Modernising Government Conference

29 October 2004

Mike Eastham

Head of Technology ITSO Ltd

What is ITSO?ITSO is a membership

organisation (hence not a profit distributor)

ITSO was created to solve the challenge of implementing multi-player smartcard scenarios, (focused initially on transportation)

ITSO Objectives

To facilitate the development of an interoperable smart

environment by developing and then operating and

managing a specification for an interoperable smart ticketing environment.

Which required• Writing and Publishing a

Specification (now V2.1)• Setting up and managing

a security domain• Delivering a compliance

system (Certification)• Providing a Registrar

function

Security Domain• Development of a

Security Management Service

• Development of a Secure Application Module (The ITSO SAM)

Certification

• Supplier Registration - To be registered as a provider of ITSO

Certified equipment, systems etc. for use within the ITSO Environment

- (Free for Members)• Purchase Test Tools & Scripts

(Optional)• Testing & Certification of Equipment

to gain an ITSO Compliance Certificate

Registrar

• Schemes• Products• Shells• Organisations

The ITSO Environment

ITSO Shell Retailers

Service Operators

Security Management

Compliance

Certification / Test

Registrar

Core ServicesITSO Shell Owners Product Owners

Product RetailersCollection &

Forwarding Operators

So How does ITSO work?

ITSO delivers Trust between its licensed

members…

…by implementing loss-less security…

…across inherently insecure communications

paths…

…and through inherently insecure ‘existing’

systems

Transactions are securely passed from one part of the ITSO process to the next – minimising impact on existing systems.

ITSO Product Entities (IPEs) can model just about

anything through fixed and variable data…

…and the ITSO directory presents the

Smart Products independently & interoperably…

…with each owner’s key used

to seal…

..onto a range of media types

What is Interoperability?

• Interoperable between Modes i.e. Rail, Bus, Tram, Ferry etc.

• Interoperable between Systems or Schemes i.e. London, Scotland, Manchester, Birmingham etc.

The “Martini” Principle

• Any time

• Any place

• Any where

• Any media (card or other)

Why use ITSO?

• ITSO is now mandated for all transportation schemes receiving government support.

• ITSO provides the potential for a national environment within a single security domain facilitating “Martini”.

For the User

• ITSO can facilitate – Purchase a ticket at any ITSO

participating location– Use the “ticket” at any ITSO

participating location

• (Gives True Interoperability)

For the (Service) Operator

• Implement an ITSO service in the knowledge that:– Service can participate in any ITSO

scheme– Media can be used interoperably

(with suitable commercial product agreements)

– Systems and Equipment are not proprietary

– Additional Add-ons may be made with confidence that the new will work with the old.

For the (Scheme) Operator

• Implement an ITSO scheme in the knowledge that:– Media can be used interoperably

(with suitable commercial product agreements)

– Systems and Equipment are not proprietary

– Additional Add-ons may be made with confidence that the new will work with the old.

For the Supplier

• Suppliers are being encouraged to develop their equipment to become ITSO compliant.

• Clearly this means an end to “proprietary schemes”.

• But once development is complete facilitates entry to otherwise “closed” areas of the market.

How Much Will ITSO cost in Scotland?

• About 0.1% of Annual Turnover once mature

• (<£200k on £211million t/o)

• Take up costs around £150k

• ISAMs around £250k (assumes 5000 purchased

For the Scottish Public Sector

• ITSO provides the capability to inter-operate both between (inter and intra) schemes and modes of transport with an industry wide standard framework that works for all.

• This allows for a number of levels within the environment and can facilitate a single ITSO membership for the entire Scottish Public sector.