A User Centric Security Model for Tamper-Resistant Devices

3.2 Issuer Centric Smart Card Ownership Model (ICOM)
Communication Control. A smart card can communicate on dierent interfaces (e.g.
contact, contactless) and protocols as web enabling protocols [87], T1, T2 [88], and NFC-
WI [89]. The issuer can regulate the mechanism through which an application on their
smart card can communicate with o-card entities. For example, the Oyster application
on the Barclaycard OnePulse card will not communicate with any o-card entity through
a contact based interface. However, it does communicate via a contactless interface.
Marketing and Customer Loyalty. The plastic card surface is considered to be marketing
real estate by the card issuers. For most deployments, the card surface is used to
print the company names and logos. In the banking industry for example, a typical smart
card will have the issuer bank's name and logo. It might also have the insignia of the
payment clearing system (i.e. VISA, MasterCard or American Express, etc.). In addition,
the concept that having a smart card with a particular brand translates into the customer
loyalty to the organisation has its roots in the initial smart card deployment (i.e. Dinner's
Club card). Encouraging customer loyalty denitely had its benets in some industries like
banking, but it might be less benecial in industries like mobile telecom here the smart
card module is hidden inside the mobile phone.
3.2.2 Drawbacks of the ICOM
The ICOM has been successfully deployed over the past decade, but it has minor drawbacks
that are listed below:
Card Handling. Usually, an individual will require a number of smart cards 3 [91] for:
train or bus journeys, mobile phones, oce building access, internet/oce-network access,
banking/shopping and health services, and other purposes. With increasing numbers of
industries relying on smart cards to provide their services to customers, the customer's
wallet is becoming crowded with smart cards. Users of smart card-based services already
have to carry a large number of smart cards and with each new service they enrol for,
they get more. To maintain and manage these cards sometimes becomes troublesome to
cardholders who have to use diverse services.
Stringent Model. The concept of the smart card as a medium for promoting customer
loyalty and as a marketing avenue took centre stage in business strategy; dierent card
issuers started to consolidate their customer base and this in turn created a situation in
3 A Survey [90] conducted in 2008 by Federal Reserve Bank of Boston showed that an average American
consumer has 5.4 banking cards (i.e. prepaid, credit, and debit cards).
56