Card, mobile credential, payment and security
Editor’s Note: In a recent Banking Corner article, we asked the question “should your campus use the 16-digit ISO numbering scheme.” As a followup to this article, we look at part two of being ISO compliant. Special thanks to Taran Lent of CardSmith for the preparation of this important article.
By Taran Lent, CardSmith
A lot of attention has been given in recent years to the 16 digit ISO standard numbering scheme (ISO 7812) in connection with identification cards. This is particularly true in light of the migration away from using Social Security numbers for identification, which has obvious security concerns. There are many benefits to this long established internationally accepted card numbering standard. As a result, many campuses have already registered for their own unique IIN (Issuer Identification Number) and implemented card numbering schemes with 16 digit ISO numbers.
However, some campuses may be disappointed to learn that their campus card is only 50% ISO compliant. While registering and implementing a 16 digit ISO number is a step in the right direction, it is in fact only step 1 of 2 primary steps required for full compliance with ISO standards.
The second and equally important step to a fully ISO Compliant card is to comply with the lesser known standard, ISO 7811, which specifies how data is encoded on the magnetic stripe of the card. This standard is clearly defined and commonly used by hardware and software developers creating solutions that rely crucially on reading the magnetic stripe data according to exact specifications.
By strictly implementing encoding standard ISO 7811 in addition to numbering standard ISO 7812, card program administrators can ensure compatibility with a virtually unlimited range of current and future card technologies and eliminate the risk of being limited to using proprietary and more expensive terminal hardware and software. This will also give the card program complete flexibility to work with multiple solution providers and systems while keeping the door open to change technologies over time without needing to either change the card or re-card the campus.
The good news is that understanding and complying with ISO 7811 is not particularly difficult. The most critical aspect to the standard is the exact data field layout on Tracks 1 and 2 of the magnetic stripe, as described in the tables below.
Below are examples of valid Track 1 and 2 data given the following cardholder information:
Card Number: 6039 6044 4555 1057
Cardholder Name: Jane Doe
Expiration Date: 12/2008
ISO 7811 is not as well understood as ISO 7812 and is therefore routinely implemented incorrectly or ignored entirely. While following the standard is straightforward, there are some common pitfalls such as applying the standard to only Track 2 but not Track 1 (or vice versa), not using a valid expiration date, and/or omitting required fields altogether.
The primary problem for cards with these deviations is that they do not work properly with applications designed for use with ISO 7811 standard cards. Therefore, every application used by the card will require expensive custom development, driving up cost and reducing flexibility. Campuses with multiple card systems competing for magnetic stripe real estate are especially prone to non-compliant encoding mistakes. Below are the most common examples of track data schemes that do not comply with ISO 7811.
If you are curious or concerned about whether or not your card is ISO compliant, you can determine this easily by reading the track data on your card using a standard USB card reader. Once installed on your desktop computer simply open up a text application such as Notepad.exe or Wordpad.exe and swipe the card. The track data will print out on the screen and you can compare the result to the examples above and the ISO 7811 specification. If you are not currently ISO Compliant but are planning a project to become so, it is highly recommended that you purchase a copy of both the ISO 7811 and ISO 7812 specifications for your card implementation team to use as reference.
Remember, ‘almost’ only counts in horseshoes and hand grenades. You can’t ‘almost’ graduate, you can’t ‘almost’ be in love and you can’t ‘almost’ be ISO compliant. You either are or are not, and to be in the “are” camp, you have to implement to both standards – numbering and encoding. If you decide to implement ISO for your campus card, be sure to do it 100%.
Additional resources:
To purchase a copy of ISO 7811 or ISO 7812 from ISO, click here.
To register for a unique IIN number ($600) with ANSI, click here.
In light of a pending lawsuit and stalled legislative relief, Auburn University decided to cancel its off-campus card program until the situation is resolved. Its sister university to the west – the University of Alabama in Tuscaloosa – is holding firm still allowing students to use their campus cards at off-campus merchants.
The lawsuit is filed …
Two merchants last year filed suit against Auburn, claiming they were losing business because they didn’t accept Auburn’s Tiger Card. They also charged that the university was violating a law they believe restricts the university from offering the card acceptance to any vendor with the exception of off-campus bookstores. While the two merchants could have accepted the off-campus card, they claimed the transaction charges were too high, as much as 12%, according to some accounts.
Auburn’s position on the law that supposedly limits off-campus card usage to bookstores only is that while it does govern agreements made with these off-campus bookstores, it does not prohibit the development of relationships with other off-campus merchants.
Legislative change is sought …
A bill was filed by Rep. Alan Boothe of Troy, Alabama, in an effort to clarify the situation. The bill would have explicitly permitted state colleges and universities to operate debit card programs that allow for purchases at off-campus merchants other than bookstores. It would also have allowed them to charge more than the 3.25% transaction fee to merchants other than the off-campus bookstores that would continue to benefit from this fee limit. The bill had plenty of co-sponsors, but nevertheless, didn’t pass this legislative session as it was among a slew of bills that never passed because of lawmakers’ failure to adopt a budget. The Alabama bill will most likely be back, but the earliest it could pass is 2006.
Auburn suspends its off-campus debit program
After several hearings on the lawsuit, Auburn made the decision to disallow off-campus use until the Legislature acted. “We’re not going to spend any more money fighting this little lawsuit,” Auburn general counsel Lee Armstrong told the Associated Press. “We’re going to wait and let the Legislature do its work.” He said the suit did not attack the college’s credit card (ascending balance) plan, only the debit card part of the program, which is what the university is temporarily disallowing for off-campus use.
University of Alambama continues off-campus program
The University of Alabama, which was not involved in the suit, has, so far, decided to keep the status quo.
“UA values our partnership with our local community and have made no changes to our current Bama Cash program which is accepted at both on and off campus merchants,” Jeanine Brooks, Action Card director told CR80News.
“Our local merchants have demonstrated great interest in participating in the program. Bama Cash has become an important student service. It provides our students more accessibility to support local merchants, many times without requiring private transportation. It also provides students with more variety in shopping,” she added.
“UA supports the proposed debit card legislation regarding changes clarifying the right for public institutions of higher education to establish student debit card programs and partner with on- and off-campus merchants,” continued Ms. Brooks.
Editor’s Note: CR80News asked several industry veterans to comment on the recent acquisition of Diebld’s Card System Division by The CBORD Group. Bret Tobey has worked with several companies in the ID managment, security, and campus card industries including Diebold Card Systems. His observations on what the transaction may mean to the campus card market follow.
By Bret Tobey, Contributing Editor
As Wall Street trading wrapped up on Friday, July 1, Diebold employees gathered at facilities and over the phone to learn The CBORD Group had purchased the Card System’s Division of Diebold. Rumors flew all weekend and formal announcement came Tuesday, July 5.
Long time observers of the campus card markets recognize this as a culmination of years of consolidation within the industry. Two companies, Blackboard and CBORD, now have the bulk of campus card installations. They especially dominate larger campuses where large scale transaction processing and multiple applications are the norm.
Why Sell?
Beginning with their purchase of Advanced Network Technologies (AN&T) and Griffin in the mid-nineties, Diebold moved aggressively into the campus card marketplace. Diebold’s Card Systems Division was the only operational group within Diebold that combined their strengths of transactions and security. That synergy allowed the Card Systems group to maintain a higher profile within Diebold than their percentage of the company’s overall revenue might otherwise suggest. Higher education, however, operated very differently from Diebold’s core markets of financial institutions and large corporate customers. Long sales cycles and the demand for highly tailored solutions and contracts meant the Card Systems group always operated a little differently than other divisions within Diebold.
Although the integration efforts of AN&T’s ICAM and Griffin’s Series5 platforms caused some serious stumbles in profits and market share in the late 90’s, they were a profit center in the 2000’s. In it’s 4.1 release, the CS Gold platform has been a very robust large scale transaction processing platform. Over the past several years product launches in the access control, video integration and alarms have strengthened Diebold’s offering on the security side of campus cards. Upgraded and expanded product offerings allowed Diebold to increase revenues while their market share increasingly focused on large institutions.
In the meantime, the privately held CBORD Group brought in outside capital from Oak Investment Partners and Sterling Investment Partners in the summer of 2004. CBORD openly mentioned their plans to use the new capital to grow through acquisition, and they took a major step in that direction with this transaction.
A Good Match?
Until last week, each of the three major providers of campus card systems had clear strengths in the market while remaining roughly comparable in many areas. Blackboard’s Internet capabilities complemented their broad transaction suite. Diebold led in security and access control. CBORD had a strong track record in the food & nutrition groups on campus. The addition of Diebold’s access control & security expertise to CBORD’s portfolio addresses one of the biggest gaps in their product line. When responding to bids requiring an access control solution, CBORD has had to rely on partners to offer product. At best, they did not capture all of the business possible. At worst they lost control of a critical component of the response. Expect to see at least basic integration in the short term that allows Odyssey customers to leverage Diebold’s strengths and vice versa.
Beyond the relative areas of expertise, both company’s current lead platform utilizes Oracle as the underlying database. Diebold exclusively uses Oracle and CBORD can leverage their ODBC capabilities for institutions that utilize Oracle for other campus applications. A common database platform makes basic communication efforts more realistic, but not necessarily easy. “Best of breed” integration efforts rarely turn out to be as simple as they might first appear.
Challenges and Opportunities
Managing the acquisition will be critical to CBORD’s ongoing growth, but they might be able to learn from difficulties in the last round of acquisitions. Diebold’s customer base still consists of Series 5 and CS Gold platforms. Blackboard maintains completely separate UNIX and Windows transaction platforms. The nature of campus card installation requires that CBORD maintain each of the platforms in their new customer base for at least several years. But, the perceived synergies of the investment will demand that they move forward with a platform that combines CBORD’s food service expertise with Diebold’s security expertise.
On a functional side, CBORD has operated as a systems integrator, shying away from manufacturing their own products. Diebold Card Systems brings an extensive history of manufacturing components. Those require two completely different organizational structures. The respective sales forces reflect this with Diebold having about a dozen account managers servicing a third of the customers that CBORD’s smaller staff does. Reports indicate that CBORD will retain all Diebold employees, but some turnover can be expected simply because of simple conflicts in culture and practice.
Over the course of the next year competitors may see a small bump as some institutions attempt to avoid the transition difficulties seen in past industry acquisitions. Reduced competition may make room in the market for smaller players to leverage a few key wins into a broader market share. However, with hundreds of campuses each, it’s unlikely that either Blackboard or CBORD will be unseated anytime soon.
Both CBORD and Diebold offered very robust housing management systems with dedicated customers. Convincing either set of customers to migrate will be difficult. However, managed appropriately CBORD may now have a critical mass that allows them to dominate the university housing management market. Over time, that might translate into markets beyond higher education for their housing and judicial applications.
That critical mass represents the largest opportunity for CBORD in all the application areas. As they eventually migrate towards common platforms, they will have a much larger customer base to support their engineering efforts. That should allow them the flexibility to continue enhancing their product sets as they pursue new opportunities. Unlike Blackboard, CBORD already has a strong presence outside of higher education. Pushing a broader application suite beyond higher education could allow CBORD to grow faster and bigger than any previous campus card provider. This acquisition provides the technology and talents to move in that direction.
A reported purchase price of $38 million makes it an extremely significant transaction for this industry. Initial reports state that Diebold employees will be retained and offices will be maintained in Farmington, NY, Green, OH, Waco, TX, and Cypress, CA with retention of the staff in Atlanta, GA but a closing of that office.
Customer & Industry Reaction
Having seen this before, customer reactions are somewhat tempered. The simple size of campus card installations precludes rapid migrations to new platforms, so it is not surprising that the customers of Diebold and CBORD that I spoke with expect to see only minor changes for some time. Kent Pawlak from the University of Texas at Arlington, a long time Diebold Card Systems customer, typified customer sentiment. While their overall reaction seems to be generally positive they would be taking a “wait and see” approach to the new organization. Another longtime customer observed that ten years ago the big players in the market included Harco and Griffin. Now, it appears, the Harco and Griffin descendants (Blackboard and CBORD respectively) are poised to battle for market share once again.
Editor’s Note: CR80News asked several industry veterans to comment on the recent acquisition of Diebld’s Card System Division by The CBORD Group. Bob Huber is a leading consultant in the area of campus card systems. His observations on what the transaction may mean to the campus card market follow.
By Robert C. Huber, Business Consultant
I believe this is overall very positive for the entire campus card industry. CBORD has set the “customer satisfaction” standard for the industry for over 20 years and proven their ability to grow to be the largest card system company without loosing sight of their customers.
CBORD has taken over several other companies in their past and been quite strategic in blending new employees and customers into their existing “corporate family” in a positive manner.
Combining the strengths and competencies of both organizations should provide you synergy and will probably signal a new round of buying and selling of campus card companies – and provide more competition and better service industry-wide in the long-term.
Imagine replacing only the cylinder inside your existing door mechanical door locks and converting them into electronic access control devices. That is the concept behind products from BUGA, a German company, that is turning traditional key-based locks into prox and contactless readers that integrate into wider access and security systems.
BUGA’s flexible, cost-effective electronic cylinders enable to easily add electronic functionality to mechanical locks
Major ASSA ABLOY divisions are already tapping BUGA´s know-how to expand their product portfolio and increase their business
BUGA Technologies GmbH, a leading OEM supplier of smart RFID cylinders for locks, has developed a simple, easily adaptable and cost-effective
electronic cylinder that can be used to add RFID functionalities to mechanical locks. The “e-cylinder” will significantly impact the access control market, allowing to implement electronic functionalities in doors where it was previously not cost-effective or impossible to do so.
Since the development of card-based electronic access control, there has been incompatibility between the concept of doors that are secured by a traditional, mechanical cylinder lock and doors that are secured with electronic access control readers: one requires a physical key while the other needs a credential containing an RFID (radio frequency identification) transponder. Buildings with both types of access control systems require a double management system - one for the cards and one for the keys – a solution which is inconvenient and inefficient.
BUGA’s product, the BINoXX - DK 4100 Smart RFID Electronic Cylinder, is
designed to address this problem. It can replace a mechanical cylinder, allowing existing contactless RFID-based access control credentials to open doors which previously required a key. They are ideally suited to complete the portfolio of OEMs wishing to expand into the growing market of electronic access control systems, such as time & attendance, access control suppliers or cylinder manufacturers.
By integrating BUGA’s ready-to-use electronic cylinders into their
mechanical lock portfolio, ASSA ABLOY and other OEM lock companies will be able to offer complete high-performance building access control solutions that work with a single electronic credential. ASSA ABLOY France and ASSA ABLOY Germany are presently working with BUGA to integrate the technology into their product portfolio.
The battery-powered cylinder recognizes all major transponder types,
including Hitag, MIFARE, HID Prox, etc. Each cylinder can be programmed to allow entry to authorized parties on the basis of pre-set times and dates. For example, if an employee is on vacation, the cylinder can be programmed not to open if the carrier tries to enter during his/her scheduled days away from the office. The BINoXX – DK 4100 is also designed with a double-knob feature that makes it possible to exit a door without the need to present a valid credential.
About BUGA Technologies GmbH
BUGA is a leading OEM supplier of smart RFID cylinders, specialized in
integrating electronic intelligence into mechanical locks using RFID
technology. Founded in 1988 as experts in mechanical master key systems, cylinders, locks and accessories, BUGA developed the concept of electro-mechanical locks in the late 1990s. In 2000, aiming to combine the advantages of electronic access control with the security of mechanical door cylinders, BUGA presented its first Electronic Cylinder in a Key/Knob version. Since then, BUGA has added many more features to its product portfolio, whose security features and ease-of-use are unique. BUGA is headquartered in Norderstedt, Germany (www.buga.de).
In a move that is certain to have lasting impacts on the campus card landscape, CBORD announced the acquisition of the Card Systems Division from Diebold today. CR80News editorial team will be interviewing key players throughout the day and will update readers with breaking info and insight as the day progresses. The press release follows …
CBORD Announces Acquisition of Diebold Card Systems Division
Deal makes CBORD dominant provider of cashless systems
Ithaca , New York– The CBORD Group, Inc., one of the world’s leading suppliers of campus card, housing, and foodservice management systems for the College & University market today announced that it has acquired Diebold Card Systems Division (DCSD). DCSD is the business unit of Diebold, Incorporated (NYSE: DBD) dedicated to campus card and housing management systems for colleges and universities. The acquisition makes CBORD the dominant provider of cashless systems to the College & University, Business & Industry and Healthcare markets, with more than 750 installed cashless systems and over 100 campus housing systems under current management.
Bruce Lane, Executive Vice President of CBORD, said, “The combined talent and resources of our organizations will enable CBORD to provide greater value to customers through exceptional service and the economies and expertise of a larger organization. More than six million cardholders will have access to a wider range of products, and exciting new Web-based products that take advantage of our shared technology.”
Brad Stephenson, Vice President, Physical Security Group at Diebold, added, “Diebold Card Systems Division and CBORD each have a long history of providing quality administrative products to their customers. By integrating the two organizations, we will be able to offer the unique products of both companies in a smooth and seamless customer experience.”
CBORD has plans in place to expand in its current markets as well as emerging markets such as continuing care retirement centers, private secondary schools and sport complexes. CBORD’s product suite now includes: Odyssey PCS Cashless System, CS Gold Campus Card System, housing management systems, judicial management systems, access control systems, cashless vending, point of sale and self-order kiosk solutions, food and nutrition management systems, e-commerce and the Webfood On-line Ordering solutions.
The combined operation will be headquartered in Ithaca, New York and have offices in Farmington, New York; Green, Ohio; Waco, Texas; and Cypress, California.
About The CBORD Group, Inc.
The CBORD Group, Inc., founded in 1975, is currently marking thirty years of service to the campus-wide needs of higher-education facilities. CBORD works with a wide variety of clients and markets, providing cashless and ID card privilege control systems, housing management systems, and Webfood online ordering service. In addition, CBORD serves thousands of chain restaurants, hospitals, universities, supermarkets, and gaming facilities with its suite of foodservice, catering, and nutrition software products. The CBORD Group has customers in the U.S., Canada, Europe, the Middle East, and Australia. To learn more about CBORD, visit us at www.cbord.com.
About Diebold Card Systems Division
The Card Systems Division of Diebold , Inc., has roots in campus ID cards dating back to 1964. This Card Systems division introduced the first computerized card system and led the industry through numerous generations of system development. Today Diebold Card Systems is a leading provider of campus ID card systems, access control systems, housing management systems, and CCTV.
by Danny Smith, ColorID (www.colorid.com)
One of the biggest differences between printing on blank PVC (Mag Stripe) card stock and proximity cards is the cost difference of the cards. Blank card stock may cost less than a dollar per card while Proximity cards average $3 - $8 (depending on options). Mistakes in the printing of Proximity cards can create significant financial losses. In order to protect your investment here are a couple important points you may consider.
Using Proper Proximity Printing Technology
Problem: Most blank card stock is constructed with an even flat surface, however Proximity cards contain an antenna and chip inside each card. Dye sublimation printers are direct to card printers. The deviation in the Proximity cards surface (from its internal contents) causes the printhead to lose contact with the cards surface. The result may be a loss of printed information. Some ID offices have accepted the end result with direct-to-card printing. However, improved technology is now available to dramatically improve the quality of your Proximity cards.
Solution: Fargo offers an HDP (High Definition Printer) series ID printer specifically designed for printing on Proximity and Smart Cards. The HDP’s printhead never touches the cards surface like a dye sublimation printer. The HDP prints onto a ‘transfer film’ first and is then transferred to the cards surface and adhered by pressure and heat. If the cards surface is uneven, the film will cover all its deviations. In addition, the print quality is amazing when compared to a dye sublimation printer. Since the printer film is not being fused into the card, its colors are more vibrant, clear and to the edge of each card. In addition, you can help protect your Proximity cards by adding the standard clear or holographic overlaminate to your cards surface. This will minimize fading and seal the card from the elements. The printer cost is only slightly higher than some dye-sublimation printers. The decreased number of misprinted cards and better print quality will help pay for itself in the long run. For those needing a better print quality with vibrant colors, we would suggest a High Definition Printer.
Extended Card Life – How to Protect Your Investment
Problem: Proximity cards that are not properly protected may last only 12 – 18 months before experiencing issues such as cracking, loss or fading of variably printed information, etc.
Solutions:
1.) Pre-Printing Proximity Cards – We recommend you lithographically Pre-Print Proximity cards. This will give you a much higher print resolution and more durable card. Overlay (1.5 mil) is used during the Pre-Printing process to protect the static information.
2.) Lamination – Using a lamination (1mil) overlay on your card to protect the variable information (image and data files), coupled with the Pre-Printed solution gives you the optimal protection.
Summary: Yes, it may initially increase your per card production cost by using the above methods. However, in the long run spending a little more in the beginning will ensure you are issuing cards that are properly printed and protected. Following the above recommendations should enable your cards to last 4-5 years under normal wear and tear.
Printing high-quality color images on ID cards has become a straightforward, basic function for card program staff. This is a testament to the high quality printers, supplies, and plastic cards available today. But what happens when a new identification technology is added to the mix? Must our comfortable printing processes change if a proximity, contactless, or contact chip is added to the card?
When an additional technology is embedded into a card, it is more difficult for the manufacturer to maintain a perfectly smooth surface on the plastic. Slight divots and protrusions tend to occur around the embedded objects (e.g. beneath the chip, above and below the antenna). Though often invisible to the human eye on the blank card, these imperfections can result in very visible problems with the image once the card is printed.
Different printers and processes provide different options
• Dye sublimation printing
Most ID cards that are printed onsite by the issuer use a printing process called dye sublimation. In this process, dye is transferred from a ribbon to the surface of the card via heat supplied by a component in the printer called the print head. When the print head encounters a divot or imperfection in the plastic surface, dye is not transferred to the plastic or is transferred incorrectly. This results in less-than-perfect image reproduction. It can also result in damage to the sensitive, and costly, print head.
According to Danny Smith, Executive Vice President, ColorID, “some ID offices have accepted the end result with direct-to-card (dye sub) printing. However, improved technology is now available to dramatically improve the quality of your Proximity cards.” It just depends on what quality and fall-out you are comfortable with.
• Re-transfer printing
An alternate printing process involves the transfer of the dye to a clear sheet of film that is then adhered to the plastic card such that the print head never touches the card itself. This method eliminates the image reproduction problems caused by surface imperfections. Explains Joe Wright, Director of Marketing, Fargo Electronics, “think of the film as a blanket that is laid across a bed. (The film) conforms to the bumps and imperfections on the card just like the blanket does on the mattress … the result is a smooth surface.”
According to Mr. Wright, the re-transfer process (what Fargo calls High Definition Printing or HDP), has three major benefits when printing on cards with embedded technologies. “It is improves the card’s image quality, it reduces the amount of fallout (wasted cards), and it reduces the potential damage to the printing system (that can occur with a dye sub print head on an imperfect card surface).”
This type of printer, says Mr. Wright, “costs about 40% more than comparable dye sub printers. Consumables cost about 20% more.” It is easy to see how this technology could quickly pay for itself through the reduction in wasted cards. Remember that prox, contactless, and chip cards are more costly than basic magnetic stripe cards, so each instance of fallout from an unacceptable quality print job adds up rapidly. Mr. Smith concurs, stating that “the decreased number of misprinted cards and better print quality will help pay for itself in the long run.”
• Ink jet printing
There is a third option for printing that can result in good quality images for technology-embedded cards. Inkjet printers for cards are available and they can be an acceptable solution for entry-level, low volume environments.
When preprinting makes sense …
Dennis Caulley, VP of Access ID, concurs that re-transfer printing is a good option for embedded technology printing but he stresses preprinting as well. “In many cases, the capital outlay for a new printer does not make sense for a client. By preprinting the majority of the card, you get a uniform consistent image on all cards.”
When the static images on a card (e.g. backgound graphics, reverse side text) are preprinted, only the small areas of personalized detail (e.g. photo, name, account number) are left to the onsite dye sub printer.
Can thicker cards help the printing process?
Though we are all conditioned to think “standards, standards, standards,” Mr. Caulley suggests that a slightly thicker card can alleviate some of the printing problems that arise when embedding technologies. Normal ISO standard cards are 30 mil in thickness. According to Mr. Caulley, this relatively thin number was set because of the need to emboss cards for financial purposes. 30 mil was a reasonable amount that embossers could handle.
“Moving to a 35 or 36 mil card,” he states, “is certainly helpful in terms of both printability and durability.” It seems that added mils help to even out the bumps and divots that occur when technologies are embedded between the layers of plastic. “It is all a surface profile issue,” he concludes.
How to proceed?
The most prudent path seems to involve a series of steps. First, investigate the different options available from your card manufacturer or other manufacturers. Next, consider purchasing a re-transfer style card printer evaluating not just the upfront costs but the amount it may save in the future. Evalutate preprinting costs and determine if this is a more cost-effective option for your program.
Finally, find a way to print some sample cards using the exact card types and printer types you are considering. You can do this in house your existing equipment and a small quantity of sample cards. You can also request your printer supplier to test a quantity of cards for your. Fargo, as well as other suppliers, offer this service free of charge.
Remember, thousands of card issuers around the world print on technology-embedded cards everyday. With a bit of research and planning, you will be able to attain high quality results for your program. A more advanced card does not need to compromise your image quality.
Additional resources:
ColorID developed a great write-up for CR80 focusing on challenges and solutions for printing on proximity cards. To read this article, click here.
Perhaps the most important feature of any credit or debit card is the 16-digit number unique to that card. It is called an ISO number, and it is the key for linking each transaction conducted with the card to the account and account holder responsible for the transaction. In the early 1990’s, these numbers began appearing on student ID cards, replacing earlier numbering schemes like Social Security Numbers or a series of randomly generated digits. But what makes these 16 digits so important? Why would an institution choose this numbering scheme over another? And how does one go about getting an ISO number? Read on.
The International Organization for Standardization (ISO) is a global federation of standards bodies that works to create standards on nearly every imaginable topic. Its subcommittee on Information processing systems, called Technical Committee 97 (TC 97), issued its specification ISO 7812 in the mid-1980’s. ISO 7812—titled Identification cards: Numbering system and registration procedure for issuer identifiers—prescribed the format for a standardized card numbering scheme.
The importance of the standard is that it was a precursor to any attempt to build an infrastructure of card reading devices capable of accepting meaningful data from cards provided by multiple issuers. The infrastructure was necessary for mass, cost-effective development of point of sale (POS) and ATM networks. In reality, this number was required for transaction routing and control while a standard placement of the number on the magnetic stripe was needed to ensure that card readers knew where to look for the ISO number on the card. This latter goal was accomplished by the American Bankers Association (ABA) magnetic stripe encoding standard.
The first digit in an ISO number is called the Major Industry Identifier (MII). This number indicates the category best describing the card issuer owning the ISO number. The MII is broken down as follows: 1 = airlines, 3 = travel and entertainment, 4 = banking/financial, 5 = banking/financial, 6 = merchandizing and banking, 7 = petroleum. With limited exceptions, the Issuer Identifier encompasses the single digit MII and the five digits following it—for a total of six digits. In general, each card generated by an issuer starts with the same six digits.
Giant card issuers such as the major financial institutions and credit card issuers will often have multiple Issuer Identifiers as they run out of unique numbers in one and must utilize others. The next nine digits form the Individual Account Identifier. In the same way that the first six digits name the card issuer, the next nine digits name the cardholder. Actually, the issuer can choose to use between nine and 12 digits for this section, resulting in an ISO number that is between 16 and 19 digits. The generation of these numbers is left up to the issuer. A skip factor or pattern is used to avoid issuing sequential numbers and thus making it overly simple for a person to guess at other valid card numbers by looking at one actual card number.
The final digit (number 16 unless the issuer has elected to use more than nine digits for the Individual Account Identifier) is a check digit, calculated by applying a simple mathematical formula to the preceding digits. This check allows a card reader to perform the calculation based on the first 15 digits it read from the magnetic stripe and check it against the final digit read. If they match, it is likely a valid read. If they do not compute, then the reader knows that the read was bad and requests that the card be swiped again.
Many campus card programs are utilizing the ISO numbering scheme. The main reason for this is its requirement if the card is to be used in the established financial networks.
If you plan to enable financial functionality within the banking networks, ISO numbering is a must. While many campus card systems utilize numbering scheme other than ISO numbers, all card readers and all manufacturers of meal plans, security systems, and other peripheral campus card elements can utilize the ISO number as the identifier. Those that tell you they cannot accomplish this should be asked to explain.
If you never plan to use add financial capabilities to your card program, this standardization may not be necessary. However, there seems to be little reason not to go to ISO numbering for new programs and/or new campus-wide re-issuances.
You do not have to be a bank to get an ISO number. Many schools that utilize the scheme own their own numbers while others have looked to their banking partner to obtain this number on their behalf.
In the past, many believed that the campus had to own their number so that it could be ported from one bank to another if contracts were moved. In reality, most universities that have switched banking partners have been forced to recard and utilize a new ISO number, making the ownership issue less significant.
Many financial institutions are unable to utilize an ISO number that is not their own as their internal systems are geared to accept only these numbers. If you have a banking partner, or are in the review process, ask for information. The application process to obtain a number is simple and costs only $600.
The process takes four to six weeks. In the U.S., applications are processed by ISO’s member body—the American National Standards Institute (ANSI). Application materials can be requested from ANSI by calling 212/ 642-4992 or visiting the on the web at ansi.org.
Gallaudet University, a 140–plus year-old Washington, D.C. school for the deaf and hard of hearing, wanted to add cashless payment capabilities to its existing HID proximity cards that controlled dorm access for students. The college didn’t want to replace its point of sale (POS) infrastructure, but the existing cash registers accepted only magnetic stripe cards. Enter ViVOtech with a reader that could enable the college’s existing system to think it was receiving data from a mag stripe card.
Gallaudet had already installed an HID prox card system to control building access, but students wanted the ability to use those same cards in place of cash. At the close of 2003, nine ViVOpay 3000 readers were installed, providing students with a cashless, contactless alternative when they visit the cafeteria or bookstore.
“It’s working out great,” said Mohammad Khan, ViVOtech’s president and COO. “There are two big values we offer in this installation. One is the same prox card can be used for access and payment. As a student you’re dealing with one device, which is very convenient. Second, they (Gallaudet) didn’t want a huge amount of changes. Our solution works with the existing POS system.”
ViVOtech provided the plug-and-play technology that enables the college’s POS system to accept transactions from HID cards, he explained. The 3000 reader attaches to the magnetic stripe reader slot. “Through that attachment, it produces a signal that makes the (POS device) think it is being swiped,” explained Mr. Khan.
“From a consumer point of view,” he said, “you can hold the card, wave the card on the reader and you’re done with it. That provides speed and increased efficiency, especially during peak hours.”
Gary Aller, Gallaudet’s executive director, Business and Support Services, was extremely pleased with the project. “Using ViVOtech’s contactless readers and HID’s proximity cards have saved the University a tremendous amount of time and labor. We were able to use the University’s Simplex remote door opening system and a simple download of student names from that system to provide the database for our food service computer. The system was also easily expanded to include faculty and staff at a later date. I have been very pleased with the efficiency and reliability.”
“Our business is enabling contactless payment whether it be in a university, a corporation, or a retailer,” he added. The California-based company has shipped more than 75,000 readers in just the last 12 months, mainly in the U.S. to handle contactless cards produced by MasterCard, American Express and Visa.
“The value that our solution provides is that it takes the least amount of effort in software development costs,” adds Mr. Khan. “We are able to provide a very simple plug-and-play offering. Overnight, you could start accepting HID cards (for payment).”
It takes about less than half an hour to enable one POS system and requires no technical expertise. “Our guys spent a half day there,” said Mr. Khan in reference to the Gallaudet install. “It’s a good example of how different universities, using mag stripe cards, can turn into a contactless card system with a very small investment. It can issue a contactless card or fob to students.”
About Gallaudet University
Gallaudet University was founded in 1864 (its charter was signed by President Lincoln) and is the world’s only university offering educational programs to deaf and hard of hearing students at all learning levels. The university’s mission is to serve as a comprehensive, multipurpose institution of higher education for the deaf and hard of hearing. In addition to its undergraduate and graduate academic programs, the University also offers national demonstration elementary and secondary education programs.
