Document (Project) Title: WP7 01C Bolton Pilot Specification

Heading

Document (project) Title: WP7 – 01c – Bolton Pilot Specification

Version (release): 1.231

Date: 25th March 2004

Document History

Document location:

Revision History:

Approvals:

Distribution – distributed to:

Bolton Pilot Specification

Report WP7 – 01c

Version 1.2132.0

March 2004

© Bolton Metropolitan Borough Council for the National Smart Card Project

WP7-01c - Bolton Pilot Specification v2.0 release1 2 12/11/2018

1.Abstract

This section of the National Smart Card Project (NSCP) defines and pilots a Cross-Regional Local Authority Smart Card Scheme. Such a scheme includes use of the smartcard for transport across the region (using ITSO Ticketing), use by applications (such as Library and Leisure Systems) that just utilise the smartcard for identification and enrolment, and use by applications (such as School Systems) that require an electronic purse. The scheme uses the Card Management System produced by Cornwall CC as part of the NSCP Starter Pack.

This document defines the infrastructure and software produced and tested to support the pilot, including:

• The definition of the Card Scheme
• The appearance, content and capabilities of the cards
• The infrastructure supplied in the Data Centre, Back Office and Service points
• Requirements on the use and configuration of the Cornwall NSCP Starter Pack software
• Changes required to the enrolment Web site supplied by Cornwallthe NSCP.
• Details of the software and documentation to be produced
• Details of the testing to be done
• Specifications of work required from suppliers: Smart Card Solutions and Cornwall CCCornwall CC
• Specification of the enrolment process that will be supported for the pilot

One of the outputs of the project is a portable version of the enrolment software that will be used at Service Points. This consists of the Cardholder database and the enrolment application and Web site, installed on a notebook PC, with smartcard readers, a scanner and a Webcam attached, and can be used for demonstrations.

Table of Contents

1.Abstract

2.Introduction

2.1Scope

2.2Terminology

2.3Document Cross References

2.4Overview

3.Scheme Definition

3.1Card Appearance

3.2Card Services

3.3Evidence Required

4.Card Specification

4.1Card Contents

4.2CCDA Data

4.3Card Internal Layout

4.4Interfaces Supported

5.Enrolment Web Site

5.1Home Pages

5.2Information pages

5.3Enrolment Form – Personal Details

5.4Enrolment Form – Card Services

5.5Enrolment Form - Marketing Information

5.6Confirmation

5.7Citizen Logon

5.8Service Point User Logon

5.9Taking a Photograph

5.10Scanning a Signature

5.11Checking Evidence

5.12Changing details before the application is complete

5.13Searching for a user

5.14Specifying the Issuer

5.15Completed Application Form

5.16Changing the card status

5.17Cascading Stylesheet

5.18Reports

5.19Other Enrolment changes

6.Configuration of the Cardholder database

7.Print and Personalisation Application

7.1P&P Components

7.2Interim P&P process

8.Infrastructure

8.1Portable Enrolment Application

8.2Pilot Infrastructure

8.3Smart Card Enrolment Service Point Infrastructure

8.4Library and Leisure Centre Enrolment Infrastructure

9.Applications supported

9.1ITSO

9.2Libraries

9.3Leisure Centres

10.Software and Documentation Deliverables

10.1Software

10.2Documentation

11.Testing

12.Processes

12.1Definition of Enrolment Process

12.2Post-Issuance Card Management

13.Third-party requirements

13.1Smart Card Solutions (SCS)

13.2NSCP

14.Appendix 1 – National Smart Card Project Glossary

1.Abstract...... 3

2.Introduction...... 6

2.1Scope...... 6

2.2Terminology...... 6

2.3Document Cross References...... 6

2.4Overview...... 7

3.Scheme Definition...... 8

3.1Card Appearance...... 8

3.2Card Services...... 12

3.3Evidence Required...... 13

4.Card Specification...... 19

4.1Card Contents...... 19

4.2CCDA Data...... 19

4.3Card Internal Layout...... 23

4.4Interfaces Supported...... 23

5.Enrolment Web Site...... 24

5.1Home Pages...... 24

5.2Information pages...... 26

5.3Enrolment Form – Personal Details...... 27

5.4Enrolment Form – Card Services...... 28

5.5Enrolment Form - Marketing Information...... 29

5.6Confirmation...... 29

5.7Citizen Logon...... 29

5.8Service Point User Logon...... 30

5.9Taking a Photograph...... 31

5.10Scanning a Signature...... 32

5.11Checking Evidence...... 33

5.12Changing details before the application is complete...... 34

5.13Searching for a user...... 35

5.14Specifying the Issuer...... 36

5.15Completed Application Form...... 37

5.16Changing the card status...... 38

5.17Cascading Stylesheet...... 38

5.18Reports...... 39

5.19Other Enrolment changes...... 40

6.Configuration of the Cardholder database...... 40

7.Print and Personalisation Application...... 41

7.1P&P Components...... 42

7.2Interim P&P process...... 42

8.Infrastructure...... 43

8.1Portable Enrolment Application...... 44

8.2Pilot Infrastructure...... 45

8.3Smart Card Enrolment Service Point Infrastructure...... 48

8.4Library and Leisure Centre Enrolment Infrastructure...... 48

9.Applications supported...... 49

9.1ITSO...... 49

9.2Libraries...... 50

9.3Leisure Centres...... 50

10.Software and Documentation Deliverables...... 51

10.1Software...... 51

10.2Documentation...... 51

11.Testing...... 52

12.Processes...... 53

12.1Definition of Enrolment Process...... 53

12.2Post-Issuance Card Management...... 53

13.Third-party requirements...... 54

13.1Smart Card Solutions (SCS)...... 54

13.2NSCP...... 55

14.Appendix 1 – Glossary...... 56

1.Abstract...... 3

2.Introduction...... 6

2.1Scope...... 6

2.2Terminology...... 6

2.3Document Cross References...... 7

2.4Overview...... 8

3.Scheme Definition...... 9

3.1Card Appearance...... 9

3.2Card Services...... 12

3.3Evidence Required...... 14

4.Card Specification...... 1920

4.1Card Contents...... 20

4.2CCDA Data...... 20

4.3Card Internal Layout...... 24

4.4Interfaces Supported...... 24

5.Enrolment Web Site...... 2425

5.1Home Pages...... 25

5.2Information pages...... 27

5.3Enrolment Form – Personal Details...... 28

5.4Enrolment Form – Card Services...... 29

5.5Enrolment Form - Marketing Information...... 30

5.6Confirmation...... 30

5.7Citizen Logon...... 30

5.8Service Point User Logon...... 31

5.9Taking a Photograph...... 32

5.10Scanning a Signature...... 33

5.11Checking Evidence...... 34

5.12Changing details before the application is complete...... 35

5.13Searching for a user...... 36

5.14Specifying the Issuer...... 37

5.15Completed Application Form...... 38

5.16Changing the card status...... 39

5.17Cascading Stylesheet...... 39

5.18Reports...... 40

5.19Other Enrolment changes...... 41

6.Configuration of the Cardholder database...... 4142

7.Print and Personalisation Application...... 4243

7.1P&P Components...... 43

7.2Interim P&P process...... 4344

8.Infrastructure...... 4445

8.1Portable Enrolment Application...... 45

8.2Pilot Infrastructure...... 46

8.3Smart Card Enrolment Service Point Infrastructure...... 49

8.4Library and Leisure Centre Enrolment Infrastructure...... 49

9.Applications supported...... 50

9.1ITSO...... 50

9.2Libraries...... 51

9.3Leisure Centres...... 51

9.4Schools...... 52

10.Software and Documentation Deliverables...... 53

10.1Software...... 53

10.2Documentation...... 53

11.Testing...... 54

12.Processes...... 55

12.1Definition of Enrolment Process...... 55

12.2Post-Issuance Card Management...... 55

13.Third-party requirements...... 56

13.1Smart Card Solutions (SCS)...... 56

13.2Cornwall CC...... 57

14.Appendix 1 – Glossary...... 58

2.Introduction

2.1Scope

This document describes the creation of tested infrastructure to support a Bolton and Blackburn with Darwen Cross-Regional Local Authority smartcard, and software to allow legacy applications to use the smartcard for authentication, enrolment and proof of entitlementss.

The actual running of the pilot is not covered. Interfacing with Oracle CRM is not included – the pilot infrastructure will be based on use of the Cornish NSCP Starter Pack enrolment software. Work on Oracle CRM is an independent project that is proceeding in parallel with developing the pilot. Takeing on of the final version of the CornwallNSCP Card Management software is not included in the deliverables described in this document. The software delivered for supporting the pilot is based on CornwallNSCP software obtained in January and February 2004, and, in particular, is based on an interim version of the Print & Personalisation software. Because of this the P&P system is manual and time-consuming to run.

The developments described in this document were due to be complete by 31st March 2004.

2.2Terminology

LALocal Authority

CMSCard Management System

PKIPublic Key Infrastructure

CCDACommon Cardholder Data Application

PC/SCStandard for PC access to ISO 7816 Standard Smart Cards

SCSScart Card Solutions

USBUniversal Serial Bus

ITSOIntegrated Transport Smart Card Organisation

AIDApplication Identifier

T=0Character mode ISO 7786-4 interface

T=CLContactless ISO 7786-4 interface

STRStored Travel Rights

GMPTEGrater Manchester Passenger Transport Executive

SAMSecurity Access Module

ISAMITSO Security Access Module

IPEITSO Product

ISAITSO Shell Account

IPAITSO Product Account

P&PPrint and Personalisation

2.3Document Cross References

[1]WP7National Smart Card Project Work Package Seven Definition

[2]WP9National Smart Card Project Work Package Nine Definition

[3]Bolton MBC: Design and Architecture for a LA Smart Card Scheme

[4]Bolton MBC: Smart Card CRM Integration

[5] Bolton MBC: Smart Card API for Legacy Integration

[6]Work Package 7 – Sub Project: Cross Boundary Smart Card Pilot

[7]National Smart Card Project: Smart Card Enrolment & Application Processing

[8]ITSO Early Adopters Pre ISMS Security Arrangements

[9]National Smart Card Starter Pack 1.0: Overview

[10]National Smart Card Starter Pack 1.0: Card Data Displayer

[11]National Smart Card Starter Pack 1.0: Journal application

[12]National Smart Card Starter Pack 1.0: Citizen Enrolment

[13]National Smart Card Starter Pack 1.0: Cardholder Database

[14]National Smart Card Starter Pack 1.0: System Requirements

[15]ITSO Specification version 2.1 (parts 1 – 10)

[16]National Smart Card Project: Smart Card Personalisation and Issuance

[17]BMBC SmartCard Pilot: Change Request BMC033

[18]National Smart Card Starter Pack 1.0: Smart Card Production Requirements

[19]SCS Quotation: Personalisation Software for Bolton Smart Card Project

[20]SCS: National Smart Card Project: ITSO Applet

[21]National Smart Card Project: National Smart Card Strategy

[22]SCS: National Smart Card Project: New Starters – File and Data Structures

[22]SCS: National Project CCDA Specification

[23]SCS: National Project: ISO File Handler Design

[24]HMG’s minimum requirements for the verification of the identity of Individuals

2.4Overview

The pilot is intended to demonstrate the use of a Cross Regional LA smartcard for:

• Bus journeys across the region using the ITSO Ticketing standard
• Use of the smartcard for authentication and enrolment in Libraries and Leisure Systems in more than one LA area.

It was intended that the pilot should also demonstrate use of the card in schools for catering and registration. However, this is no longer planned in the timescales of this development. The timescales of the pilot are not yet fixed and are dependent on when the Bus companies involved - Lancashire United (owned by Blazefield) and their ticketing equipment supplier (Wayfarer), are ready to start. This in turn is dependent on the progress of the NoWcard ITSO pilot. There is also a dependency on GMPTE supporting use of travel concessions on the card for Bolton residents. The pilot was not able to start before the 31st of March when the current phase of the National Smart Card Project ended, but it is intended that the infrastructure and software defined in this document will have been tested and ready to run a pilot by then. However, the ITSO POST and ITSO HOPS components and hence support for ITSO was not complete by 31st March as ITSO POST and ITSO HOPS components were not yet availableis not available as at the time of writing – see section 7.1.

The currentAt the time of writing, the target date for starting the pilot is the second half of June 2004.

The pilot is usinguses JCOP30 cards supplied by Cornwall CC. These have only 16kb of EEPROM and fitting the required data in the available memory space is a challenge and has led to some compromises in how much data that can be written to the card. In particular there are compromises in the length of data field labels and what data can potentially be PIN protected – see section 4.1.

3.Scheme Definition

The pilot supports two schemes: one for Bolton and one for Blackburn with Darwen.

3.1Card Appearance

3.1.1Card Front

The personalised aspects of the card front are shown in the diagram below - they are the same for both Bolton and Blackburn. The photograph will have rounded edges. The card number will be in the OCR-A font. The citizen name will be in Arial font

The Bolton card looks like:

and the Blackburn with Darwen one:

3.1.2Card Back

The Bolton card back looks likeThe reverse of the Bolton Card is as follows::

The Blackburn equivalent will have Blackburn names, numbers, address and Web site, but will otherwise look the same.

3.1.3Scheme Logos

There will be no scheme logo, other than the issuer logos and the ITSO Logo.

3.1.4Issuer Logos

Bolton

Blackburn

Local e-gov

3.1.5Scheme Details

Bolton

Property

Value

Blackburn

Property

Value

3.2Card Services

3.2.1Authentication

Using the card for authentication will be mandatory, but as this cannot be enforced by the CornwallNSCP software, it will need to be done by a business process.

The only authentication level available for the pilot will be level 1.

The evidence accepted for this follows reference [24] and is shown in section 3.3. It is a combined list of the accepted evidence for Identity, Active in the community or third-party collaboration.

The date of the date that eligibilityevidence is checked and if that evidence has an expiry date, thiswhen it expires (review required date) is also captured and stored on the card.

3.2.2Eligibility

A standard eligibility model is defined for using the smartcard as proof of eligibility in any LA smartcard-enabled application. (At least TALIS and FLEX, and possibly GLADSTONE MRM and GALAXY, for the pilot).

The intention is that that the card can be used during enrolment both to fill in the citizen details and to prove eligibility for concessions. The mapping of eligibility data onto concessions will be different for different applications: a Leisure card for example may have 3 or 4 levels of concession, each requiring different combinations of the eligibility data.

Where eligibility has an expiry date, the date is also captured. For the pilot these will all be set to a fixed date (currently 31/7/2005).

The categories of eligibility supported for the pilot are:

Student: Y/N and expiry date

Proof of age: Y/N

Proof of Unemployment: Y/N and expiry date

Proof of reduced mobility: Levels 1 and 2 and expiry date

Proof of special needs: Levels 1 and 2

Proof of income level: Levels 1 and 2, and expiry date

The corresponding proof for the different levels is shown in section 3.3. Each level has its own evidence category.

3.2.3Travel Concession

Travel concessions are different for Bolton and Blackburn.

Both have an “over 3 miles to school” free pass, proved by authorisation from the LEA.

Bolton has a disability free pass with an evidence category of several special needs categories.

Bolton has a half price with maximum 40p concession and Blackburn has a half-price travel concession. Bolton’s is for disability (lesser disabilities than the free pass), students, under 16, and senior citizens. Blackburn’s is for disability (different evidence list to Bolton), under 16 and senior citizen.

However, for the pilot only the age-related concessions (under 16 and senior citizen) will be available, for both Bolton and Blackburn.

3.3Evidence Required

The following lists show the evidence required for each “Application”, i.e. for each level of each card service. The authentication evidence follows the recommendations in [24].

Application:Address Verification

Evidence Type :Proof of Address (Active in the community)

Bank / Building Society Statement or passbook

Benefits Book or original B.A. Notification Letter

Confirmed by Electoral Register Search

Court Order

Current Full UK Driving Licence (Old Version)

Current UK Driving Licence (Photo Card Type)

Local Authority Tax Bill

Local Council Rent Card or Tenancy Agreement

Recent Original Mortgage Statement

Recent Utility Bill or Certificate

Record of Home Visit

Application:Authentication Level 1

Evidence Type :Authentication - Level 1

3rd Party Corroboration

Adoption Certificate

Bank / Building Society Statement or passbook

Benefits Book or original B.A. Notification Letter

Birth Certificate

Building Industry Sub-contractor's Certificate

Certificate of Employment in HM forces

Confirmed by Electoral Register Search

Court Order

Current Firearms Certificate

Current Full UK Driving Licence (Old Version)

Current Signed Passport

Current UK Driving Licence (Photo Card Type)

Divorce or Annulment Papers

GV3 form for people who wish to travel in the UK

Home Office Letter IS KOS EX or KOS EX2

Local Authority Tax Bill

Local Council Rent Card or Tenancy Agreement

Marriage Certificate

Police Registration Document

Recent Inland Revenue Tax Notification

Recent Original Mortgage Statement

Recent Utility Bill or Certificate

Record of Home Visit

Residence Permit issued by Home Office

Application:Income Level 1

Evidence Type :Proof of Income - Level 1

Children's Tax Credit Award Letter + NHS tax credit exemption certificate

Current Notification of Council Tax Benefit

Current Notification of Housing Benefit

Working Tax Credit Award Letter + NHS tax credit exemption certificate

Application:Income Level 2

Evidence Type :Proof of Income - Level 2

Award Letter for Guaranteed Pension Credit

Award Letter for Income Support + bank statement (highlighted)

Award Letter for JSA (Income Based) ES40

Application:Mobility Level 1

Evidence Type :Proof of Mobility - Level 1

Disability Living Allowance - Book

Disability Living Allowance Letter + bank statement (highlighted)

Application:Mobility Level 2

Evidence Type :Proof of Mobility - Level 2

Disability Living Allowance (Higher rate mobility) - Book

Disability Living Allowance Letter (Higher rate mobility) + bank statement (highlighted)

Incapacity Benefit - Book

Incapacity Benefit Letter + bank statement (highlighted)

Severe Disablement Allowance - Book

Severe Disablement Allowance Letter + bank statement (highlighted)

Application:Proof Of Age

Evidence Type :Proof Of Age

Benefit Book - Retirement

Birth Certificate

Current Full UK Driving Licence (Old Version)

Current Signed Passport

Current UK Driving Licence (Photo Card Type)

National Blood Transfusion Service Card

NH Medical Card

Old Age Pension Book

Optical or Medical Prescription

Application:Senior Citizen Bus Concession

Evidence Type :Proof of Address (Active in the community)

Bank / Building Society Statement or passbook

Benefits Book or original B.A. Notification Letter

Confirmed by Electoral Register Search

Court Order

Current Full UK Driving Licence (Old Version)

Current UK Driving Licence (Photo Card Type)

Local Authority Tax Bill

Local Council Rent Card or Tenancy Agreement

Recent Original Mortgage Statement

Recent Utility Bill or Certificate

Record of Home Visit

Evidence Type :Proof Of Age

Benefit Book - Retirement

Birth Certificate

Current Full UK Driving Licence (Old Version)

Current Signed Passport

Current UK Driving Licence (Photo Card Type)