|Japan Railway & Transport Review No. 50 (p56-p62)
Feature: IC CARDS
eTicket Germany—An Interoperable Electronic Fare Management Standard for Public Transport
Berthold Radermacher and Elke Fischer
Germany’s local public transport system (ÖPNV) makes
a significant contribution to mobility in Germany where
passengers use ÖPNV more than 10 billion times a year to
travel in and around Germany’s numerous conurbations.
The high acceptance of public transport is largely due to
its clear design, extensive network and simple, interoperable
and intermodal one-ticket system in a region. During the
1950s and 60s, the labour-intensive gates used to access the
public transport system were removed to improve efficiency.
In the 1970s, transport systems were increasingly linked and
integrated by the formation of public transport authorities.
The implementation of interoperable single tickets, which
could be used with all modes of transport and all operators
within a transport authority, simplified local public transport
usage, resulting in an increase in passenger numbers. Public
transport authorities were subsequently established in most
areas of Germany.
|Figure 1: IFM Role Model Meeting EN/ISO 24014-1|
VDV Core Application Role Model
|The VDV Core Application is an open system in which
transport operators can work flexibly and independently. Its
organizational core is a logical role model that defines the
actors and their functional responsibility and their interaction.
These definitions are also defining the technical system
functions for an operational IFM. Clearly defined functions
and business processes are allocated to each role. Existing
organizational models and technical systems are now being
developed with enhanced security on the basis of a role
model that enables data transfer to transcend the limits of the
system, thus making sensitive customer data available only
to the company that has entered into an agreement with the
The configurations and features of the technical systems and the tariff and service systems remain in the hands of the local public transport operators and authorities. The centralized security management system facilitates shared access to customer media and enables all parties to work together with confidence.
The logical role model of the VDV Core Application is closely interlinked with the architecture of the international standard for an interoperable fare management system (EN/ ISO 24014-1), which was also significantly influenced by the development of the VDV Core Application. Figure 1 shows the functional roles specified in the VDV Core Application. To implement the VDV core application, VDV Kernapplikation GmbH & Co KG was set up in 2004 to adopt the key functions stipulated in the role model—IFM manager, registrar, security manager and application owner. This includes developing a set of rules comprising the organizational and contractual framework and detailed specifications and designing a registration and security system to include the maintenance and further development of both the security system and the set of rules. In addition, this new company will assist transport operators and transport authorities in introducing the VDV Core Application. The necessary key organizational and technical procedures were in place just in time for the launch of the first 3 million cards in the Rhine–Ruhr and Rhine–Sieg public transport authorities at the start of 2007.
Smart cards and mobile phones as core ticketing solution
|The VDV Core Application, which as a data and interface standard forms the basis for implementing the interoperable electronic fare management system in Germany, will be introduced initially on smart cards. However, it has been designed to be used as a stand-alone application on different electronic media, such as mobile phones. To facilitate this, the electronic media must fulfill the security and interface requirements (e.g. ISO/IEC 14443 a/b, NFC) of the VDV Core Application. Ticket purchasing via GSM interface has already been embedded in the VDV Core Application to enable quick and easy launch of mobile phone ticketing.|
Integrated customer interface for eTicket Germany
|An integrated customer interface is a key aspect of German wide
The standardization of customer interfaces in IFM systems should increase acceptance and bring real benefits to customers. An integrated customer interface offers customers the reassurance that familiar actions will produce the correct ticket wherever they go. With this in mind, integrated procedures and images have been defined for all components with a customer interface. This specifically includes recurrent signs, logos, pictograms, information services, and operator actions to make the system as user friendly as possible.
The logos and pictograms shown opposite were designed to aid identification and recognition of eTicket Germany.
VDV Core Application Security System— Background and Objectives
|The security system provides operators and customers with
a shared, open and trusted platform for interoperability for all
aspects of the logic role model, and is therefore designed to
relate directly to their function within the system.
The security management system safeguards the
autonomy and security of individual organizations (transport
operators, public transport authorities, system operators,
manufacturers), who have differing interests in one or even
several different electronic fare management systems. To
this end, it must systematically protect all production and
business processes associated with IFM ranging from
deliberate attack to unintended events.
The safety management system for eTicket Germany
with VDV Core Application comprises the following three
pillars (Figure 3), together with associated procedures and
• Public key infrastructure (PKI)
• Key management (KM)
• Provision of secure application modules (SAM)
|Figure 2: Logos and Pictograms of eTicket Germany
Figure 3: Pillars of Security Management for VDV Core Application
Photo: CICO in Schwäbisch Hall
Current Status and Future Developments
|In principle, every core application-compliant IFM project
can be built on the experiences of earlier projects. Proven
processes can just be adopted and improved continuously. In
the long term, this will significantly simplify matters and result
in a corresponding reduction in project risks and costs for
new participants. This is a key advantage of eTicket Germany
with VDV Core Application compared to proprietary solutions,
which ultimately create isolated solutions in a closely linked
German public transport network.
The VRS, VRR and VGN public transport authorities in North Rhine–Westphalia were the first to implement the VDV Core Application on a large scale. In 2006, the 3 million smart cards already in circulation were replaced by new media which are compliant with the VDV Core Application standard, and the control terminals were fitted with the relevant core application interface. Cards were issued to customers with annual subscriptions. At the same time, it was decided to implement an electronic control system on all buses belonging to transport companies operating in the transport authorities.
Since the switch from individual paper tickets to electronic tickets is associated with high capital equipment costs, in future, transport operators will rely on using mobile phone networks and the Internet to provide cost-effective, mobile, point-of-sale terminals. This can easily be achieved via the VDV Core Application, because it already specifies this option.
As early as 2005, immediately before completing work on the specifications, the first subscription smart cards with VDV Core Application were issued with the formation of a public transport authority in Saarland. At that time, all the central interoperability functions were not yet in place, so these cards are now being replaced by the latest versions. Since 2006, core application smart cards (known as KOLIBRICARD) have been issued to occasional users in the Schwäbisch Hall district, who appreciate the automated fare collection. Customers buy a smart card from the Kreisverkehr Schwäbisch Hall public transport authority, giving them an entitlement to use the system. They check-in and checkout at the CICO terminals at the beginning and end of their journey; the fare is calculated on the basis of usage information recorded in the control centre and deducted from the prepaid credit on their card. When the credit balance on the card reaches a defined minimum level, it is topped up automatically from the customer’s bank account. Since 2007, occasional users in the neighbouring Hohenlohe public transport authority have also been issued with core application smart cards that can be used interoperably in Schwäbisch Hall. All services used by customers in both authorities are priced in the control centres and charged to the customer by the transport authorities. Services are credited to the two networks on the basis of usage data recorded during the check-in/check-out transactions. The relevant customer contract partner (retailer) can verify from the level of entitlement on the user medium that this data has been generated authentically, thereby guaranteeing payment security.
In April 2008, the district of Ostalbkreis became the third public transport authority in the Stuttgart area to use the VDV Core Application with the introduction of the OstalbMobil fares cooperative. In future, OstalbMobil customers will be able to use their cards interoperably in vehicles belonging to the Kreisverkehr Schwäbisch Hall and the Hohenlohe public transport authorities. Similarly, their customers can use their smart cards in Ostalbkreis and will be invoiced for their travel by the retailer from whom they purchased the smart card. The set of rules will be used extensively for the first time in these three public transport authorities. The experience will be incorporated into existing core application contracts to benefit subsequent users.
Several transport operators and public transport authorities are introducing mobile-phone-based ticketing in a joint pilot study. The scheme offers a convenient mobile phone ticket suitable for all tariffs that includes timetabling information. Since secure NFC-based mobile phone devices are not currently available in sufficient numbers, the system is not yet based on the VDV Core Application and corresponding security system. However, further development of mobile phone ticketing is already clearly defined and there are plans to adopt the VDV Core Application standard in future. To achieve this, the VDV Core Application must be stored securely in the mobile phone. The current plan is to use a universal SIM card (USIM). This is linked to the ISO/IEC 14443 standardized near field interface (NFC) in mobile phones. Preliminary laboratory tests with a core application compliant interface have already been conducted. As well as using mobile phones as a substitute for smart cards, many transport operators are also considering using mobile phones as active terminals at the NFC interface. For example, in their Touch & Travel pilot scheme, DB AG is looking at whether costly active check-in terminals can be replaced by inexpensive passive RFID tags identifying the location for check-in transactions with the VDV Core Application. Location-based services of the telecommunication provider will also be used to determine public transport usage. The Touch & Travel pilot will evaluate the technical solution and results from economic and organizational perspectives.
In the Rhine–Main public transport authority (RMV), RFID tags already support the customer; the passenger’s mobile phone uses RFID tag information as the journey’s starting point for purchasing the ticket, then the passenger selects the travel destination and purchases the appropriate ticket using the mobile phone.
To successfully install the VDV Core Application in the mobile phone, the chip card application must be downloaded to the secure storage (USIM) of the mobile phone according to a uniform standard. Amendments to the core application specification are currently being developed and these will further specify the RFID tags to be deployed to enable interoperability.
Multi-client enabled core application back-office systems are being developed in other projects that will allow smaller transport operators affordable access to the VDV Core Application by offering back-office services via a third party. In parallel with this, VDV-Kernapplikation GmbH & Co. KG is continuing to collaborate with its European partners in the UK, France and the Netherlands to develop e-ticketing standards. In a joint EU project, options for migrating national systems are being investigated to enable customers to travel using an interoperable electronic medium throughout Europe. This represents the first step towards simple, seamless travel in greater Europe. Further steps to achieve these objectives are being stipulated and funded by the EU.
|Figure 4: Implementation of VDV Core Application in Germany
Photo: Touch point in Berlin
Mr Berthold Radermacher has been head of the Section Standardisation, Research Coordination and Industry Contacts within VDV since 1999. He is also the convenor of the joint standardisation subgroup CEN TC 278 WG3 SG5 “Interoperable Fare Management Systems” and ISO TC 204 WG8. Prior to his current position, he worked as group leader and deputy development leader for an automotive component supplier and railway component supplier in the field of system and component design. He graduated from the University of Wuppertal with a masters degree as an electro-technical engineer specializing in automation.
Dr Elke Fischer is director of application management and certification at VDV-Kernapplikation GmbH ＆ Co. KG. Previously, she worked as project manager at Transport East West Expert Team GmbH with responsibility for control and information technology and electronic fare management. She graduated from the Humboldt University of Berlin with a degree in electronics technology specializing in communication engineering. She then worked in software development in R＆D projects for Deutsche Reichsbahn, and also as project manager for various consultancies in public transport.