Affina Profile & Scripting - SMP

NETiiS
Datacard Instant Card Issuance Solution
May 2010

What is the Instant Card Issuance ?

Instant Card Issuance
• Instant card issuance is an end-to-end process
allowing to personalize cards on-demand, on-thespot
and deliver it immediately in final customer’s
hand.
• The customer leave the counter with an active card
that can be used immediately for payment or cash
withdrawal.

Instant Card Issuance
Customer
Branch
Card
Usage
Enrolled
- Card/Image Selection
Card
Issued

How does it work ?

Generic Central Issuance Flow
Creation
Batches
Branch
CMS
Report
Perso Center
Card
Authorization server

Report
Generic Instant Issuance Flow
Creation
Activation
Public area
Request
CMS
Authorization server
Production
area
Production
Instant Card
Issuance Server
Branch
Usage

Datacard Instant card Issuance Solution…
NETiiS

Proposed Architecture

Netiis Components

Central server main functionalities
• Functionalities
– Interface with any Card Management System
– Users strong authentication & users administration
– Centralized data personalization
• Magstripe personalization
• EMV data preparation & chip personalization
• Graphical personalization (embossing, thermal printing…)
– Web based technology
– Can enable cardholder PIN selection at the point of sales
– Auditing and tracking mechanisms
– Production reporting & acknowledgment
– Inventory management
• Centralized solution, everything is done on the server side
– Thin clients for POS & administration GUI
– The personalization machine acts as a remote controlled printer
– Centralized HSM

Affina Issuance software
• Re-use of Affina Smart Card Issuance Software to
easily implement centralized & decentralized
issuance with the same smart card issuance
platform

Affina Issuance Software
• Affina Personalization Manager
• Manage keys and personalization applications on a central
server
• Can manage multiple smart card objects (contact, contactless)
• Can manage high volume and desktop Datacard equipments
from a single point of control (TCP/IP connection)
• Affina One Step
• On demand & centralized data preparation system
• Perfectly suitable for Instant Issuance model
• Affina Profile & Scripting
• Scripting software for personalization application development
• Open standards (GlobalPlatform, PKCS#11) for cost-effective
development
• Affina Multos
• Offer a quick an easy implementation of Multos based
smart cards program

What about security ?

Security concept
• The security of a card issuance solution is based on both logical and physical
security measures
• Implementing it is a combination of security measures around hardware,
software and operational procedures
• Our objective is to propose adapted solutions for the targeted environment
(retail, bank…) and business model
• By adding various security features in our hardware and software offer to either
in certain cases limit the need of procedures/countermeasures or facilitate the
implementation of such measures
100%
80%
60%
40%
Process
Software
Hardware
20%
0%
Case 1 Case 2 Case 3

Security features – Software
• Limit logical and physical access
• Physical access
• Solution hosted in a data centre with restricted access
• Sensitive elements of the solution are centralized (HSM, personalization applications, cardholder
information…)
• Logical access
• Secure network with firewall & DMZ (split GUI and sensitive data)
• Application access granted only after user authentication (unique ID & logon)
• Access to features are granted by role definition and some by dual control (remake, keys…)
• Cardholder data protection
• Sensitive data are encrypted in the central database and purged when no business need
• PIN and sensitive data are end-to-end encrypted from server to personalization unit
• Tracking & audit
• Log instant issuance activity ( actions & users) on the central server
• who, what, when, where
• Reporting & stock control
• Elaborate production report for each location by administrator
• Facilitate operation by stock control & reconciliation (virgin cards, good cards, spoiled
cards, operator rejected cards)

Datacard Instant Issuance Server
• Web based solution for easy deployment and remote
maintenance
• Automatic or manual remote inventory function
(depending of HW)
• Re-use of proven software for smart card issuance
(Affina Issuance) for a cost effective & secure
implementation
• Can manage both central & decentralized issuance
with same software to protect your investment
• Multiple card program management to decrease
cost/card investment
• Multilingual GUI configurable a the station level

A modular and evolutive architecture
• Each trade function is a module
User Authentication (smartcard today)
GUI (Operator and Administrator)
Device control (Pin pad, perso machine…)
Production report
Stock control
Smartcard personalization (Affina Issuance)
• Can easily implement new trends like NFC,
contactless, keyfobs and other form factors

Datacard Instant Issuance at a glance
• Unique player to offer both HW & SW compliancy between Central
issuance platform & Instant Issuance platform
– Offer flexible solution to control personalization process in both central &
instant issuance
– Common data preparation & personalization process
• Large numbers of EMV solution implemented
– Smartcard expert
– Card manufacturer independent
– Card Management System independent
• Large numbers of decentralized solution implemented
– More than 2,000 retail stores already supported in Financial for more than 10 years
– Several projects with more than 400 locations per project
• Datacard International network & local partner
– Local deployment & support is key in large scale project
– Can support multinational deployment

Key Strengths
• “Real Time” card delivery
• PIN Branch selection
• Card issued in around 1 minute*
• Stock Management
• Centralised complexity & security
• Web based light client
• Re-use of proven software components
• Investment protection
• Centralised / decentralised real strategy
• Driving open standards / multi-cards
• Core product roadmap in line with technical
evolutions & regulations

Thank you !