Japan-EU collaboration
to establish an interoperabilityof smart IC card system
Nagaaki OHYAMA
Imaging Science and Engineering Laboratory
Tokyo Institute of Technology
1Why do we need smart cards ?
Because we believe• smart card will be the key device,device which enables
us to keep safely and efficiently our digital data
or information that are indispensable for oursocial activities.
But, we do not think• smart card at present is infrastructure• smart card is as convenient as mobile phone• smart card reaches the mass production level2

What will happen in the information society ?
* In the information society, our social
activities will be expanded into thecyberspace in addition to the real space.
* Selection of the spaces should bedefinitely up to users.

3

Social Activities in the real world
Tax office

Hospital

City hall

Shopping mallBank

Foreigncountries

School, Library4Social Activities in the Cyberspace
Hospital
Tax

City hallofficeShopping
CenterBank

Foreigncountry

School, Library5What should we do for the information society ?
• Everything that we need for social activities shouldbe electronic so that their functions can be digitallyperformed.
– Concrete object• Money⇒ Electronic Money• Signature ⇒ Electronic signature

etc.

– Intangible asset• Right ; Election, medical care, etc.
• Duty ; Tax, education, etc.

citizenship• Entry points into the cyberspace had better beeverywhere.
– Computer, Kiosk, Public phone, home electronics etc.
– Multipurpose smart IC cards ⇒ Cyber space passport
6

Hospital

City hallTax office

Health insurance
numberpatient ID etc.

Resident ID

Tax payer IDetc.

etc.

name
addresssexbirthdaynameaddresssex
birthdaynameaddresssexbirthday

etc.

etc.

Information necessary
to receive services
andto show licenses
Common Information

etc.

(name, address, sex, birthday)

Public sector : Services are subject to the constitution, regulation etc.

Bank

Shopping

account number
account typeetc.

credit card
numbercustomer ID

nameaddresssexbirthdaynameaddresssexbirthdayetc.

Cyberspace passport
CommonInformation

If possibleetc.

Patient ID
Resident ID
Tax payer ID
・・・

Private sector : Services are provided on the contract basis.

BankShopping

ＩＣ card7

Social Activities in the Cyberspace

In the public sectorHospital
City hallTax office

Shopping

Medical service ID

Tax payer ID

Resident
IDBankBank

Customer ID
Credit card

School, Library

Passport
for public services

In the private sector

Personal ID

Foreigncountry

Hospital
City Hall
Tax officeetc.

Membership ID

IC cardBank
Shopping Malletc.
8

Concept of Cyber-Passport* Cyber-passport is an electronic identification to be used tocheck the cardholder’s citizenship.
* Cyber-passport is originally issued by the government onrequest when people want to receive electronic
government services in the cyberspace.
⇒ Resident registration law has been revised* Cyber-passport may also record services that the holder
receives and licenses that the holder has.
⇒ Multiple application should be supported* Cyber-passport could also support electronic signature orinkan.
⇒ PKI should be supported
Note: the number of cards and the selection of the services
are totally up to the user’s choice9Japanese government’s actions
relating smart IC card systems• Electronic signature law from 1st of April, 2001
• Revised resident registration law from Aug., 2002
⇒ Personal Identification for public sector’s use⇒ 10-50 million people are highly expected to have smart
IC card from Aug., 2003, if it becomes convenient to thecard holder• Prior to the resident card, 1-3 million cards will beprocured by the end of 2001
• Smart IC card is officially defined as an interface
between e-government and individual• Japan will procure a huge amount of smart card 10

Smart card as an infrastructure
Common understandings– Infrastructure is not a dedicated system⇒ Multipurpose card system– Infrastructure should be beneficial toeverybody ; user, service provider, vender,etc.
⇒ Convenient, low cost by cost share- Through the mass production we can reduce
the production cost11

Business model for Multi-application card
Card
Card
authorization
authorization
centercenterCard
Card issuer
issuerregistration
registration
centercenterauthorize

ServiceService
registration
registration
centercenterregisterregistersell Card
ServiceCard
ServiceCard
Card
manufacturer
issuerprovidermanufacturer
issuer AP loading provider
IssueIC card/load AP

Provideservice/load AP

Card
holdercard
Card holder（holder（IC card）
card）
holder（（ICcard））
Cost share becomes possible

12Benefits to the players• Card Holder– Selection of the services -> optimized card
– Most convenient– Less number of cards• Card Issuer– Reimbursement of card cost
– Card holders’ satisfaction• Service Provider– Reduction of the initial installation cost
– High security card at low cost
13

Authorize

Request Permission

Request Permission
Local Gov.

ServiceProvider

ServiceProvider

Authorize
Card Issuer
ServiceServiceComm. Inf.
Card issue

IC card Appl.
Appl. Download
Appl.
Appl. Download
Servicerequest

Cardrequest

Service request

Card Holder

14Requirements to the smart card system• Multi-purpose– Users can select services as they want
– The number of cards is up to the users• Asymmetric encryption algorithm– Electronic signature• Contact-less interface– Reduction of maintenance cost
– Combination of different cards; Cf. ownershipex. Bank card and ID card
15

Requirements to the smart card system subject togovernment procurement (proposal)
1. ISO compliant
2. Technical neutral -> independent of CPU, OS, language
3. Interoperability– Common information ; low level interoperability as datacarry use– Card and R/W for contact-less interface
4. Multi-purpose– Completely independent ; concept of APDU
5. Asymmetric encryption algorithm– Objective assessment ; IPA security center
6. High security of card, PP ; ECSEC
16

Process to the procurement•

List up all possible cards by asking the venders on a
voluntary basis•

Organize expert groups to meet the requirements•

Achieve laboratory test to check the interoperability•

Make a list of cards subject to the procurement•Local government procures IC card among productsin the list considering needs, price and performancesuch as processing speed and memory capacity

We ask a collaboration to European side in the steps 117
4.