(((etiCORE Specification

This specification is subject to these terms of use. Diese Spezifikation unterliegt diesen Nutzungsbedingungen. etiCORE Specification by VDV ETS

etiCORE-Model / Introduction

Project:

Introduction : Package

(((eTicket Deutschland is the German standard for electronic fare management (EFM) in public transport. The technical specification of this standard is called (((etiCORE and stands for future-proof electronic fare management in German public transport. This standard provides electronic tickets as well as cashless payment methods for public transport services and describes the processes in in-out systems with automatic or semi-automatic recording of travel entitlements. Chip cards, smartphones and other media are supported. The associated specification describes data and processes concerning security, device communication and message exchange. An important part of the technical standard is the security infrastructure, which primarily aims at fraud prevention, forgery protection and copy protection and, thus, at securing revenue for transport companies. With (((etiCORE, this security architecture is specified with the help of today's current standards. Scalable and efficient security algorithms are introduced to ensure future-proofing in this area. This raises the security infrastructure to the next generation, hence the abbreviation 2GSI (second-generation security infrastructure) for some of the near-hardware specifications. (((etiCORE is based - like the previous VDV Kern Applikation - on international standards such as the role model according to ISO 24014 and the identification card systems according to EN 1545-1 and EN 1545-2. The (((etiCORE role model adapts the role model according to ISO 24014-1 with the help of some changes to the conditions of the German public transport. For each role in the (((etiCORE role model there is a reference specification which contains all required functionality of back-office systems or terminals for the respective tasks. For each reference specification, there is, in turn, an interface specification that defines the exchange of data from the user medium (smart card, smartphone, etc.) via the terminal to the back-office systems. All specification parts are based on a comprehensive specification model in which it is also possible to navigate via a web browser. In addition to the above-mentioned reference specifications, this model also offers other views, e.g. workflows and basic processes. In this way, the systems and their functions can be viewed in the overall context. This enables a quick overview and a classification of one's own tasks for a specific role. Functionality bundles are also considered. It is possible to filter quickly via navigation or with the help of the reference specifications and their chapter structure, which functionality is required for which expansion variant. The functionality bundles range from the basic package to possible cashless payment methods to the automatic recording of trip entitlements in IN-OUT systems. The technical concept also defines the structure of interoperable fare products such as the Deutschland-Ticket or interoperable payment methods that enable Germany-wide participation in IN-OUT systems in addition to payment for public transport services. The features of the fare products can be limited to fare zones as well as extended to an entire area, which makes them valid as interoperable fare products. The technical concept takes into account both contact-based processes with the user medium as well as the compulsory contactless collection processes in accordance with ISO 14443. The technical concept also defines the security processes that take place during the exchange of data between individual partners/roles. It starts from the concept of trustworthiness: all participants of (((eTicket Deutschland must be able to trust that the data transmitted to them is genuine. This trust is established by the participants being able to directly check the authenticity of the counterpart using cryptographic methods. This verification takes place bidirectionally. This applies to every point in the communication chain. A user medium checks whether the terminal involved is authorised to perform actions with it. In addition to the mutual verification of the respective partners, the value objects in the form of electronic tickets or payment methods are authentic because these are exclusively applied between authentic user media and SAMs with a secured session. The proof of issuance is secured by the signature of the user medium. With the help of this signature, a transport company checks, when submitting the proof of issuance for a value object, whether this value object is authentic and its issuance was authorised. The further message exchange between the participating background systems in the ION (interoperable network) is secured by transport encryption (TLS) and message encryption and signature via web service security. The different parts in the present specification model are presented in the following chapter (see <a href="./EA2/EA2198.html">Specification Overview</a>) as an overview.