CWA 15264-2:2005

Best Practice Manual for card scheme operators exploiting a multi-application card scheme incorporating interoperable IAS services CWA 15264-2:2005

Scope

This document is directed at central government and local government Card Scheme Operators. It provides guidance and recommendations on the practical operation and extension of government schemes that exploit cards incorporating a reliable pan-European interoperable public e-ID for identification, authentication and electronic signature services. The focus is on business and legal issues required for secure application download and delete mechanisms and on secure management of the use of interoperable e-ID functionalities by public-private commercial partners.
Background, guidelines on requirements, main recommendations and best practices for use of reliable pan-European interoperable e-ID/IAS within an eGovernment issued and public-private partnership based multi-application card scheme (MAS) are presented in the following sections.
· Electronic Identity
· Multi-application smart card schemes
· Risk analysis and Policy Management
· Service implementation and legal/administration guidelines
· Business Case Analysis
· Peer feedback and support mechanisms
It is assumed that the card scheme has been established and that therefore the emphasis is on operational issues and extension and evolution opportunities.