white paper | november 2013 - home - sd … activating new mobile services and business models with...

20
Activating New Mobile Services and Business Models With smartSD Memory Cards White Paper | November 2013 www.sdcard.org | ©2013 SD Association. All rights reserved

Upload: vothuan

Post on 27-Jul-2019

214 views

Category:

Documents


0 download

TRANSCRIPT

111

Activating New Mobile Servicesand Business ModelsWith smartSD Memory Cards

White Paper | November 2013

www.sdcard.org | ©2013 SD Association. All rights reserved

11

2

Table of Contents

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

SD Association2400 Camino Ramon, Suite 375San Ramon, CA 94583 USATelephone: +1 (925) 275-6615,Fax: +1 (925) 886-4870E-mail: [email protected]

Executive Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Introducing the smart microSD memory card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Product Overview:smart microSD memory cards for NFC . . . . . . . . . . . . . . . . . . 6Product certification options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6The smartSD memory card ecosystem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6App and Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7Host integration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Mobilization of services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8The perfect fit for service providers/operators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

smartSD memory card life cycle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10Issuance and acquisition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11Go to market . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11Evolution of services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Main Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13For service providers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13For the card issuers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13For the consumer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Business case examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15Payment card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15Transit pass . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15Dematerialized loyalty card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15Express check out for retailers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16Parking meter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16Ticketing / VIP event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16Machine to machine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16Hotel room card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16Campus card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Enterprise . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Government/Secure communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17TSM operator & MNO . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18Handset bundle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18Self-service kiosks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18Secure services for multimedia inconsumer devices . . . . . . . . . . . . . . . . . . . . . . 19

Conclusion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

111

3

Definitions

App An application running on the mobilehandset

Applet A Java Card application running on the NFCSE; also called a cardlet

APDU Command for Java Card applet(Application Protocol Data Unit)

BoM Bill of Material, i.e. cost of the finished good

Dematerialized Many virtual loyalty cards sharing the card same physical microSD memory card

EMVCo Standard body that defined the ContactlessMobile Payment, Application ActivationUser Interface

microSD A memory card format defined by the SDAssociation

MNO Mobile Network Operator

NFC Near Field Communication, a contactlesscommunication, as defined by ISO18092standard 18092

NFC microSD A proprietary microSD form factor thatembeds an SE and a contactless antenna

Contactless Self contained microSD card with SE andsmart microSD contactless interface. The contactless

interface (ie NFC Card emulation) is notdefined by SDA

NFC SE A smartcard chip that is NFC capable, i.e. aSecure Element with SWP interface to NFCfront end

OTA Over The Air

PPSE Proximity Payment System Environmentdefined by EMVco that specifies thedefault payment card

PVR Personal Video Recorder

SDA SD Association manages standards relatedto SD, miniSD and microSD memory cards

SE Secure Element chip providing a securerun-time environment approved forbanking applet

A tamper resistant component used toprovide the security, confidentiality, andmultiple application environmentsrequired to support various businessmodels

SIM The Subscriber Identification Module usedto authenticate a subscriber on the mobilenetwork

smart microSD smartSD in a microSD form factor

smartSD smartSD is the general term defined bySDA for memory card that embed a SE

SWP Single Wire Protocol that allows interfacingwith NFC front end as defined by ETSI SCP(TS102 613)

TAM Total Available Market

TSM The Trusted Service Manager provides asecure gateway to remotely administratethe NFC SE

UICC Universal Integrated Circuit Card containsthe SIM applets and can store otherpersonal data

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

11

4Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

smartSD Memory Card Application Ecosystem

111

5

Executive Summary

Smartphones are everywhere and rarely outside consumers’reach, giving service providers unprecedented reach into theircustomers’ daily lives. Mobile phones have created a newchannel to deliver exciting new services to consumers andmobilization of services is becoming a strategic imperative tobuild and extend your brand. This white paper presents thecompelling benefits of smartSD™ memory cards as not onlythe best, but also the easiest solution to enable Near FieldCommunications card emulation and deploy mobile securitytokens on mobile devices.

Using smartSD memory cards as the Secure Element formobile payment and identity enables value-added services tobe interoperable across millions of devices, thousands ofconsumer products and hundreds of global brands. Newopportunities in mobile commerce, advertising, location-based services, access control, rewards programs andtransportation emerge.

At a minimum, smartSD memory cards can achieve securitycertification as smartcards and security tokens and, therefore,can be used to bridge existing services with various mobiledevices, including mobile phones.

However, smartSD memory cards are more than just anotheroption for contactless communication or smartcard andsecurity features. smartSD memory cards carry the marketweight of the SD™ standard, including access to more than 78percent of mobile phones in the world, SD portability andremovability that enables many business models and providesconsumers with unmatched value for device and data control,and the global mindshare and familiarity with the SD memorycard brand.

The smartSD memory card also supports a consumer-centricbusiness model envisioned by GlobalPlatform™ that sets inmotion a virtuous ecosystem and ultimately creates value forall parties.

smartSD memory cards offer service providers and cardissuers a superior approach to deploy secure NFC services tothe total available market using existing business processes.smartSD memory cards help service providers and card issuersreach the largest audience, retain business independence,launch easier and with lower costs, and differentiate theirservices.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

The smartSD memory card also supports a consumer-centric businessmodel envisioned by GlobalPlatform that sets in motion a virtuousecosystem and ultimately creates value for all parties.

11

6

smartSD is the general term defined by the SDA for memorycard that embed a Secure Element (SE). It is applicable to allSD memory card formats and form factors including full-sizedSD and microSD memory cards.

Product Overview:smart microSD memory cards for NFC

The smartSD memory card features a Single Wire Protocol(SWP) pin for NFC-compliant contactless communicationand an SE running Java Card technology. As such, thesmartSD memory card is transformed into a secureenvironment to run Java Card applets. It complies withlegacy microSD specifications and maintains its portableand universal storage capabilities. The embedded SE is atypical smartcard chip that features the exact same level ofsecurity as other smartcard form factors.

Typical target usages are:

• Security token: in that configuration the card-securedrun time environment is typically used to protectcredentials used for authentication, digital signature,data encryption, etc.

• Secure Element: in that configuration the host device isNFC enabled and the smartSD memory card is used asan SE in the host device

• NFC card emulation enabler: some products also havean embedded antenna that is permitted to bring NFCcard emulation to the host device with and without NFC

A single smartSD memory card with NFC supports multipletarget usages simultaneously.

Product certification options

Smartcard certification is for the smartcard chip, not thesmartSD memory card or any other smartcard form factoritself. Manufacturers can embed standard smartcard chipsin smart microSD memory cards. The smartSD memory cardform factor supports exchanging APDUs and allows forISO14443 contactless communication. Therefore,certification depends entirely on the specific smartcard chipthat has been embedded and the same certifications canbe achieved as for any smartcards.

Manufacturers could embed smartSD memory cards withsmartcard chips certified for common criteria target securityprofiles, including Visa®, MasterCard®, American Express®,FIPS 140-2 and more. Obtaining certification is a businessdecision.

The smartSD memory card ecosystem

smartSD memory cards present more benefits forstakeholders than any other contactless communicationsolution. The smartSD memory card category provides avariety of storage capacities and speed choices for bothpopular form factors: full-sized SD and microSD. This meansit’s possible to issue cards: • smart SD• smart microSD• smart SDHC™• smart microSDHC™• smart SDXC™• smart microSDXC™

plus a variety of bus speed choices including legacy speedor the faster UHS-I and UHS-II bus speeds for each of theaforementioned card options.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

Introducing the smart microSD memory card

111

7

These choices make it possible for service providers to offersmartSD memory cards with a wide variety of popularconsumer-centric capabilities that only add to the value ofcards used in the market today. Memory cards can beissued by service providers or purchased directly byconsumers, as well as distributed by traditional operator-controlled smartcard channels.In particular, smartSD memorycards allow service providersto differentiate and determinea specific business model thatdoes not have to involve athird party. It provides morefreedom to the consumer who can change mobilephones and mobile operators without the hassleof losing or transferringcontactless services.

The smartSD memory cardwith NFC enables anecosystem that creates value for all parties. It is not like other approaches where a single party is perceivedto extract all the value at a disproportionate cost to allother parties.

Furthermore, the GlobalPlatform Consumer Centric Modelallows consumers, rather than issuers, to control multipleservices on a single smart microSD memory card. Thisecosystem becomes virtuous as more parties, users,services and applications use the same card, creatinggreater value for all parties.

The smart microSD memory card is not a transitionaltechnology simply waiting for NFC handsets to becomeavailable to the masses or until another SE takes over;rather, smart microSD memory cards offer the market acompelling value for today and tomorrow.

Driven by the SD Association and with the support ofGlobalPlatform, the smartSD memory card ecosystem willcontinually evolve to meet new industry needs, evengaining the ability for consumers to add third-party serviceson their smartSD memory card.

App and Services

The development of an NFC app is quite simple. It requiresknowledge of standard mobileapp development and takesadvantage of a few APIs exchange APDUs (commandsfor the applets).

On devices with multiple SEs thereis a need for the app or the user tospecify where and which virtualcard is the default to use. Forpayment, this is typically done by properly configuring the PPSEon each SE.

Host integration

smartSD defines a memory card that embeds an SE.The typical SE features JavaCard and global platform andcommunicates with APDU. SDA has defined ASSD as thetransport mechanism for APDU.

Contactless smart microSD is a self-contained solution for SE and contactless card emulation for most microSD host devices.

SDA doesn’t define the contactless interface.

smart microSD features a SE that is accessible through ASSDfor host applications and may connect to the host NFCfrontend via SWP.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

11

8

Mobilization of services

With smartphones and super phones becoming available to themasses and various app stores making it very easy to downloadnew applications, reaching the consumer’s phone is anemerging business requirement.

Mobilization of services is particularly relevant for services thatinvolve security such as smartcard, contactless services andsecurity tokens.

However, mobilization of aservice is not only a must-have capability but also astrategic move. It is a realopportunity to create newrevenue streams andstrengthen customerrelationships whiledifferentiating with a betteruser experience and value-added services. As such,mobilization should becarefully considered. The choice of the main SE could be criticalto keep control of the business model, easily differentiate fromcompetition creating a specific user experience, facilitate thego-to-market process and the development and release of new

features and value-added apps, and – perhaps mostimportantly – to reach all customers without any MNO orhandset model limitation.

Mobilization is typically successful when it takes advantage ofthe display and the connectivity of the phone. This is reallywhen value-add services shine on top of what contactlesscommunication already provides.

The smart microSD memory card with NFC, or contactless smartmicroSD, are the best approach to mobilize security services by:

• Delivering the largest market reach as more than 78 percentof mobile phones and thousands of other devices have amicroSD memory card slot

• Working on most users’ current phones independent fromthe mobile subscription and operator

• Offering unsurpassed portability and easy transfer by theconsumer to a device of choice

• Allowing familiar issuance processes that fit contactless cardand security token operation and business processes

• Providing an open choice of business models

• Simplifying the launch of services and reducing time tomarket and eliminating the need for third parties

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

ISO 7816-3 APDUover ASSD or proprietary transport APImicroSD memory card storage

ISO 7816-3 APDUover ASSDmicroSD memory card storage

Contactless microSD is a self-contained solution for SE andcontactless smart card emulation for most microSD hostdevices. SDA doesn’t define the contactless interface.

smart microSD features a SE that is accessiblethrough ASSD for host applications and mayconnect to the host NFC frontend via SWP.

111

9

However, the best solution isn’t enough to make it a long-term successwithout good consumer value propositions.

The smartSD memory card makes mobilization easier so you can focus ondelivering your value propositions. The key to driving market adoption isto understand what it takes for consumers to change their habits and tounderstand their perceived value of the services as well as knowing whatvalue would inspire them to buy the service or the smartSD memory card.

A smartSD memory card with NFC is not expensive to the consumer since itis likely comparable to the cost of one dinner at a restaurant. However,demonstrating and promoting consumer benefits is important to facilitateadoption and potentially transfer the entire cost of the card to the consumer.

Here are some typical examples applicable to various markets:

• Plus, smartSD memory cards include the typical benefits from theworld-leading memory card form factor

• Benefit of legacy memory cards: extra portable storage for end-usercontent and data

• Easy to upgrade mobile phone/tablet, keeping all services withoutservice migration hassles

• Freedom to change mobile operator while keeping all services

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

11

10

smartSD memory card life cycle

The smart microSD memory card with NFC has a similar life cycle as legacy smartcards, SIM cards, contactless cards and othersecurity tokens. Despite a different physical communication interface, the manufacturing is very similar to other solutions asmany components are shared, including the embedded secure chip that meets the security and functional requirementsmandated by the different markets (e.g. banking, identity, transport). The following table illustrates the similarities anddifferences for these different form factors:

Existing smartcard personalization tools may be re-used to perform the personalization of the smartSD memory card thanks toan ISO7816-1 physical adapter or specific software driver for standard USB microSD memory card readers available from somesmart microSD memory card makers. Other personalization options could also be available.

The software driver used on top of standard USB microSD memory card readers also permits the use of the smart microSDmemory card as a typical security token that even works with Microsoft Windows™ SmartCard login when such smart microSDmemory card is loaded with the appropriate applet.

Overall, the smart microSD memory card with NFC makes it very simple to launch as it easily fits existing business processes.

The GlobalPlatform Consumer Centric model will facilitate the post-issuance of additional cardlets on the SE embedded in thesmartSD, which increases the value of the consumer’s device and service providers’ opportunities to reach consumers.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

The perfect fit for service providers/operators

Silicon

• Security sensor detectors

• Secure memory management

• Secure run time environment • ISO7816-3,4 compliance

• ISO 14443 compliance and

ISO 18092

Packaging

Contactless NFCmicroSDsmart microSDwith SWP

Security token

Contactless card

SIM card with SWP

Embedded SE

Most microSD hostdevicesPhones with SWP to microSD

N/A

N/A

Only NFC phonesfrom partner MNOs

Phone model speci!c

TSM & other(optional)TSM & other(optional)

PC solution only

N/A

TSMOTA

TSM

Init and Perso

• Electrical initialization and personalization

• Physical personalization

Distribution

• Retail• Banks• Service provider• MNOs• Handset bundle• Mailing

• MNO

Handset bundle

Mobile Host Devices

OperatingSystem

RemoteManagement

Service Access

Instant grati!cation

or

TSM issuance when applicable

After issuancethrough TSM

11

11

Issuance and acquisition

Smart microSD can be distributed to the consumer in different ways and with the SE in different states. The consumer canacquire the microSD in different ways: retail purchase, from the service provider, kiosk, received by mail, on-site issuance,bundled with the phone, etc. The secure element in the smartSD can be in different states: direct from the manufacturer withtransport keys, initialized with a specific security configuration, ready for a service or personalized.

Configuration of the embedded SE and loading of cardlet services could involve: PC/SC desktop reader, ISO7816-1 adapter touse with standard smartcard mass deployment solutions, or automated machines that can handle the microSD memory cardform factor.

smartSD is compatible with TSMs that can communicate to the card through mobile apps or services. Typically a compatibleservice would check in at the TSM and look for specific job(s) to perform.

The GlobalPlatform Consumer Centric Model will ensure that post-issuance of cardlets could be the same as getting a new app.GlobalPlatform provides all the security mechanisms and the user control to ensure such a user experience can be implemented.

Go to market

Once the type of card and SE have been chosen, launching smartSD memory cards with NFC is very easy as they fit existingbusiness processes and do not require any agreement with third parties.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

1

12

Applets could be added, configured or personalized with asimple data connection to the mobile device (Cell, Wi-Fi ortethered) through contactless communication or using on-site issuance.

Technically, there is also secure communication from theserver to the SE. On the mobile phone, such communicationis facilitated by an app acting as communication facilitatorbetween the back-end and the SE. In some cases the appcould also add an additional layer of confidentiality to ensure,for example, that the cap file containing the applets is notexposed during download over the Internet from the secureback-end to the SE.

Depending on the type of update, updates can be done bythe service app itself or by a TSM service that meets neededsecurity certification. The use of a TSM is also typicallyrequired when a third party has issued the card.

However, it is important to note that smartSD memory cardscan be distributed personalized so TSM integration can bedone at a later stage. This dramatically helps to reduceupfront costs. TSMs could become important for upgradingthe service and deploying new ones, engaging a customerrelationship with your brand.

Further, most TSM vendors can easily support smartSDmemory cards with their TSM supporting data connection.This is typically the same as communicating over a dataconnection with other SEs, but some TSMs might be set for aspecific SE and would require an additional module tohandle a second SE such as smart SD.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

I want toget thosebene�ts

Download mobile

server app

PurchaseNFC HW or

use existing one

Enjoy theNFC-

enabledservice

End user journey

ServiceProviders

Retailers PaymentNetwork

MNO HandsetMaker

One of the challenges is creating awareness of the servicewith the consumer. Targeted consumers will only use themobile service if they understand the benefits.

Creating awareness is key to informing potential consumersand persuading them to adopt the mobile service:

Typical methods to create awareness include:• Signs or posters in waiting areas such as cashiers, kiosks

or POS• Posters at selected areas such as entrance, etc.• Messages in the mobile app • Advertising within end-user correspondence, e.g.

account statement• Enterprise help desk

Promotion could also include information about how tobuy or sign-up for the smartSD memory card with NFC.

Evolution of servicesApp stores make it easy to inform users about updates andto deliver and install these updates. Updated apps can haveadditional features or present some options to downloadadditional apps. This makes improving the user experienceand differentiating the service easy.

Adding new applets on the SE embedded in the smartSDmemory card is easy because the required underlyingtechnology is available and can be used to meet varioussecurity requirements. In the future, a dedicated Applet Storeapp could make it easy to search, discover and install newservices and applications, leveraging the SE embedded in thesmartSD memory card. The user would have the option to lookfor a service starting from the mobile app, which can drive theissuance of a cardlet or proceed the other way around.

1

13

Main Benefits

For service providersLargest reach: User’s current and future mobile devices,

any mobile operator and mobile plan,phones with and without NFC

Business independence: Easier launch, lower cost, large choice ofbusiness models, differentiation. Nodependence on 3rd party

Easier launch: Fits existing business process. No need toinvolve a third party

Lower cost: Upfront TSM integration optional Simplifyservice delivery

Differentiation: No constraints to differentiate fromcompetition with your own user experience,set of features and business model

For the card issuers

Examples of benefits for the card issuers:

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

• Business independence

• Larger reach

• Any users, any phones

• Lower up front cost

ServiceProviders

• Typical retail model & revenue

• Opportunity for new revenue streams from services

Retailers

• Lower up front cost for NFC (Targeted users)

• Reach more users and

possibly acquire subscreibers from competition

Mobile Operators

• New TSM opportunities

• Businessindependence

• Large Reach

• Direct relationship

TSMOperators

APPLETS

YOUR BRANDYOUR APP

1

14

For the consumer

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

Control AppsControl Appsand Appletsand Applets

Extra storageExtra storagefor pc, phones,for pc, phones,

tablets, etc.tablets, etc.

VendorsVendorsDistributorDistributor

choicechoice

Easy to upgradeEasy to upgrademobile devicemobile device

Easy to changeEasy to changemobile operatormobile operator

InstantInstantgrati!cationgrati!cation

1

15

Business case examples

While the consumer could purchase a smartSD memory carddirectly in any of the following scenarios, these business casesfocus on the examples where the smartSD memory card issubsidized or provided at no-cost to the consumer.Furthermore, these business cases demonstrate howbusinesses could recover the cost of issuing the smartmicroSD memory card.

This focus does not detract from the consumer ability orinterest in buying the smartSD memory card directly to accessvalue-added services on their mobile phones. Also, a user-owned smartSD memory card could be available to push orpull new services for a simple issuance fee.

Payment card

The main revenue from a payment card is typically derivedfrom serving as a deposit account. Nevertheless, there areother revenue streams that could cover costs of issuing asmartSD memory card:

When interchange fees are applicable, the cost of a smartSDmemory card with average use is easily paid back withinthe first year. Furthermore, interchange fees revenue couldbe used to build a cash-back value proposition to theconsumer that could both drive sales of the card andabsorb the entire cost.

The revenue from a referral program with partners can alsoeasily pay for the card within a few transactions. Programpartner merchants would pay for customers to be directedto their stores or services.

A futuristic business case would capture smartSD memorycard benefits in online payment scenarios where it could beused for card-present transactions and for 3D Secure usinghttp(s) as an alternative to potentially costly SMS.

Transit pass

The ease and convenience delivered by smartSD memorycards should compel consumers to purchase the SDmemory cards. However, some transit services may want topromote mobile phone usage to save on kiosk costs and tokeep workforce costs low. In that case, a reloading feewould pay for the smartSD memory card. The consumercan easily accept a minor fee to take advantage of theconvenience and shorter wait times. A regular user wouldpay for the card within the first year.

Transit operators could also consider the additional revenueopportunity from advertising in the mobile app; thesmartSD memory card is the sole SE option withoutrecurring fees and advertising would provide a newrevenue stream after the smartSD memory card cost isrecovered. This example provides real value for local shopsand transit passengers, plus transit traffic numbers wouldattract advertisers.

Dematerialized loyalty card

Dematerialized loyalty cards not only reduce clutter inusers’ wallets, they mobilize smartcard-based loyaltyservices by taking advantage of mobile phonecommunication channels and localization capabilities. Thefirst allows for a direct marketing channel that could beused to increase sales and strengthen the brand and thesecond makes it easier to locate a nearby store. Whileincreased sales would recover the costs of the smartSDmemory card, targeted marketing would also affectcustomer retention.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

1

16

For these programs the embedded SE in the smartSDmemory card could play a role to locally and securelymanage some of the rules so the consumer could redeembenefits even when offline.

Express check out for retailers

A familiar and basic program for a retail shop to issue smartmicroSD memory cards is sustained by the use of a retailer-specific mobile app to leverage shopping lists, targetpromotions, reward loyalty; the familiar program stillrequires payment from the user via credit card or cashtransaction. A richer approach would also allow shoppers touse their phone cameras to scan the goods added to theircart (also allowing for instant promotions) to reducecheckout time. This richer approach would deliver animproved shopping experience for the user and requirefewer cashiers for the retailer. Plus, this experience couldalso motivate shoppers to buy the smart microSD memorycard to obtain this value-added service.

Parking meter

Contactless communication clearly reduces costs forparking meter service and maintenance. It facilitates moneycollection, reduces vandalism and dramatically lowersmaintenance costs. The mobile app opens a new world ofpremium services for users. For example, a typical premiumservice uses the mobile app to secure a parking spot.

Additionally, like the transit pass business case, the parkingmeter app could be used for highly targeted advertisingbased on the user’s parking spot location.

Ticketing / VIP event

This business case is partially supported by reducing time atevent checkpoints. Contactless technology presents manyadvantages over other technologies: it works even when it

is dark and does not require a lens to focus, its built-in anti-cloning/anti-pass back security enables offline validation,the use of contactless communication also reduces the riskof failure as no mechanical parts are involved, and more.Overall, this new method helps reduce operation costs and,more significantly, reduces the number of people needed atthe gates to ensure a good user experience.

Users would also gain the option to make purchases fromwithin the mobile app. The app creates new revenue-generating premium services such as paying extra for VIPaccess and paying the issuer a percentage on resoldgenuine tickets.

Since the smartSD memory card typically does not presenta reason for recurring fees, a card can be issued once andused for multiple events by the consumer.

Machine to machine

The smartSD memory card presents the perfectcombination to leverage mass secure storage and a securerun time environment. One consideration for this businesscase is the communication cost savings yielded by usingthe smartSD memory card to securely store data for latertransmission during lower cost, low-traffic times.

Another consideration for the business case is in the costsavings realized on a design potentially using a lower BoMand the option to adapt the storage capacity to need, thusoptimizing inventory costs.

Hotel room card

Hotels will definitively benefit from the dematerializedloyalty card business case taking advantage of localadvertising from partnering restaurants, bars and otherlocal events. It would provide benefit to both serviceproviders and users.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

1

17

Additionally, the smartSD memory card with NFC reducescosts as it decreases staffing required for a good userexperience at check-in and checkout. The user could takeadvantage of the hotel booking app to reserve a room andreceive the credentials to access such room directly on itssmartSD. Taking advantage of the smartSD contactlesscapabilities, the customer could go direct to his/her roomwhile the booking system can benefit from strongauthentication.

The value add for the consumer could justify the consumerpurchase of a smartSD memory card, yet the cost savingsand the optional revenue opportunities from referring localpartners and advertising also provides a the hotel operatorwith ROI on the smartSD memory card.

Campus card

The cost of a campus smartSD memory card could easily beincluded in the students’ tuition fees since it supports manyuse cases such as physical access control to campuspremises, library and other campus assets, remote access tothe school network and online courses, and payment ofservices and fees. It could also serve as a payment card forparents interested in managing their child’s spending,allowing them to remotely add funds when needed toprovide additional functionality over typical credit/debitcard setting.

Some campus usage may also generate revenue from thisprogram. For example, payment could leverage an e-purseor pre-paid MasterCard or Visa that would generate intereston the pool of funds, which could help subsidize the cost ofthe card. This might be complemented as well by customeracquisition fees from partner banks.

This business case could also benefit from the sale of localadvertising from partnering restaurants, bars and otherlocal services. Ticketing and transport businesses cases arealso applicable for college campuses.

Enterprise

The smartSD memory card in the enterprise is a perfectexample of mobilization of services. The smartSD memorycard with NFC can actually address multiple use cases suchas physical access control and IT security, including secureemail on mobile devices, secure data storage and VPNaccess. smartSD memory card storage can also be used toeasily move files around the enterprise in a controlledmanner. As such, in the context of mobilization of theenterprise, the smart microSD memory card with NFC has aclear business case based on cost savings. First, it does nothave recurring costs unlike many other SEs. Then, it allowsthe enterprise to reduce the total cost of ownership byreducing the number of devices per employee and allowinguse of the employees’ own mobile devices. This move cutsthe cost of VPN tokens, sophisticated contactless badges,CDs and USB memory sticks, to name a few. Finally, havingan SE entirely controlled by the enterprise adds freedomand facilitates bringing additional services.

Government/Secure communication

Today’s mobile devices provide the average consumer morecommunication abilities than a U.S. president could access20 years ago. The mobile device is a must-have tool thatprovides instant access to most information, which couldbe critical in certain situations. So while the potential ofmobile technology should be embraced, it should be verysecure so that sensitive information and communicationremains protected at all time. The cost of compromisedinformation could have immeasurable consequences. Thesmart microSD memory card could be used to providesecure voice communication, emails and remote access. Itcan also secure the data on mobile devices to ensure thatsensitive information is always protected.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

1

18

TSM operator & MNO

There are various business models and opportunities to beconsidered by TSM operators and MNOs. Typically, thesmart microSD memory card with NFC could be subsidizedby charging a fee for loading a new applet on the SE. Whencharging a one-time fee, a few applets could easily coverthe cost of the smart microSD memory card with NFC.Rental fees could also be considered as an alternative, butrental fees could have a more direct impact on the serviceprovider’s business model. Also, additional revenue sourcesare created from managing the applet store and proposingadditional services to the consumer.

When a TSM operator is an MNO, the smart microSDmemory card allows the TSM to expand NFC servicesbeyond its customers and to acquire subscribers from otherMNOs. Furthermore, the removable smart microSD memorycard allows TSMs to target specific users, keeping upfrontNFC promotion costs very reasonable compared to othersolutions where contactless communication is providedwhether the user needs it or uses it.

Handset bundle

The removability of the smartSD memory card is a key assetwhen adapting a global device to local markets, as itreduces costs through higher production volume. Not onlydoes the smart microSD memory card allow availablestorage capacity to be adapted to the desired level for themarket and price point in regards to the device positioning,but it also facilitates enabling NFC where needed orrequested by mobile operators. As such, adding smartmicroSD memory cards to targeted markets results inoverall cost savings and potentially larger sales revenuethrough better market positioning.

Self-service kiosks

At the self-service kiosk – and photo kiosks in particularsince content sizes are growing every day – there isopportunity for improvement and innovation in the waycontent and payment are handled. With smartphones andother mobile devices emerging as the de-facto contentsource, secure payment would significantly improve theuser experience. Today, issues being reported from thekiosks include growing concerns with respect to userexperience, including issues with Bluetooth™ pairing, cablemanagement and accessing removable media. Theseproblems multiply in heavy traffic zones and during peakengagement times such as the holiday season.

The smartSD memory card also offers additional upsellingopportunities with the availability of additional storagecapabilities. The removable feature offers consumers theoption to store content from other sources like a camera oranother mobile device. At the service point, the contentfrom these sources can also be used to generate commercelike the printing of high-resolution pictures at a photo kiosk.The service provider could then communicate coupons andpromotional materials based on the user activity. Thepresence of an SE in the smartSD memory card helpsvalidate these upsell items both while dispensing andconsuming them. The idea of a two-way communicationbetween the SE host and the payment point expands theprospects for self-service at the kiosk. The limitations of thecurrent contactless payment tokens are overcome withsmart microSD memory cards.

Pairing of NFC and smartSD memory cards provides asecure and flexible way for transferring content andfacilitates payment at self-service kiosks. This is animprovement on the current trend of fragmented servicesavailable to consumers. Providing the consumer withmobility, flexibility and security, smartSD technology canhasten the adoption of mobile device as payment source.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

1

19

The GlobalPlatform Consumer Centric Model provides thetechnical framework to connect the token providers andthe service providers in delivering a better retail experiencefor the consumers and the service providers.

Secure services formultimedia inconsumer devices

smartSD memory cards alsopresent a convenient approach toprovide secure services such aspayment or user authentication forHDTV sets, gaming consoles, e-books and more.

For example, a smartSD memorycard could be used in gaming tobuy credits or additional gametools to move forward and faster in a game. It can also beused to authenticate the gamer for online multi-playersgames or to easily report success on social networks.Overall, the smartSD memory card helps protect identitytheft, which is crucial for online gaming where virtualgoods are traded.

In the case of HDTV, the smartSD memory card could beused to create a link between payment and a Digital RightsManagement feature to grant access to multimediacontent. This smart microSD memory card could beincluded with the television, allowing support of DRMsystems from different content providers or with thedownload of a new DRM system. In that architecture, theDRM licensing cost is only paid when the smartSD memorycard is present, allowing for lower upfront cost on thetelevision for customers who are not interested in personalvideo recording.

In the case of a connected camera, the smartSD memorycard could be used to strongly and convenientlyauthenticate cloud services hosting the user’s photo store.The smartSD memory card could contain preferred

parameters to configure the camera (e.g. macro, GPStagging).

The contactless communication feature of the smartSDmemory card allows an efficient pairing and connection onthe Wi-Fi network for the transfer to the network or printingof photos. With a camera, the consumer already buys SDmemory cards for storage. The convenience and additionalsecurity will justify the incremental higher cost of this newsmartSD memory card.

The smartSD memory card may be used in e-books. In thiscase, the portability of the smart microSD memory card isconvenient to change from one device display, like a mobilephone, to another device, like a tablet. With NFCtechnology, the payment could be performed withouthaving to switch the smart microSD memory card into theother device.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

1

20

Conclusion

The smartSD memory card is the most versatile solution to enable secure mobileservices and to support contactless card emulation. It fits numerous use cases andbrings value to both the service provider and the consumer. smart microSD memorycards extend the universal, convenient and portable value of SD memory cards tocontactless communication services.

smartSD memory cards present the most benefits to mobilize existing service as itfits existing business process and ensure to remain business independent. Plus, acompetitive and thriving ecosystem means smartSD memory cards are available forpurchase from many SDA members.

Activating New Mobile Services and Business Models With smartSD Memory Cards

www.sdcard.org | ©2013 SD Association. All rights reserved

All Copyrights and

Trademarks referenced

in this document are

property of their

respective owners.