...
When ID-based travelling is used, the travel document (as previously mentioned) does not contains contain any ticket information. It is not possible to determine if the traveller has the right to travel by only reading the travel document. An entity intending to accept a particular travel document for ID-based travelling must therefore chose to either verify the right to travel on-line with the back end system or allow the passenger passengers to travel without checks with the risk of them not having the right to do so.
If a credit card is used for travel, this credit risk may to some extent be transferred to the credit card issuer (for transactions up to a certain amount) at the price of the transaction fee. In other cases, it is likely appropriate to, selectively and in before handadvance, communicate travelers travellers rights to the validating equipment where they may become relevantso when an ID is used it can be checked towards a local list in the validation equipment. From a technical point of view, it may require some thought about how such a structure can function on a large scale. It is hardly reasonable that all information should exist everywhere. Well-designed mechanisms are required to determine what information need to be communicated, when and to which devices.
4.1.4 Security aspects of ID-based
...
travelling
Such a travel document which should be of eligibility for ID-based traveling travelling must be designed according to the principles of documentary proof in order to obtain the legal protection that should be required. The ID-based traveling travelling can be said to represent a greater risk for the travelertraveller, as falsification of this document can lead to direct and substantial while forgery of traditional tickets is essentially a risk to the carrier. It is therefore required that the ID document used for disposing of travel rights can not be easily copied, and that it use also bring so-called non-repudiation, that is, the holder can not legitimately claim that he has not undertaken a specific trip and thus is incorrectly charged.
When designing the ID document to be eligible for travel, a number of security-related issues need to be adressedaddressed. When other forms of payment methods are handled in everyday life, for example, when we use payment cards, these are both personal and are often combined with personal code (PIN). A payment card may also use more or less daily. A travel card linked to an ID-based traveling travelling should probably be used without a PIN, and may also be shared within the family, to acquaintances or used within a group of employees at the company. It can thus be considerably more difficult to find out in many cases whether a card has been lost, and there is also no way for the entity accepting the document to detect wether whether it is used by someone unauthorizedunauthorised. Rationality checks and other types of automatic controls are required which allow suspicious activity of travel documents to be detected and followed up upon. Some types of events may, under certain circumstances, also lead to automatic blocking of access to rights from certain credentials.
For ID-based traveling travelling with self-issued travel documents, it is therefore appropriate to assume a generous attitude to the question of how passengers should be held accountable for unauthorized unauthorised use. However, the way in which the conditions for the traveler traveller are to be devised are beyond the scope of the BoB project, but it is a matter that needs to be coordinated between those involved in an ID-based travel scheme.
4.1.5 National coordination
An ID-based traveling travelling scheme which spans across organizational organisational boundaries requires coordination of the travel documents to be used. It will not only be a matter of technical coordination, but also a coordination of the security regulations that will apply for issuing and otherwise handling such documents and the conditions that will apply to the travelertraveller.
Collaborating on the issuance of a travel card (or other type of ID-based travel document) may also constitute an opportunity for the industry, which must does not necessarily mean that all actors involved in the cooperation must use these documents. In the same way as most merchants accept multiple types of payment cards, several different issuers of travel cards may be included in the scheme. This is referred to as a form of federation, where participating entities choose to rely on all approved travel documents of all issuers participating in the scheme. In such collaboration, it is of course important to comply with the same technical and security standards, so that the various travel documents can easily be read and the same degree of trust can be attributed to the fact that it will be possible at a later stage to be paid for the service performed.
Furthermore, interfaces are needed to implement settlement and transfers between the different operators' systems. This applies irrespective of whether the settlement relates to traveling travelling with a carrier or purchase of a service in connection to the trip.
...