Open ticketing schemes requires certification. Previously, in closed environment, the use was to test cards and terminals simultaneously to be compatible with each other.
Ticketing schemes are now open to mobile ticketing, to cards issued by banks and other service providers, interoperability is on the roadmap of many operators. The bilateral validation between one card and one terminal is no more possible, and only a strong certification policy is able to bring the necessary compatibility between portable objects (PO) and terminals.
This compatibility is an absolute requirement not only for interoperability, but also for cost-containment.
Thus, CNA has set-up a complete certification process, on all layers of a ticketing transaction, to offer to users of Calypso portable objects and terminals an end-to-end certification.
- At the radio frequency (RF) layer, which is defined in the ISO 14443 standard, CNA, in cooperation with Paycert, proposes a certification of terminals and portable objects which guarantees their compatibility to the CEN TS 16794 standard which is the implementation of ISO 14443 for ticketing in transport. This certification is also applicable for non-Calypso products in the context of the Smart Ticketing Alliance.
For the compliance to the Calypso portable objects specifications the certification delivered by CNA is based on a technical evaluation made by independent laboratories. It applies whether on native software for smartcards, whether on Calypso applet for all Javacard platforms.
Until end-2017, CNA was only providing PO certificates for Calypso Rev3.1. In 2018, CNA added 2 types of PO certification :
- Rev3.2 certification for the compliance with the last revision of the PO specifications which include AES cryptography and new access modes for files
- CLAP (Calypso Light Application) certification which ensures the compliance with the specification of the Calypso mid-range product.
By combining a certification for compliance to Calypso specifications and a RF standard certification, operators benefit from an end-to-end agreement which enables to set-up mind free operational schemes of interoperability.
- For terminal manufacturers, a Terminal Registration consists in a set of tests, checking that the implementation of Calypso is correctly achieved within the terminal. This process has to be considered as an Audit and not a certification.
- A certificate of compliance to the rules of Hoplink, described in the Hoplink implementation guidelines, has to be obtained for the networks which implement this scheme of interoperability, in accordance with the Hoplink convention.