Summary of Changes in CSCIP/P Training Modules: June 2015 Release June 15, 2015

Transcription

1 Summary of Changes in CSCIP/P Training Modules: June 2015 Release June 15, 2015 Smart Card Alliance Certified Smart Card Industry Professional Accreditation Program 1 June 2015 Release June 15, 2015

2 About the Smart Card Alliance The Smart Card Alliance is a not-for-profit, multi-industry association working to stimulate the understanding, adoption, use and widespread application of smart card technology. Through specific projects such as education programs, market research, advocacy, industry relations and open forums, the Alliance keeps its members connected to industry leaders and innovative thought. The Alliance is the single industry voice for smart cards, leading industry discussion on the impact and value of smart cards in the U.S. and Latin America. For more information please visit Important note: The CSCIP training modules are only available to LEAP members who have applied and paid for CSCIP certification. The modules are for CSCIP applicants ONLY for use in preparing for the CSCIP exam. These documents may be downloaded and printed by the CSCIP applicant. Further reproduction or distribution of these modules in any form is forbidden. Copyright 2015 Smart Card Alliance, Inc. All rights reserved. Reproduction or distribution of this publication in any form is forbidden without prior permission from the Smart Card Alliance. The Smart Card Alliance has used best efforts to ensure, but cannot guarantee, that the information described in this report is accurate as of the publication date. The Smart Card Alliance disclaims all warranties as to the accuracy, completeness or adequacy of information in this report. 2 June 2015 Release June 15, 2015

3 Table of Contents 1 SUMMARY OF CHANGES: JUNE 2015 RELEASE OF CSCIP/P TRAINING MODULES MODULE 1, V5: SMART CARD FUNDAMENTALS MODULE 2, V5: SECURITY MODULE 3, V3: SMART CARD APPLICATION AND DATA MANAGEMENT MODULE 4, V3: SMART CARD USAGE MODELS MOBILE AND NFC MODULE 6/P, V2: SMART CARD USAGE MODELS PAYMENTS AND FINANCIAL TRANSACTIONS MODULE 7, V3: OTHER TOPICS MODULE 8, V3: GLOSSARY MODULE 9, V3: BIBLIOGRAPHY OTHER MODULES FOR CSCIP AND CSCIP/G CERTIFICATIONS ACKNOWLEDGEMENTS June 2015 Release June 15, 2015

4 1 Summary of Changes: June 2015 Release of CSCIP/P Training Modules The following are important changes and corrections in the June 2015 release of the CSCIP/P Training Modules. The June 2015 modules have significant changes from the March 2012 release. In addition to the changes noted below, formatting and typographic errors have also been corrected. Modules for the CSCIP/P certification include: Module 1: Smart Card Fundamentals Module 2: Security Module 3: Smart Card Application and Data Management Module 4: Smart Card Usage Models Mobile and NFC Module 6/P: Smart Card Usage Models Payments and Financial Transactions Module 7: Other Topics Technology Comparison and Implementation Considerations Module 8: Smart Card Technology and Application Glossary Module 9: Bibliography 1.1 Module 1, V5: Smart Card Fundamentals 2.1 s to text and tables 6.1 Number of erase/write times caveat added and number updated 6.4 FeRAM section obsolete and deleted 7.1 3rd paragraph ISO/IEC standard corrected 7.2 3rd bullet WIN Card obsolete and deleted Windows for Smart Cards obsolete and deleted 9.3 Figure 27 PACS readers obsolete and replaced with current readers Created section for the CCID specification Added ISO/IEC standard, renumbered as needed d FIPS Standard to FIPS d SP to Rev 4, April 2013 d SP to Part 1 Draft, May 5, 2014 d SP to Part 3, December, 2009 d SP to -2 August, 2013 d SP to SP July, 2013 d SP to SP Draft, May 19, 2014 d SP to SP Draft June 2, 2014 d SP A-1 to reference SP July 2010 d NISTIR 7477 may 21, 2009 to January 30, Added SD Association 12 Removed individual names from Company affiliations 1.2 Module 2, V5: Security Overall Minor edits to update some text; updates to standards references d protection profile examples Minor edits to update information 4 June 2015 Release June 15, 2015

5 2.5 d MULTOS information 6.1 to Figure to cryptographic algorithms to delete dated reference to delete dated reference 1.3 Module 3, V3: Smart Card Application and Data Management Addition of MULTOS Minor updates to standards 1.4 Module 4, V3: Smart Card Usage Models Mobile and NFC Module 4 had significant updates to update information on NFC and to add new content on Host Card Emulation (HCE) s 3.1, d market information d market information d market information d market information and deleted dated content d NFC information d NFC information and specifications d market information Major update with new content on both secure elements and HCE; section reorganized New content on secure elements New section on HCE d information and deleted dated content 1.5 Module 6/P, V2: Smart Card Usage Models Payments and Financial Transactions Module 6/P had significant updates to information on EMV, mobile payments, e-commerce and payments security approaches, as well as updates to other sections Added new topics covered in June 2015 update d examples and text Major update with updated market information and with new content on the status of U.S. EMV migration and fraud liability shifts d content and added new sections on EMV chip applications and AIDs and on U.S. EMV debit d content and deleted dated content Major update with updated market information and with new content on HCE-based NFC mobile payments; deleted dated content. Major update; new section on secure remote transactions for retail ecommerce; previous section was deleted. New section on security layers protecting the payments infrastructure (EMV, encryption and tokenization) Previous section 8; minor updates 5 June 2015 Release June 15, 2015

6 10 11 Previous section 9. d market information and state of the industry; deleted dated content; reorganized sections. d market information; deleted dated content. 1.6 Module 7, V3: Other Topics No changes were made to CSCIP Module Module 8, V3: Glossary No changes were made to CSCIP Module Module 9, V3: Bibliography No changes were made to CSCIP Module Other Modules for CSCIP and CSCIP/G Certifications Module 5 and Module 6/G are not required for the CSCIP/P industry certification. 6 June 2015 Release June 15, 2015

7 2 Acknowledgements Publication of this document by the Smart Card Alliance does not imply the endorsement of any of the member organizations of the Alliance. About LEAP and the CSCIP Program The Smart Card Alliance Leadership, Education and Advancement Program (LEAP) was formed to: offer a new individual members-only organization for smart card professional; advance education and professional development for individuals working in the smart card industry; manage and confer, based on a standardized body-of-knowledge examination, the Certified Smart Card Industry Professional (CSCIP) designation. LEAP members who wish to achieve certification as experts in smart card technology may do so at any time. Certification requires that LEAP members meet specific educational and professional criteria prior to acceptance into the certification program. A series of educational modules forming the CSCIP certification body of knowledge has been developed by leading smart card industry professionals and is updated regularly. These educational modules prepare applicants for the multi-part CSCIP exam administered by the Smart Card Alliance. The exam requires demonstrated proficiency in a broad body of industry knowledge, as opposed to expertise in specialized smart card disciplines. Applicants must receive a passing grade on all parts of the exam to receive the CSCIP certification. LEAP membership in good standing is required to sustain the certification, and documentation of a required level of continuing education activities must be submitted every three years for CSCIP recertification. Additional information on LEAP and the CSCIP accreditation program can be found at 7 June 2015 Release June 15, 2015