Payment and Identification Secure solutions

Payment and Identification Secure solutions

ST at a glance STMicroelectronics is a global leader in the semiconductor market serving customers across the spectrum of sense & power, automotive and embedded processing solutions. From energy management, healthcare or data security, ST is in every step of your daily life and its microelectronic devices make a positive and innovative contribution to people s lives. 2 79sales offices in35 countries A global semiconductor leader The largest European semiconductor company 2014 net revenues of US$ 7.40bn Approximately 43,600 employees worldwide 12 manufacturing sites 79 sales offices in 35 countries Listed on New York Stock Exchange, Euronext Paris and Borsa Italiana, Milano Advanced research and development centers around the globe: ~ 15,000 patents ~ 9,000 patent families More than 500 new filings in 2014 ~ 8,700 people working in Research and Development, and Product Design

Value chain Suppliers Assembly line and final test back-end We purchase silicon ingot, raw materials, equipment, energy, gas, chemicals and services from many suppliers and subcontractors. R&D conception and design New products are created in a multistep process including architecture conception, electrical layout, electrical and logic simulation, chip layout and generation of the mask that will be used to etch the design in silicon. Manufacturing front-end The manufacturing of chips is a process of around 400 separate stages, starting with a plain silicon wafer, and resulting in the etching of several hundreds to thousands of dice. Electrical wafer sorting We electrically test the dice on the wafer. It is also known as wafer sort or probing. The dice are cut from the silicon wafer before being assembled in a package. The chips are then tested prior to delivery to the customer. Business customers We offer a broad range of products and we serve a wide range of customers across the markets described below. 3 Where to find us Our automotive products are making driving safe Our digital consumer products are powering the augmented digital lifestyle Our smart power products are allowing our mobile products to operate longer and making more of our energy resources Our MEMS & Sensors are augmenting the consumer experience Our microcontrollers are everywhere making everything smarter and more secure

Secure MCU 2007 2000 EAL5+ Common Criteria 1st EAL4+ Common certificate on secure RF Criteria certificate platform with elliptic curve on ST19SF08 cryptographic (ECC) library 2010 ST33 integrates Flash technology & ARM SecurCore SC300 processor 2015 2014 ST31 contact & 250 million ST33 contactless platforms units shipped to date integrate Flash technology 1996 1st French ITSEC E3-High certificate on ST16601 2005 EAL5+ Common Criteria certificate on a 32-bit microcontroller 2009 1st EAL6+ Common Criteria on ST23 contactless platform with RSA/ECC cryptographic library (NesLib) 2012 2015 EAL5+ Common Criteria Awarded France certificate on ST31 Cybersecurity label 32-bit MCU with ARM SecurCore SC000 processor 4 ST s Secure Microcontroller product portfolio covers mobile and secure applications, offering compliance with the latest security standards such as Common Criteria up to EAL6+ and EMVCo or specific standards including ICAO as well as TCG 1.2 and 2.0. Our secure microcontrollers cover a complete range of interfaces for both contact and contactless communication, including ISO/IEC 7816, ISO/IEC 14443 Types A & B, ISO/IEC 18092, VHBR, NFC, USB, SPI and I²C. ST s Secure Microcontroller platforms rely on a highly-secure architecture combined with leadingedge CPUs, such as ARM s SC300 and SC000, and advanced embedded non- volatile memory technologies such as 80 nm embedded Flash and embedded EEPROM technologies. Focus on ST31 The ST31 family is the platform for highly-secure smartcard applications including banking, identification, pay TV and transport. With the ARM SecurCore SC000 processor and an architecture optimized for contactless performances, the ST31 offers a broad portfolio including MIFARE Plus and MIFARE DESFire libraries, multiple interfaces and certified cryptographic libraries. The platform addresses the highest security standards including Common Criteria up to EAL6+, EMVCo and PBOC. Secure zone Flash RAM ROM E2P ARM SC000 SecurCore 3DES/AES accelerator Nescrypt cryptoprocessor Peripherals Contact ISO/IEC 7816 RF ISO/IEC 14443-A, B, B ISO/IEC 18092

CONTACTLESS ST31 dual interface secure microcontrollers are designed to enable secure and fast contactless transactions for banking, ID and transport smartcards. Multi-protocol ST31 secure MCUs support various multiprotocol RF interfaces enhancing multi-application versability. ISO/IEC 14443 Type A, B and B, NFC, ISO/IEC 18092 and Very High Bit Rate protocols are all available and Auto-detect mode allows automatic detection and dynamic adaptation of the device to the correct reader protocol. MIFARE To support multi-application banking/transport cards including MIFARE applications, optional secure MIFARE libraries (MIFARE Plus and MIFARE DESFire EV1 libraries) are available and certied up to Common Criteria EAL6+. ISO/IEC18092 ISO/IEC 14443 Type A, B and B' arm sc000 ST31 embeds the ARM SecurCore SC000 processor that delivers outstanding computing performance and low dynamic power consumption which enables fast and reliable contactless transactions. Software engineers can benefit from the industry-recognized ARM development environment and from best-in-class code density. SECURITY & CERTIFICATIONS Benefiting from the strong ST security know-how and compliant with the most stringent application security requirements, the ST31 platform, including the NesLib cryptographic library, is certified according to all major security standards including EMVCo and Common Criteria EAL6+. 5 FLASH TECHNOLOGY Flexibility Thanks to Flash technology, flexibility is improved all along the value chain, from development to manufacturing: time-to-market is signicantly improved by avoiding ROM masking cycle time production leadtimes are shortened by software loading at a very late manufacturing stage inventory management is optimized Performance and reliability Fast programming speeds reach up to 10 μs/byte in a chained mode. ST Flash technology demonstrates excellent endurance and retention capabilities, up to 500,000 cycles of Erase/ Program operations per page and 30 years data retention.

Payment solutions STMicroelectronics banking product family offers a complete portfolio of contact, dual interface and contactless (Types A, B and B ) secure microcontrollers to support SDA or DDA markets. Having sold more than 2 billion secure MCU-based banking cards, ST has solid references in the banking industry and is present in banking smartcards all around the world. In addition to banking cards, ST also supports new mobile payment applications with a leading-edge offer including secure microcontrollers for UICC / Secure Element and NFC controllers. MIFARE Plus (including MIFARE Classic ) and MIFARE DESFire also support multi-application banking and transport cards. 6 BANKING MARKET The increasing need for highly secure payment transactions drives the banking card market towards chip-and-pin solutions. The US, China, Russia and India are now joining Europe and adopting chip card solutions. The contactless/dual interface trend is being confirmed and should be reinforced in the coming years: contactless payments facilitate small payment transactions and maximize adoption and user experience. System-on-chip STPay With the STPay family, card embedders have access to a comprehensive range of ready-touse banking solutions. STPay includes Static Java, Dynamic Java and Multos OS based solutions and covers a wide range of payment applications such as Visa, Mastercard, JCB, Interac, D-Pass or Amex. To ensure a quick set-up of the personalization line, STPay products are compliant with CPS (Common Personalization Standard) and have been validated by major personalization equipment suppliers such as Datacard. Banking market Munits 3500 3000 2500 2000 1500 1000 500 0 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 Contactless / Dual Contact DDA Contact SDA Source: ST estimates from ABI, Eurosmart, Nilson and ST Certified products

Identification solutions STMicroelectronics offers the optimum combination of security, portability and functionality for governments and industry partners in each country. In areas such as international passports, national ID, driving licenses and health, major programs are in progress to upgrade existing solutions with ST secure MCU technology. ST s products dedicated to e-government appplications meet the growing demand for secure cryptographic ICs, with high-speed interfaces, and large memory capacity. They integrate an enhanced crypto co-processor that supports BAC, SAC, EAC and AA required by ICAO standards and allow very fast e-passport transactions. The platform also supports all European standards related to electronic signature and European Citizen Card. ST s IC is the world s first secure microcontroller to achieve Common Criteria EAL6+ (AVA VAN5) certification. Government and identity market Today, governments across the world recognize secure MCUs as a key tool in protecting sensitive and personal data, reducing fraud and improving services and information for citizens. STMicroelectronics offers the optimum combination of security and functionality to governments and industry partners. With the epassport market firmly established, growth is expected from eid applications: evoting, edriving License, ehealth or digital signature are making an ordinary citizen an ecitizen. System-on-chip STGov ST and its partners offer complete solutions covering existing worldwide e-id standards that provide the most advanced transaction performance and security certifications. These solutions (native and Java) support applications such as e-passports, resident permits, digital signatures, PKI, driving licenses, e-health, biometric ID, and more. ID market Munits 400 350 300 250 200 150 100 50 7 2013 2014 2015 2016 2017 2018 2019 Source: ST estimates from ABI, Eurosmart and ST Dual Contact Contactless key references ST s offer is based on over 20 years of hands-on, secure MCU roll-out experience with governmental organizations worldwide serving all the identification markets. Today, more than 40 government institutions have adpoted ST solutions to secure large-scale government programs. Those solutions have also been introduced in some key private sectors such as frequent travelers or corporate PKI cards. Certified products

With more than 2.4 billion Smartcard ICs delivered to date, ST has been present in Banking and ID from the very early stage and has been supporting projects and customers for many years all around the world. Anywhere you live, you may have an ST powered Banking or ID card in your wallet! Banking references 300 million banking card ICs delivered in 2014 2 billion banking card ICs delivered to date ID references 60 million Gov & ID secure ICs delivered in 2014 400 million Gov & ID secure ICs delivered to date STMicroelectronics - August 2015 - Printed in United Kingdom - All rights reserved The STMicroelectronics corporate logo is a registered trademark of the STMicroelectronics group of companies All other names are the property of their respective owners Order code: BRSECUREMCU0815 For more information on ST products and solutions, visit www.st.com