Smart Card Management Innovation - Shinhan Card Case Study May, 07. 2009 Gyung Eun Choi, gechoi@kr.ibm.com Advisory Software Engineer IBM KSSL(Korea Software Solutions Lab.)
Contents IBM CoreSCMS KSSL Introduction What is IBM CoreSCMS SCMS Market in Korea Shinhan Card was one of the earliest companies in the world to adopt SCMS Shinhan Card Case First Release, 2005 Second Release (OTA Service Support), 2007 Shinhan Day2, 2008 & Current 2
KSSL Introduction IBM SW Group announced the launch of Korea Software Solutions Lab in April 2007. It consists of three solution centers: 3 WW SWG Solution & Products WW Industry Solutions WW SW Acquisitions Identify & Remove Gaps Impact business with more Industry Coverage Impact business with more solutions in each focused industry Finance Finance S/W S/W Solution Solution Center Center Telco Telco S/W S/W Solution Solution Center Center Cloud Cloud Solution Solution Center Center Industrial Industrial S/W S/W Solutions Solutions Cross-Brand Cross-Brand S/W S/W Solutions Solutions Korea Software Solution Lab. Leading-Edge Market Requirements Right Solutions WW Market
VALID FROM VALID FROM GOOD THRU IBM CoreSCMS What is IBM CoreSCMS IBM CoreSCMS provides management of the overall card lifecycle including card issuance and post-issuance and customer support service. Card Component Mgmt.. ---,,,, Card and Applet Lifecycle Mgmt. == 01/2000 01/200 01/2003 Card Product Design & Building Issue Mgmt. (Mass Issuing or Instant Issuing) 4321 4321 076543 076543 78999 78999 John John J. J. Doe Doe VALID FROM VALID FROM 01/2000 01/2000 GOOD THRU GOOD THRU 01/2003 01/2003 Card Issuer Card Holder Support Key Mgmt. Post-Issuance Support Reporting 4
SCMS Market in Korea Telecommunication companies achieved increased market share and profit as end-users increased usage of their handsets. Visa reports that banks were also able to increase their market share and reduce costs by, providing improved quality customer service decreasing the need for direct customer care. 2001 2002 2003 2004 2005 2006 2007 KT Corporation Credit/Debit Appl. I-Cash Electronic Purse Loyalty Ticketing Moneta Card SCMS EMV credit (issued chip) Visa Cash e-purse SKT membership Loyalty (OK Cash bag) Mifare (in separate contact less chip) 1.6 million GlobalPlatfor mcards Online Banking Stock Auction Online / Offline Payment 35 million handsets Mobile Banking Service Mobile Banking Service Mobile Banking Service Money transfer Balance checking T-Money CoreSCMS launching LG Card SCMS 2.5 million mobile subscribers are using this mobile banking function 400,000 dongles 4.8 million handset OTA USIM enabled 3G phone 5 SKT Telecom is largest Telecom Company in Korea. Market share is 51.1%
Shinhan Card : A Global Leader Asia s 1 st Card Company, 15 th Card Company globally Card holder : over 13.7 M <from Nilson report, Dec. 2007, Unit : USD bn> 6
Shinhan Card CoreSCMS Release First Release, 2005 Duration : 8 Months Goal Issuance System Integration DB Migration Compliant Global Platform Efficient IT & Business System Second Release, 2007 Duration : 1 Month Goal Add the Issuance Channel with Mobile phone for the VSDC Application Add OTA Service for VSDC with one Mobile Company (SKT) Shinhan Day2, 2008 Duration : 5 Months Goal Provide Instant Issuance capabilities Add new interface and integrate with another AMS Mass Instance Integration Acceptance test Migration of Existing Card Products 7
Why Shinhan Card choose CoreSCMS, in 2005 Shinhan Card requested to solve 4 major problems of their legacy system. 3 Principles : 1) Issuance System Integration & DB Migration, 2) Complaint Global System, 3) Efficient IT & Business System. Host : Extension of Mgmt. Factor Migration with whole IC System Issuance : Make Applet composition CMS should integrate IC Legacy System Customer : Post Issuance System Factor of the SCMS IBM Core SCMS (Smart Card Mgmt. System) Basic Principal System Integration IC Card Product DB Migration Compliant Global Platform Efficient Management Chip & Card product 8
Shinhan Card (formerly LG Card) SCMS since 2005 Since 2005, Shinhan had issued over 30 card products via CoreSCMS and they are continuously adding new card products without having to make any changes to CoreSCMS Debit GPIN MMAA VCASH Medicine KTGM Total 37 Application (2005) E-Cert SKT Member Card Mobile Check Card PIMS Loyalty ZOOP Card Perso. JCOP 10 JCOP 20 Total 11 Chip (2005) SLE661QCR2 9 <2005>
Central issuance system If the new issuance channel is added, Core- Engine can be used and add the channel only. Mass Issuance System SCMS Administrator Card Issuer Support Various Channel Intelligent Device Branch PC Request Issuance Issuance Channel Internet Channel PC Customer Mobile Channel [ ID Card ] CoreSCMS Phone user 1. IBM 2. Dreamsoft 3. Update M-Bank Block/Unblock 4. E-Wallet Delete Details Options Select Back 10
Post Issuance via Web Post Issuance Web Page, Read the Chip and mix the information of the CoreSCMS System. 11
OTA System (Financial Side OTA Case) First Card Issuer is Telco. OTA System of Telco. has the role of downloading VM and load/install card applet. Second Card Issuer, Financial Company has the module of VSDC application issuance and DL Server for communication with VM on Mobile Telco Company Financial Company SOAP EAI(MQ) Encrypted Data GP Message OTA System Dedicated Line DL DL Server Server (PI) (PI) CoreSCMS WAP Browser, VM Program TLS Security SEED (128 bit) RAS (1024 bit) UICC Card Wireless Networking ISD Key Applet Load/Install TLS Security Zone SD Key Applet Personalization Legacy System 12
To go USIM Menu Push OK button Go to [Show USIM] icon 13
Start USIM Manager Menu 14
Go to Credit card Icon for VM download 15
OTA Service on the Phone CoreSCMS checks the card instance status Password, CVC verification and Second issuance : If there is no problem, then send the APDUs to requester 16
Shinhan Card SCMS migration, since 2008. Shinhan Card acquired LG Card. IBM CoreSCMS manages the issuance process including the new Instance Issuance KMS Maintain Key Life Cycle Crypto Service Windows Windows NT NT Eracom HSM e-biz Channel System Application Application Provider Provider Card Card Issuer Issuer HOST Card Component Profile Issuance Result Update Issuance Order: Basic Part + IC Part Upload Issuance Audit File CoreSCMS Perso. Bureau PC CAMS Reporting Issuance Process Mgmt. Issuance Order: Basic Part + IC Personalization Part FTP Issuance Order: Basic Part TCP/Socket Profile Validatio n & Sync. D.P. Request Perso. Audit D.P. Respons e Issuance Order: IC Personalization Part IBM IBM WebSphere WebSphere V6, V6, IBM IBM DB2 DB2 V8.2, V8.2, AIX AIX V5 V5 Local Vendor AMS Data Preparation Module Personalization Module SCPM Perso. Proxy EAI Channel Secured Perso Channel Instance Perso. at at Branch Office Perso. Proxy Channel Server EAI Send Audit Data Automatically Instant issuance PC PIS PIS AD2000 Card/Appl. Info. Add/Delete/ Update of Application & Data Channel Push Billing I/F DC280 17
Business Benefit Shinhan Card started Smart Card Instant Issuance through successful deployment of IBM CoreSCMS as well as Mass Issuance Number of Instant Issuances doubled after deployment With this process model, CoresSCMS is now scaling to over 20,000 instant issuances and over 40,000 mass issuances per day. Shinhan Card expands the service via mobile OTA Service is supporting the 3 Telco. Companies in Korea OTA Card holder is increasing more and more. 150 200 OTA issuance per Month 18
Entity in SCMS of Shinhan Card School Kiosk Web CoreSCMS Key Mgmt Legacy System Mass Issuance System Military Service System Customer Care System 19 Authorization System
Thanks 20
Loyalty Usage with NFC With NFC readable smart poster, chip update the point Smart poster 21
ID Check with the NFC Check the ID value inside of the Cardlet. If the id & password information is correct, the device ready the chip information and check the ID valid. Id/password OK Id/password not OK 22