|
Through its various
actions, Smart.IS AM will contribute to:
- The
emergence of a common smart card and security architecture for
electronic commerce and its deployment in three broad areas:
Electronic Commerce (Business to Consumers), Electronic Business
(Business to Business), and new TIS (Business to Consumers and to
Administration).
- The promotion and
acceleration of the interoperability of smart card technologies
and associated security techniques, architectures and systems to be used
for e-business and e-commerce.
- Setting up of a
framework for pre-standardisation and security assessment studies
within these fields.
- The providing of
both technology and market analysis to the research community by
setting up an inter-organisational collaboration approach and value
networks gathering key actors such as users, financial and
telecommunication operators, and Smart Card systems industrials
including service providers and system integrators.
As expected results,
Smart IS will provide the smart card community with some reports of
reference. This documents/studies are being written down by the Working
Groups:
 WG1 : NAME
Document
NAME - Network Authentication Module for internet
End-users aims at gathering requirements and defining a smart card module
to provide a secure Authentication of a user accessing the Internet.
A
first version of NAME has been distributed for comments to ETSI (European
Telecommunication Standards Institute) and Eurosmart (Smart Card Industry
Association) members. Contributions have already been included in NAME
document from Telecom and mobile manufacturers (on WAP, WIM & USIM),
and from Bank and financial sector (on EMV). Participants have begun an
analysis of the various types of authentication and signatures required by
the various business and application environments, and the security levels
of each type.
Final NAME specifications are expected for first quarter
2002.
- Download
NAME document
We would like to receive your comments on NAME.
Please give us your feedback at info@smartis.org.
WG2: Telecom Requirements
and State of the Art
The expected result is a definition of the
business requirements for Telecom operators for authentication and
electronic signatures modules, taking into account the needs of the
banking sector.
TELEFONICA is in charge of the business plan and will
communicate the first version in order to request for comments to other
telecom operators. Axiome Technology will also provide Telecom market
surveys in France and Germany and contribute to the study on general
security requirements for mobile banking and commerce, as a complement to
the work done by Telefónica.
- Download Telecom
requirements document
Any comments ? info@smartis.org
WG3: Terminal Manufacturers
requirements
WG3 will provide a review on the state of the art
of smart cards solutions for e-commerce, and define, in a co-operative
approach, the overall security architecture for e-business and e-commerce,
focusing on smart card technologies to provide the authentication of
Internet end-users (NAME) and electronic signature (NAME.ES).
The
study will address the following questions:
-What does the notion of
"roaming appliances" cover?
-Which services can benefit from
interoperability between smart card systems?
- What is the target
market for these services?
The final study is expected for end of
2002.
-Download
Versions of "Terminal Manufacturers Requirements"
WG4: Links with
Normalisation groups
In order to have a global coherence in the
Smart IS work, close liaisons with representative standardisation
committees dealing with areas closely related to authentication and
electronic signature will be established through WG4.
The work will
cover international recognition issues and ensure the link with the US
Federal PKI, ISO, WC, the WPA Forum and EDI/XML group.
WG4 will also
produce a short description of each relevant standard, which will be
posted on the web site when finished.
-Download WG4
documents
WG5 : NAME.ES
WG5
aims to produce the NAME.ES document which will detail specifications of a
common cardholder electronic signature module, built on authentication
module resulting form WG1 report - NAME-, since the same technical
mechanisms for encryption should be used by both modules.
- Download
NAME-ES document. The document requires comments, notably from ETSI.
|
