Deploying GlobalPlatform Specifications within government e-ID programs can:

• Provide a trusted end-to-end solution which supports the deployment and management of multiple applications from the public sector or a private sector partner
• Protect the government issuer's investment, by 'future-proofing' the program against business decisions which have not been made at the time of deployment. GlobalPlatform's flexible and scalable technology can accommodate significant changes to the program post-issuance
• Ensure alignment with international and national standards and that application specific requirements are fulfilled
• Support multi-factor authentication and a variety of authentication encryption techniques.

Government Implementations

Moroccan National ID Project
In an effort to curb illegal immigration, the Moroccan National Security Service began implementing a national ID program in 2007. The Moroccan cards include both personal and biometric data and have to achieve pre-defined security requirements for travel documentation and border migration controls.

Thales was selected to deliver its Smart Card Management System (SCMS), which is based on GlobalPlatform systems technology. This solution comprises equipment and software for ID document production which connects with the Automated Fingerprint Identification System (AFIS) to acquire cardholders' digital fingerprints and compare them with a fingerprint database.

The deployment will be driven over a four year period, and during this time 20 million cards will be issued and managed.

GlobalPlatform member solution providers include Thales e-Security.

Portuguese Citizen Card
Launched in 2008, the Portuguese Citizen eID card (Cartão de Cidadão) and supporting integrated citizen portal (Portal do Cidadão) aims to revolutionize the way in which Portuguese citizens interact with the government, by simplifying administration and modernizing the country’s public services. Incorporating a fingerprint and facial biometric match-on-card feature, and with the ability to facilitate electronic signatures and verification, the eID card replaces five different physical ID documents including civil identification, taxation, voting, social security and healthcare cards. As a highly secure identity document it also improves citizens’ access to e-services.

The Portuguese Government selected a secure identification document compliant with GlobalPlatform Card Specification v2.1.1 and the Identification Authentication Signature (IAS) European standard, as defined by CEN 224 WG 15. The biometric match-on-card component is compatible with industry standards and based on GlobalPlatform’s interoperable and flexible card architecture, ensuring that future applications can easily be added to the card.

A first pilot phase started in February 2007 in the Azores region, with a full roll-out commencing in 2008 amounting to more than two million cards per year. Numerous public services are now available online, and procedures that would have taken hours such as obtaining civil records/birth certificates and social security declaration, now take a matter of seconds. In the future it is hoped that the match-on-card application will be used by police to verify the identity of individuals using fixed or mobile readers.

Please view The GlobalPlatform Value Proposition for Biometric Match-on-Card Verification white paper for further details regarding this implementation.

GlobalPlatform member solution providers include Gemalto.

Qatari National ID Card
In 2007 the Qatari Ministry of Interior began implementing a national ID card for Qatar citizens and foreign residents to address concerns of national security, border control and identity theft. Issued to every citizen above the age of 16, the biometric match-on-card solution includes personal data as well as the cardholder's fingerprint. The card also provides access to e-government services and allows the user to perform transactions securely using a smart card reader connected to a home computer.

The Qatari Government chose Bell ID's ANDiS Card Management Software, which is based on GlobalPlatform systems technology, to manage the cards throughout their lifecycle. The SCMS includes GlobalPlatform's Post-Issuance Personalization (PIP) functionality and an application to manage the secret keys that encrypt the data stored on the card's chip. Gemalto provides the required readers and dual-interface multi-application smart cards which use GlobalPlatform Card Specification v2.1.1.

It is expected that 700,000 Qatari national ID cards will be issued by 2010. The Qatari Government also plans to collect facial images and iris patterns for use in future program advances.

GlobalPlatform member solutions providers include Bell ID and Gemalto.

Singapore ePassports
In August 2006, the Singapore Immigration & Checkpoint Authority (ICA) launched the biometric passport project. The initiative aimed to meet the US Visa Waiver Program deadline, which required countries to roll-out biometric passports before 26 October 2006, and also comply with the latest International Civil Aviation Organization (ICAO) recommendations.

Based on GlobalPlatform card technology, the Singapore Government launched its new passport containing fingerprint biometry – BioPass. The solution provided a cost effective and secure global ePassport technology that would reliably and efficiently integrate the highest standards to protect citizens against terrorist entry, and to combat the growing problem of passport forgery.

Following a successful pilot of BioPass in 2006, the Singapore ICA commenced a full launch, issuing an estimated 250,000 annually. As of early 2008, over one million passports were in circulation.

GlobalPlatform member solution providers include Gemalto.

Transportation Worker Identification Credential
The United States Department of Transportation Security Administration (TSA) aimed to increase homeland security through the issuance and usage of highly secure, FIPS-201 compliant, ID smart cards in a nationwide interoperable ID infrastructure. In November 2005, phase III of the Transportation Worker Identification Credential (TWIC) was deployed. TWIC identifies and authenticates TSA workers granting physical and logical access to secure facilities at seaports, airports, rail, pipeline, trucking and mass transit facilities.

TWIC cards - which contain a digital photograph, worker name, TWIC expiration date, fingerprints, a personal identification number, and a Federal Agency Smart Credential number - use GlobalPlatform Card Specification v2.0. The implementation employs Bell ID's ANDiS solution as the Smart Card Management System (SCMS) which is based on GlobalPlatform Systems Specifications. Using GlobalPlatform technology enabled the TSA to migrate from one application standard to another – the Government Smart Card Interoperability Specification (GSCIS) to Personal Identity Verification (PIV) - while saving time and money.

Phase III activity involved hundreds of transport workers at four sites across the USA.

GlobalPlatform member solution providers include Bell ID.

Austrian Citizen Card
In 2005 Bell ID's ANDiS Management System facilitated the issuance of social insurance citizen smart cards in Austria. Based on GlobalPlatform systems technology, the new 'e-card' system eliminated the need to issue and process 40 million paper-based healthcare vouchers annually. In addition to the e-cards, the solution also issued o-cards which were for authorized staff in doctors' practices.

The complete lifecycle of all e-cards and o-cards was also managed by Bell ID's Management System using the integrated GlobalPlatform based Post-Issuance Personalization (PIP) functionality. This added feature not only allows cardholders to download and reload applications at a later date, but also enables the Main Association of Austrian Social Insurance Institutions to change on-card data via their own e-portal, the Karten Service Portal. This capability additionally assists the Karten Service Portal in allowing citizens to apply for and download digital certificates.

Eleven million social insurance citizen smart cards have been issued in Austria. These are also being used as citizen cards as the new multi-application e-cards contain personal cardholder data and up to four digital certificates for data security and verification of the cardholder's identity. A further 25,000 o-cards have been deployed.

GlobalPlatform member solution providers include Bell ID.

Saudi Arabia's King Fahd University
In 2005 Saudia Arabia's King Fahd University implemented a smart card ID scheme for university staff and students. Using digital fingerprint technology, the card can verify the cardholder's identity and is used for library applications and at the university's medical center. The card also features a contactless chip that includes e-purse functionality for electronic payments in cafeterias and restaurants throughout the campus. The embedded chip's open electronic purse acts as prepaid stored value and also allows for the download of digital certificates, securing transactions conducted on the web.

Bell ID's ANDiS Card and Application Management System (CMS/AMS) and Key Management System (KMS), based on GlobalPlatform Systems Specifications, were selected to manage the deployment. By using GlobalPlatform's technology the solution will support future application changes like logical access control and electronic voting for students. The technology also allows updates to be made to cards post-issuance.

Over 15,000 smart ID cards have been distributed to students and staff at the university. This was the first smart card management system of its kind in the Middle East.

GlobalPlatform member solution providers include Bell ID.

US Department of Defense Common Access Card
In 1999, the US Department of Defense (DoD) began work on a program to issue a common-access identification smart card to 4.5 million active duty, selected reserve, DoD civilian and eligible contractor personnel. The Common Access Card (CAC), is a smart card standard established by the Government Services Administration (GSA), a key purchasing arm of the US government, in conjunction with various military departments. The card is used to enable physical access to buildings and controlled spaces and gain access to the DoD's computer network and systems.

The solution is based on GlobalPlatform technology to simplify the process of multiple government agencies deploying an interoperable smart card. The ultimate goal is to be able to use a CAC anywhere that the cards are accepted, regardless of which government agency issued it.

As of February 2008, approximately 15 million CAC cards had been issued at over 2,000 issuance stations worldwide.

GlobalPlatform member solution providers include ActivIdentity, Gemalto and Oberthur Card Systems.

• CNS Italy
• Daejeon Project
• European Citizen Card
• Kingdom of Belgium
• Macau SAR Project
• Singapore Biometric Passport (BioPass)
• Sultanate of Oman National ID Card