1. GlobalPlatform Scripting in the Multi- Application World Doug Grote Thales e-Security Doug Grote Thales e-Security

2. What is scripting? Standard EMV applications for smart cards –Written by Visa, MasterCard etc. A real business case for multi-applications –But previously required considerable work GlobalPlatform Scripting language –Solves the interoperability problems ONCE and makes creating applications and personalising multi-application cards easy

3. Multi-application Industries

4. Extra Data Required Most smart card applications require data –For card personalization Security and formatting required –Provided by systems such as the Thales P3 TM GlobalPlatform scripting language developed –To help the Thales P3 TM and other relevant systems to achieve a standards based interoperability

5. A new application can be developed quickly –Or an existing one modified quickly by issuer JavaScript is a well known language –Making it easier for application developers Will promote a faster uptake of smart cards –When companies realise the potential The Advantages of Scripting

6. Application provider –Currently the card issuer but could be a third party partner organization –Specifies what the application will do and provides the cardholder data Application developer –Usually a software house –Builds the application on behalf of the application provider, provides: –Data generation and personalization scripts –Application code Who Does What?

7. Application Provider (Issuer) Application developer Data Script files Smart card management system Scripts Code Application code Network Cardholder Data file P3 + P3CM Personalization Chip data file Chip data record The Scripting Environment

8. GlobalPlatform scripting standards complete –Based on JavaScript and XML Easy way for an issuer to move to multi- application smart cards –Easy to update existing applications or create new ones Will help smart cards reach their full potential –As issuers & vendors begin to adopt standards Summary

9. Questions?