News
12 October 2011
Update on Mifare® DESFire smartcard (MF3ICD40)
ITSO is aware of the recently reported alleged hacking of the original version of the MIFARE DESFireTM smartcard (MF3ICD40).
Although smartcards of the same type have been certified by ITSO, deployment of the original version has been very limited and the risk of this kind of attack has been recognised throughout the development of the ITSO environment.
It should be noted that ITSO uses its own internationally recognised security system which sits over and above the security system that has reportedly been cracked. Operators using the original MIFARE DESFire card can be assured that - even if an individual card can be hacked - the ITSO products in the card still remain secure when the security seal is verified by the ITSO Secure Application Module (ISAM).
ITSO, being a multi-platform Specification and environment, also offers its members the opportunity to use alternative Customer Media types, should they be required.
MIFARE DESFire EV1 (the version currently being deployed in the ITSO environment) is not open to the same attack - even in Legacy mode. MIFARE DESFire EV1 is Common Criteria EAL 4+ certified where this kind of attack is tested during the certification assessment.
NXP has started the process to discontinue the MIFARE DESFire MF3ICD40 in June 2010 with a last time buy December 31 this year. NXP recommends that its customers and partners migrate to MIFARE DESFire EV1 for existing and new systems. See NXP's full update.
January 19, 2011
Local Transport White Paper – Creating Growth, Cutting Carbon: Making Sustainable Transport Happen
Transport Secretary Norman Baker today released a White Paper setting out the Government’s vision for local transport.
It includes a statement on the Government’s commitment to delivering the infrastructure that will enable most public transport journeys to be undertaken using smart ticketing by December 2014 (see Chapter 6).
Smart ticketing is where an electronically loaded payment card or phone can be used to pay for services, be they bus or rail journeys, or wider transport and citizen benefits such as bike hire, parking, library or leisure services.
One of the ways the Government hopes to achieve this is by working closely with ITSO to ensure technology is up-to-date and meets future requirements.
ITSO is the custodian of the UK’s defined technical standard for smart ticketing. We are committed to helping transport operators develop systems which link up with each other, making the passenger’s experience hassle-free and the operator’s service more efficient, reliable and cost-effective.
Scotland and Wales already have country-wide ITSO smart ticketing. England is moving towards this with some areas, such as Cheshire (case study in White Paper), well down the line. The five biggest bus operators in the country are committed to ITSO schemes.
9 June 2010
Seamless travel throughout Europe on a single smart card
ITSO, Calypso and VDV are the first to demonstrate interoperable multi-application smart ticketing for international public transport use
In an innovative international multi-application demonstration, tickets from three national transport ticketing applications - British ITSO, French NaviGO and German Core Application (VDV-KA) - were loaded onto a card, proving that a single smart card can be used for travel on local public transport networks in different countries.
Read IFM Project press release 
Read more about Interoperable Fare Management in Collaborative Projects.
