1. Implementation of the Digital Tachograph Card Issuing System in Poland – Case Study Speaker: Piotr KUŹNIAK – Polish Security Printing Works email: p.kuzniak@pwpw.pl tel: +48 22 5302 633 mob: +48 609 909 922 Workshop on Card Issuing on Digital Tachograph TAIEX Assistance - INFRA 30938 Brussels, 4th-5th November 2008

2. Basic facts on Poland Area: 312,679 km² Population: 38,116,000 (December 2007) Capital: Warsaw Official language: Polish Currency: Zloty (PLN) GDP per capita: EUR 12,496 EU accession: 1st May 2004 Deadline to implement Digital Tachograph System: 1st May 2006

3. Issues covered in the case study 1.Appointing the actors and their responsibilities. 2.Identyfying the different types of card holders. 3.Setting up the national legislation. 4.Launching the card issuing system.

4. Appointing the actors and their responsibilities Member State AuthorityMember State Authority Ministry of Infrastructure Member State Certification AuthorityMember State Certification Authority Card Issuing AuthorityCard Issuing Authority Card PersonalizerCard Personalizer National Card Issuing Authority (Polish Security Printing Works)

5. Member State Authority (Ministry of Infrastructure) Is the supervisor of the national Digital Tachograph SystemIs the supervisor of the national Digital Tachograph System Is the administrator of the card issuing system database (data protection)Is the administrator of the card issuing system database (data protection) Delegates to the National Card Issuing Authority the tasks of:Delegates to the National Card Issuing Authority the tasks of: Personal data processingPersonal data processing Managment of the national key pairsManagment of the national key pairs Exchange of information with authorized national and foreign institutions for the purpose of card issuingExchange of information with authorized national and foreign institutions for the purpose of card issuing

6. National Card Issuing Authority (Polish Security Printing Works) Operates the Member State Certification AuthorityOperates the Member State Certification Authority Is responsible for card applications distribution and processingIs responsible for card applications distribution and processing Produces/buys digital tachograph cardsProduces/buys digital tachograph cards Personalizes the cardsPersonalizes the cards Realizes the process of card issuing and card distributionRealizes the process of card issuing and card distribution Publishes information regarding the digital tachograph system in public (information campaign)Publishes information regarding the digital tachograph system in public (information campaign)

7. Card Holders (1) Driver Card  Issued for a driver  The driver must have only one valid card  5 years of validity  Driving licence & photo required for the application

8. Card Holders (2) Workshop Card  Issued for workshop technicians who install, activate and calibrate digital tachoraphs in vehicles  1 year of validity  Operates with a PIN  Certificates for the approval of workshop and technician as well as photo required for the application

9. Card Holders (3) Company Card  Issued for a company operating road transport  5 years of validity  Document proving the use of a vehicle with mounted digital tachograph required for the application

10. Card Holders (4) Control Card  Issued for the road transport control officers and customs officers  2 years of validity  May be personalized for a control officer or for a control unit  Photo required for the application (only if personalized for an officer)

11. National Legislation On 29th July 2005 Polish Parliament has enacted the Digital Tachograph System act. The statute came into force on 5th October 2005. This act regulates in general: 1. The tasks and responsibilites of public administration organs and other authorities regarding the digital tachograph system. 2. The rules for the workshop and workshop technicians approval. On the basis of this act of law Polish Security Printing Works has been appointed as the National Card Issuing Authority.

12. Card Issuing System (1) 1.Polish Security Printing Works has the following roles in the Digital Tachograph System in Poland: a.Card Issuing Authority, b.Member State Certification Authority, c.Card Personalization Authority. 2.Polish Security Printing Works has prepared and follows the provisions of the Member State Authority Policy. 3.The Polish Member State Authority Policy has been approved by the European Root Certification Authority which in turn allowed the certification of the Polish key pairs. 4.The ceremony of signing the Polish key pairs has been performed at the Joint Research Centre (JRC) in Ispra (Italy) in March 2006 and has been 100% successful.

13. Card Issuing System (2) The card application & issuance process in Poland is centralised. Card applications are submitted by mail or in electronic version (with secure digital signature). Cards are distributed by mail with the identity check on receipt. Polish Security Printing Works

14. Card Issuing System (3) CLIENT CARD STORAGE CERTIFICATION CENTER PERSONALIZATION CENTER Card Uniqness (TACHOnet) Paper application Electronic application APPLICATION AND CARD DISTRIBUTION CENTER SYSTEM MANAGEMENT CENTER Card database 3 2 1 6 5 1 4 10 9 8 7 Certificates Keys 11 National Driving Licence Register Central Office of Measures Drivers Approved workshops & technicians

15. TACHOnet Is a part of the TESTA network Is a part of the TESTA network Serves as the medium for the exchange of information with other Card Issuing Authorities Serves as the medium for the exchange of information with other Card Issuing Authorities Allows the Card Issuing Authority to ensure the card uniqness prior to its issuance to the driver Allows the Card Issuing Authority to ensure the card uniqness prior to its issuance to the driver Polish Security Printing Works following the series of tests has acquired the access to the TACHOnet in April 2006 Polish Security Printing Works following the series of tests has acquired the access to the TACHOnet in April 2006 Polish node of the TACHOnet operated by Polish Security Printing Works works in 24h on-line mode as well as in batch mode (cyclical data transfer at set times). Polish node of the TACHOnet operated by Polish Security Printing Works works in 24h on-line mode as well as in batch mode (cyclical data transfer at set times).

16. Tachograph Card Type Approval (1) Obtaining the type approval for the tachograph card is a prerequisite of the possibility to issue card to the users (drivers, control officers, etc.). The type approval is granted if the following certificates are gathered: a.Security Certificate issued by an authorized ITSEC entity, which confirms the fulfillment of the security requirements for a tachograph card; b.Functional Certificate issued by a national certification body (Central Office of Measures in Poland) which confirms the fulfillment of functional requirements for a tachograph card; c.Interoperability Certificate issued by the Joint Research Centre (JRC) in Ispra (Italy) which confirms the fulfillment of interoperability requirements for a tachograph card i.e. the compatibility of the card with digital tachograph units available on the market.

17. Polsih digital tachograph card has acquired all the necessary certificates which allowed the card to obtain the type approval in December 2005 and the possibility for Polish Security Printing Works to start the card issuing process. Tachograph Card Type Approval (2)

18. Summary Milestones on launching the Card Issuing System  05.10.2005 – entry into force of the Polish national legislation – the Digital Tachograph System Act  12.10.2005 – Start of the Project  12.2005 – Type approval for the Polish digital tachograph card  01.2006 – Approval of the Polish Member State Authority Policy at ERCA  03.2006 – National key pair signing ceremony at JRC  04.2006 – Connection to the TACHOnet  19.04.2006 – Card Issuing System ready – Project completed  01.05.2006 – First card issued The whole Project took only 6 months to complete !

19. Thank you for your attention. Any questions? Speaker: Piotr KUŹNIAK – Polish Security Printing Works email: p.kuzniak@pwpw.pl tel: +48 22 5302 633 mob: +48 609 909 922