( 409 KB )

You do not have the required access level. To download this file, see below for more information.

M CNA Member

If you are not currently a member, click here for information on fees and to Apply to join.

Access Levels

Document Summary

This note describes a method of data signature management which allows keeping track of the Calypso SAMs generating these signatures. It presents algorithms and examples for terminals needing to generate or to verify such signatures.


In a system based on the usage of contactless cards, it may be necessary to ensure the identity of the entity which issued the card data (e.g. bus tickets) and wrote them in the card, and which may have received some

payment in return.


This note relates to different kinds of data that may need issuer authentication:



  • Information about the card issuing, stored as a data structure called environment.

  • The rights entitled to the card holder are stored as data structures called contracts. Independent data structures called counters, dedicated to counting arbitrary units, may be linked to each

    contract.

  • The transaction history is stored as data structures called events.


Additional Information

Document Published:

23 Mar 2022

Document Type:

Technical Note

Version:

4

Reference:

110404

Calypso Solution:

Card, Mobile, Terminal, Central System, SAM

Calypso Product:

Prime, Light, Basic, Applet, HCE, SAM-C1

Benefits & Services:

Security

Documents disclosure

This document is classified restricted. This means the diffusion is restricted to the designated persons. The information contained in this document is not public and must be kept confidential.

I understand and accept that this Document is confidential and that I and my Company (below referred to as Recipient) agree with the terms and conditions set forth herein:

1. Recipient undertakes not to disclose any part of the Document.

2. This Agreement imposes no obligation on Recipient with respect to any portion of the Document received which, shown by documented proof, (a) was known by Recipient prior to the download, (b) was received by Recipient from a third party under no obligation of confidentiality, (c) was at the time of the download already in the possession of Recipient or (d) was legally put in the public domain.

3. This Agreement does not transfer any rights of any kind to Recipient. This Agreement does not include the granting of any license. The Recipient is solely responsible for determining whether their activities require a license to any technology. The Recipient is aware that it needs to sign a license from Innovatron in order to use this technology in the products it manufactures.

4. Recipient agrees to use the Document only for information purposes or for designing products that would legally use products compliant to the Document. This Agreement does not authorize the Recipient to design products compliant with the Document.

5. Recipient shall restrict disclosure of the Documents solely to those employees having to know. Recipient is responsible that its employees are or shall be committed according to the provisions of this agreement.

6. The Recipient may terminate this Agreement at any time, provided that it erases, deletes or destroys any copy of the Documents, and that the Recipient sends to Innovatron a written notice stating that any copy of the Documents have been erased, deleted, or destroyed, including possible electronic backups (Innovatron – 27 rue de Bassano – 75008 PARIS – FRANCE).