re: SIM Cards - an overview from Cannes
>> Integration - The Key To Smooth Migration To Next Generation Services In Smart Card Development
James Moore
Adrian Baschnonga
EMC Cellular
15-Mar-2001
The 3GSM World Congress, held in Cannes from 19-23 February 2001, saw a spate of announcements from the world's leading smart card companies. Given the need for a smooth migration path to 3G services, concurrent developments addressing different service delivery mechanisms proliferated. Many of the new products announced owed their development to the large base of Phase2+ handsets. SIM Toolkit access of WML content is vital given the still small WAP handset base. However, the need for secure transactions to enable m-commerce is a key driver for the creation of WAP Identity Module (WIM)- and Public Key Infrastructure (PKI)- based smart cards.
The increasingly fluid value chain has witnessed smart card manufacturers assuming a more solution-based strategy, outgrowing pure focus on Subscriber Identity Module (SIM) developments. France-based Schlumberger has partnered with BT mobile subsidiary Manx Telecom to create a UMTS network. Incorporating Schlumberger's USIMERA USIM card, both Phase2+ SIM Toolkit-based value added services and 3GPP standards are supported through a Java engine. WIM capability, enabling secure transactions through a PKI system, is also featured.
ORGA Kartensysteme is also taking a cutting edge role in service provision, supplying the prepaid billing system for Swiss operator Sunrise Communication's imminent GPRS network. Schlumberger has also partnered with Slovakian operator Euro Tel Bratislava to deliver a multi-bank mobile banking service. Using Simera Java SIMs, the service caters for Phase2+ handsets: transactions are authorised with an applet-specific PIN while security depends upon digital signatures. Germany-based Gesiecke & Devrient announced that it is supplying China Mobile Communication Corporation (CMCC) with SIMs in conjunction with its STARSIM platform. This partnership builds on existing deals with Czech GSM operator Radiomobil and SONOFON of Denmark - in January 2001 the STARSIM browser was enhanced by a PKI plug-in, confirming the platform's secure credentials.
Meanwhile, France-based Gemplus has launched Mobitrust in association with France Telecom Mobiles and Certplus. A security infrastructure designed for WAP transactions and based on PKI, services enabled include gambling and betting, stock trading, banking services and ticketing. Gemplus provides its GemXplore Trust SIM/WIM card which launches the digital signature.
In order to maximise expertise across the value chain, Oberthur Card Systems has pursued different strategies: a partnership with market leader Sonera SmartTrust has been formed in order to deliver 'off the shelf' financial solutions across both the fixed and mobile internet channels. Other partnerships have yielded specific services - in association with France Telecom Mobiles and Carte Bleue, Oberthur demonstrated a mobile ticketing solution using a SIMphonIC SIM. Furthermore, Oberthur announced the implementation of EMV-based mobile payment in association with Europay International, Credit Mutuel and France Telecom Mobiles using a Motorola Timeport handset.
As the need for standards-based secure environments increases, collaboration between smart card players has continued. Already the SIMalliance has defined interoperability specifications for Java Card technology 2.1 - Java based cards from Gemplus (GemXplore 'Xpresso), Oberthur Card Systems (SIMphonIC), and Schlumberger (Cyberflex Simera) are fully interoperable.
In February 2001 SIM supplier Bluefish Technologies and secure SIM plaform provider mobEcom announced an agreement to develop secure m-commerce solutions around mobEcom's SecureSIM card platform. Based on the MULTOS smart card environment, the companies intend to present the solution to operators, initially in Europe, the Middle East and Africa.
Bluefish is unique because it uses a 'virtual' manufacturing approach in which the SIM card manufacturing is outsourced to several small SIM card manufacturing players who have struggled to survive on their own against the likes of 'big boys' such as Gemplus and Schlumberger. Many Bluefish employees such as Mark Castle have come from Orga and have seen so much investment being poured into the SIM card manufacturing process (establishing a SIM card manufacturing factory is a multi-million operation) and not enough given into developing marketing and developing the SIM card applications. Bluefish was only established in 2000 but, with large investment backing from Germany, has already built up a visible presence in the SIM card arena. It has offices in Germany and in the UK. It has already signed some SIM card deals with operators although it is still keeping quiet about which ones it has signed up. In January 2001 Bluefish joined the MULTOS Global Supplier Network (GSN). Since the introduction of SecureSIM, the MULTOS platform has become an attractive option for SIM card manufacturers and application developers. The MULTOS open environment provides the secure space for additional third party applications. MULTOS cards are claimed to have significant advantages over Java Cards. These advantages of MULTOS cards include:
* Improved security with the requirement to achieve security evaluation to ITSEC E6
* Quicker execution of MULTOS applets
* Generally smaller application code size
* Improved interoperability (with Open Platform specifications written in insufficient detail to provide interoperability between Java Card manufacturers)
Enhanced development tools.
(ITSEC stands for Information Technology Security Evaluation Criteria)
mobEcom, the SIM card based software solutions provider, was also exhibiting at Cannes. mobEcom is a young company which was established in 2000 and based in Scotland and is a wholly owned subsidiary of Aspects Software Limited. mobEcom in January 2001 received a GBP 12 million injection of investment capital. The company is now said to be valued at around GBP 30 million. At Cannes mobEcom announced a joint venture with prepay solution provider SmartPrepay to develop a secure prepay top-up solution using the mobile phone. The solution is based on a secure payment transaction over SMS under the control of SecureSIM. Value is transferred from a electronic cash smart card in a dual slot mobile to a payment server which is linked to the network operator's billing system. This transaction is followed by an online top-up of airtime.
Bull CP8 was also exhibiting. Like many other SIM card manufacturers such as Gemplus, Bull CP8 is based in France. In fact earlier in February 2001 Schlumberger signed a definite agreement to purchase Bull CP8 (). At the moment it is too early to say how Bull CP8 will be integrated into Schlumberger's overall SIM card strategy. Bull CP8's products include 8k SIM cards to 64k SIM cards based on the Java platform and compliant with the WIM standard enabling enhanced secure Internet access from mobile phones. In 3G systems, Bull CP8 has partnered with the Japanese company DNP to develop a 3G USIM card to the Japanese market. The cards are based on the ZePlatform which is a new software architecture for 32-bit chip.
Also present was Incard which is an Italian smart card manufacturer. Incard is part of the IPM Group, a Italian telecommunication company. It has two factories in Marcianise (Italy) which produces 60 million cards a year and in Barquisimeto (Venezuela) which produces 15 million cards a year. Incard offers the MoKard which is a phase 2+ GSM SIM card with a Java Virtual Machine fully compliant with Java Card 2.1.1 specifications. It is developed on a 32 bit RISC Core microprocessor and offers an open multi-application environment. Incard claims to be able to meet the major challenges facing the smart card industry in the coming years. It sees these as:
* Reconciliation of mass production with product personalisation
* Increased flexibility and shorter time-to-market for new products
* Total system approach to customer demand.
With PKI now widely accepted as the standard enabler for secure m-commerce solutions, GSM World Congress 2001 witnessed PKI-led new products from the leading players. In addition to complementing STARSIM with PKI functionality, Gesiecke & Devrient launched STARWIM, with a world first, live demonstration. An integrated SIM Application Toolkit with WAP Identity Module (WIM), it also features PKI.
Cannes also saw the launch of the latest version of Gemplus's PKI-enabled GemXplore 'Xpresso Java Card.
Finland-based Setec, long regarded as leaders in smart card security, launched a PKI based smart card through a deal to Norwegian operator Telenor. In October 2000 were the first smart card manufacturer to combine EMV, the de facto standard for debit and credit bank cards developed by Eurocard, MasterCard and Visa, and PKI on the same 16K card - a deal has been struck with Finnish OKO Bank for multi-application banking. Setec claim to have launched the world's first SIM card with a RSA co-processor which enables a mobile phone to be used to produce a digital signature in a PKI. Setec has companies in Finland, Denmark, Poland, Sweden, Singapore and Thailand.
Innovative solutions aimed at the UMTS environment were also publicised at Cannes. ORGA Kartensysteme presented a suite of test tools for 3G smart cards which represents an enhancement of ORGA's existing Smart Card Explorer product for use with USIM. Gesiecke & Devrient announced its 3G product UniverSIM while Oberthur demonstrated its Java-based SIMphonIC 3G's ability to provide secure access to mobile music and games. Philippines-based Smart Communications's multi-application mobile portal, which uses Oberthur's 2G SIMphonIC card, won a GSM Association award for 'The Most Innovative Wireless GSM Service for Customers'.
Just as noteworthy were the variety of products announced to capitalise on existing GSM networks. Schlumberger announced its 'mix and match' XML-based internet access solution, which is targeted at GSM Phase2+ subscribers. Called Cyberflex N@vigate, it is a Java SIM/server/software combination that complies with S@T specifications from the SIMalliance and provides microbrowser access over SMS to WML content. Similarly Gesiecke & Devrient launched the STARS@T product family featuring microbrowser, OTA platform and Wireless Internet Gateway. Access to WML content is compounded by the ability to convert WML services into SMS format. In addition, Schlumberger has introduced its Smart Mobile data hub (SMHub), a connectivity service that can provide end-to-end links between content providers' servers and operators' SMS-C and WAP Gateway. The use of MobileMagic technology from the recent acquisition of PCS Innovations provides the multi-protocol capability for the SMHub. All these solutions infer the importance of catering for co-existing technologies. Furthermore, Gemplus has commenced a joint development with SLP Infoware to produce SIM-based CRM applications, again indicative of the need to leverage the inherent capabilities of the SIM. Real-time subscriber data can be used to identify subscribers likely to churn or to create opportunities to cross-sell, features that render this solution attractive for operators.
Conclusion
The SIM-based solutions promoted at Cannes conveyed the importance of cumulative service enhancement: a factor embraced by the breadth of products from smart card manufacturers on display. Interoperable Java environments, WML access via SIM Toolkit, WIM-on-SIM and 3G SIMs signify stress on extensible and flexible applications. 2001 is likely to see the adoption of the SIM Card concept in non-GSM areas: CDMA operators will implement the Removable UIM (User Identity Module) standard, initially to facilitate roaming. TDMA operators may exploit the shift to 2.5G and 3G technologies via the flexible SIM concept, invigorating a hitherto lacklustre US market for smart cards. Open platform technology is dominated by Java - contenders MULTOS and Smart Cards for Windows remain in the background. Schlumberger expects the world smart card industry for mobile communications to grow by 43% during 2001. <<
- Eric - |
