This article describes progress with ITSO (Integrated Transport Smartcard Organisation) in the UK. The benefits of smartcards for users, application providers and councils are outlined. The primary focus of ITSO was the creation of a specification for interoperable smartcards for transport applications. ITSO supports a range of smart media, covers the whole life journey of transport applications, supplies the security environment specification for key management, provides the security architecture for both the card and back office transactions and enables interoperability. ITSO also provides the environment to enable schemes to implement the ITSO specification: certification and testing, an ISAM (ITSO Secure Application Module), a security management service, and operating licenses. Reasons why progress with ITSO has been slow are discussed. ITSO is mandated by the Department for Transport for any smart card scheme requiring support from them.
Abstract