This article was accepted into the corpus but its outbound wikilinks were never NER-processed — typical at the deepest BFS hop or when the run's entity cap was reached. No expansion funnel to show.
| Smart cards | |
|---|---|
| Name | Smart cards |
| Caption | A contact smart card and a contactless smart card |
| Invented | 1970s |
| Inventor | Roland Moreno |
| Type | Integrated circuit card |
| Used by | Payment networks, mobile operators, healthcare providers |
Smart cards are portable devices containing embedded integrated circuits that store and process data for authentication, payment, identification, and secure computing. Developed in the 1970s and standardized through international bodies, they underpin systems from banking to telecommunications and national identity schemes. Smart cards intersect with technologies and institutions across finance, telecommunications, health, transportation, and national security.
The concept emerged in the 1960s and crystallized when Roland Moreno patented a microchip card in the 1970s, influencing deployments by firms such as Bull (company) and Motorola. Early adoption was driven by telecommunications operators like France Télécom and firms such as Gemplus and TRW Inc.; breakthrough deployments included banking initiatives with Europay and Mastercard pilot projects. Standardization efforts by International Organization for Standardization and International Electrotechnical Commission shaped global interoperability alongside specifications from European Telecommunications Standards Institute and collaborations involving Visa and national postal services. Government programs in countries such as Belgium, Germany, and India further accelerated adoption, while litigation and technology shifts involved corporations like IBM and Nokia.
Smart cards integrate silicon microprocessors or secure elements manufactured in fabs such as TSMC and packaged by vendors like Infineon Technologies and NXP Semiconductors. Contact cards conform to interface layouts defined by ISO/IEC 7816; contactless cards use radio-frequency components aligned with ISO/IEC 14443 and ISO/IEC 15693. Operating systems include proprietary platforms from Giesecke+Devrient and multi-application environments like Java Card and MULTOS. Cryptographic primitives rely on standards from National Institute of Standards and Technology and algorithms such as RSA (cryptosystem), Elliptic-curve cryptography, and symmetric ciphers described in Advanced Encryption Standard. Secure key storage and hardware security modules are analogous to designs from Thales Group and Gemalto.
Variants encompass contact, contactless, and dual-interface cards, with form factors governed by ISO/IEC 7810 and electrical characteristics by ISO/IEC 7816. Payment ecosystems are shaped by scheme rules from Visa, Mastercard, American Express, and network protocols like EMV. SIM cards used by operators including Vodafone, AT&T, China Mobile, and Deutsche Telekom follow ETSI specifications; eSIM architectures extend capabilities via bodies such as the GSMA. National eID initiatives reference frameworks from European Commission and interoperability projects like STORK. Transport ticketing systems often implement standards from Calypso (ticketing) and industry groups such as CEN. Security certifications refer to criteria like Common Criteria and FIPS publications from NIST.
Smart cards enable contactless payments at terminals deployed by retailers aligned with Square (company), access control in facilities managed by organizations like Siemens and Honeywell, subscriber identity in mobile networks of T-Mobile and Verizon, and healthcare card programs in systems administered by agencies such as National Health Service (England) and Centers for Medicare & Medicaid Services. They are used for public transit in cities like London (Oyster), Hong Kong (Octopus), and Singapore (Ez-Link), and for national identity in projects like Aadhaar in India and eID cards in Estonia. Enterprise authentication leverages integrations with Microsoft Active Directory, Oracle identities, and Cisco network access solutions. They also appear in secure passports issued by agencies including U.S. Department of State and Ministry of Foreign Affairs (France).
Security models draw on cryptography from standards bodies like IETF and agencies such as NSA for guidance on key management. Threats include side-channel analysis publicized by research groups at University of Cambridge and KU Leuven, protocol attacks described by academics at MIT and ETH Zurich, and supply-chain risks studied by institutions like Carnegie Mellon University. Countermeasures include hardware countermeasures from manufacturers such as STMicroelectronics, formal verification methods used in projects at INRIA, and certification frameworks like Common Criteria and FIPS 140-2. Privacy concerns have prompted legislation and oversight involving European Parliament directives, national data protection authorities such as CNIL (France), and debates in forums like World Economic Forum.
Fabrication involves semiconductor fabs by firms such as GlobalFoundries and packaging by companies like Amphenol Corporation. Personalization services are operated by providers including Thales Group, IDEMIA, and Gemalto, while issuance ecosystems involve banks such as HSBC, Deutsche Bank, and Banco Santander and mobile network operators including Orange S.A.. Card lifecycle management incorporates key injection, supply-chain logistics by carriers like DHL, and end-of-life disposal following guidelines from regulators like European Commission for hazardous materials. Recycling initiatives intersect with standards and corporate programs at firms like Giesecke+Devrient.
Market dynamics are influenced by global players such as Apple Inc. (via Apple Pay integrations), Google (via Google Pay), payment networks Visa and Mastercard, telecom giants like China Mobile and Vodafone Group, and security specialists such as Thales Group and NXP Semiconductors. Adoption varies by region: mature deployments in Europe and Asia contrast with differing trajectories in parts of Africa and Latin America, driven by projects from development banks like World Bank and standards work at ISO. Industry reports from consultancies such as McKinsey & Company and Gartner forecast trends toward embedded secure elements, eSIMs, and tokenization initiatives promoted by actors like TokenEx.