use the Calypso brand and keys.
They are available on the Calypso technical support website.
Please note that you must be registered to access this technical documentation and that the Calypso HCE Guidelines are restricted to CNA members.
CNA decided to support the UITP conference in held in Tallinn from the 22 -23 of November 2018, as a Gold sponsor of the event
As gold sponsor of this UITP event we have presented to the more than 120 participants our outline and strategy in terms of Calypso for the years to come. The event allowed as well to showcase the successful Calypso technology deployment in the city of Riga. In the wider context the conference addressed the policy challenges in the public transport sector in Europe focussing explicitly on the CEE countries. Our participation allowed us to reach out to several important players in the field such as EIB, the Commission and the European Parliament. Further the event provided us with an update on the various activities in the CEE region creating various follow up initatives.