These are quick guides to what ITSO does, how it is structured and how organisations and individuals can become involved. In particular, they look at what it means to be an ITSO member, how to become a supplier of ITSO compliant equipment, systems and services and what's needed to operate key processes within the ITSO environment.

About us

ITSO is a Government-backed, non-profit organisation which defines and develops the UK-wide technical specification for smart ticketing.

Our main aim is to help make rail and bus travel throughout the UK seamless and hassle-free.

As originators and custodians of the UK’s defined technical standard for smart ticketing – the ITSO Specification – we help transport and other service providers make the technology work effectively for them and their customers, ensuring it is reliable and secure.

Smart ticketing means that the conventional cash-bought ticket becomes obsolete. Instead, passengers can pay for journeys or other services using their electronically loaded smart devices - be they cards or, eventually, mobile phones.

For transport, this means that someone needing to travel by both bus and train can use just one smart device to access both. The goal is for one smart device to be used for travel throughout the UK and, in time, Europe and the rest of the world.

The same smart device could also be used for other services such as parking, leisure or libraries.

The benefits include:

  • Reduced running costs
  • Improved management information
  • Increased passenger numbers, thus higher revenues
  • Better-informed service delivery
  • Reduction in CO2 emissions through higher public transport use
  • Fraud prevention

ITSO has the backing of the English, Scottish and Welsh governments which are keen to increase the use of public transport by making it more convenient. Travel operators and suppliers of smart hardware and software can ensure that their systems meet the ITSO Specification so they can all 'talk' to each other electronically.
 
ITSO works for and represents a range of member organisations from across the smart ticketing and transport industries, with representation from the Public Sector, Transport Operators, Bus and Rail Sectors and Suppliers. Our Board consists of members and includes representatives from UK governments.

If you are interested in working with ITSO, contact Kim Clarke, Member Services, at kim.clarke@itso.org.uk, phone (+44) 01908 255485. 

ITSO Organisation

Incorporated in 2001, ITSO Limited is a company limited by guarantee.  A non-profit distributing organisation, whose membership covers the breadth of the Transport arena including transport operators (both bus and train operating companies), suppliers to the industry, local authorities and public transport executives. Supported by the Department for Transport, ITSO has links with major transport industry organisations and established smartcard schemes in the UK and overseas.

Having evolved from the initiative of various UK Passenger Transport Authorities who were concerned with the lack of standards for interoperable smartcard ticketing ITSO started in 1998.  ITSO’s objective is to maintain and develop the ITSO Specification; to operate and manage an interoperable smart media environment and to facilitate and support development of interoperable smart ticketing schemes that comply with the ITSO Specification.

ITSO Vision: To support, facilitate and enable the delivery of the national vision for smart integrated and interoperable ticketing across Great Britain.

ITSO Mission Statement

For our Licensed Members: To support understanding, procuring, implementing and operating ITSO simple, easy and cost effective.

For the supplier community:
To work in partnership with ITSO suppliers to improve the quality, consistency and performance of ITSO certified products.

For the public: To ensure the end-user (customer) experience is quick, hassle free and consistent.

In delivering against these statements, ITSO will confirm its position as the preferred smart technology solution and will ensure the successful and timely delivery of the national smart and integrated ticketing vision.
 

ITSO Governance
The Board of ITSO are representatives of the membership through direct elections.  Each sector (Rail, Bus, Local Authorities & PTEs and Suppliers) has equal representation on the ITSO Board.  There are also representatives of Transport for London, Transport Scotland, Welsh Assembly and the Department for Transport.  The ITSO Board evolves through Membership contribution.  Each member sector can ensure they have representation at Board level.

Committee Structure
The ITSO Board can choose to create and authorise various bodies to undertake specific tasks. This has resulted in the establishment of a number of dedicated committees.  Where possible, ITSO includes Member representation on each committee through the provision of expert resources in discussion and review.

Technical Committee: The Technical Committee is responsible for ensuring assessment and development of the ITSO Specification which includes membership review and input.  These changes are applied in accordance with strict review processes and authorised by the ITSO membership.  The ITSO Specification is updated with consideration of the practical implementation within the ITSO environment.  In addition, the Technical Committee maintains close relationships with standards bodies to ensure convergence with relevant emerging standards.

Security Committee: ITSO Security Committee is an independent group of experts led by Professor Fred Piper, Director of the Information Security Group at the Royal Holloway, University of London. Main functions of the ITSO Security committee are to review ITSO security policies and provide comments and recommendations to the ITSO Board.  They also monitor and evaluate industry security standards, trends and threats and communicate to ITSO membership.

User Groups: There are a number of groups that operate within ITSO where members discuss specific issues for different parts of the ITSO operational environment.

ITSO Licensed Operators Group (ILOG): ILOG's ultimate aim is to promote better understanding between Licensed Operators and ITSO by agreeing Codes of Practice and Guides to compliment formal ITSO documentation, whilst encouraging the sharing of experiences concerning implementation and product interoperability.

Supplier Special Interest Group (SSIG): is a group operated by ITSO Supplier members where joint learning and development takes place. The SSIG constitution says that "in creating SSIG the suppliers recognise not only their important role in the continuing development of ITSO, but also their input into a specification and organisation whose role is now to keep apace of the technology rather than the implementation of a specification".

ITSO ISMS User Group: This User group is a forum for feedback and exchange of information on all aspects of the ITSO Security Management System. It is an informal meeting which provides an opportunity for ITSO, Asset Management System Providers, and ISMS Contractors to discuss current issues affecting the service, suggest improvements and plans for the future of the system, discuss development and address any house-keeping issues.

Back to Top

 

ITSO Specification

The ITSO Specification is a technical platform on which interoperable smart ticketing schemes are built.  It defines the key technical items and interfaces required to deliver interoperability of smart ticketing systems.   ITSO is unique in  that it covers all components of transport smart card schemes; media, point of service and back office systems.

The Copyright of the specification belongs to the Crown. A copy of the ITSO Specification can be downloaded from the ITSO Specification page.

Back to Top

 

ITSO Environment

ITSO's interest is the security of cards, products and transaction data between interoperable schemes. Whilst ITSO does not run schemes, provide equipment or influence commercial agreements, it does provide an environment for schemes to operate in and enjoy that security.

Interoperability Explained

Certification
Before any equipment, software or sub-assembly can be used within the ITSO environment, it has to be certified by ITSO. To gain certification the equipment is rigorously tested in the ITSO Test House for compliance to the the ITSO Specification. ITSO goes further than certification against the Specification. ITSO operates an Interoperability Warehouse, which contains all certified kit against which new items are tested to ensure that interoperability is achieved.

Integri BV has been accredited to perform the ITSO testing service.

ISAM
The specially commissioned ITSO Secure Application Module (ISAM) is constructed from a programmable smart card chip with extended memory and resides in all ITSO compliant point of service terminals and back office equipment. It implements the secure part of the ITSO applicationis and is fundamental to the operation of the ITSO environment. It has the same form factor as a SIM card for a mobile phone.

The ITSO SAM has achieved certification to the security assurance Common Criteria Evaluation standard EAL4+. Read more about ISAM Common Criteria certification.

Security Management
Security of data transmission is a key aspect of interoperability. The consequent handling and transmission of data between Point-of-Service devices, operators and settlement organisations is crucial for genuine interoperability.

ITSO provides a Security Management Service (ISMS) for the generation and distribution of security keys within the ITSO environment. These keys are the means by which Licensed Operators equipment and systems can recognise and accept other Licensed Operators products. The ISMS allows ISAMs to be updated remotely with new products, amended products and other operational changes as required by the Licensed Operarots . As a result ITSO products can be field updated without service disruption and whilst still maintaining high levels of security.

Operational Regulations
The ITSO Specification sets out the technical means by which interoperability of smart contactless systems can be facilitated. In addition to the Specification, each Licensed Operator operating a scheme or performing specific roles in ITSO environment agrees to abide by the regulations contained within the ITSO Operating License. This ensures that all parties behave consistently and fairly, both in interactions with each other and with users of ITSO smartcards.

ITSO is a member/associate of the following organisations:

Calypso  CarPlus   IFM Project   ITS UK   NFC Forum     UITP Logo

ITSO is an associate partner of the Smart Card Centre (Royal Holloway, University of London).


Back to Top