Skip to main content

France invests in ‘citizen cards’ – but with data collection limitations

Cities in France are pressing ahead with ‘citizen cards’designed to give residents access to a wide range of services. The card is an NFC device that acts as a portal to areas such as transport services, libraries, sports facilities and residential parking schemes.
November 5, 2014 Read time: 2 mins
David Mitel, product manager at Morpho

Cities in France are pressing ahead with ‘citizen cards’designed to give residents access to a wide range of services.

The card is an NFC device that acts as a portal to areas such as transport services, libraries, sports facilities and residential parking schemes. Until now, these have usually required individual documents, such as bus passes or club membership cards. Now, however, they are increasingly being incorporated into a single card. Lille, Bordeaux and Marseille are among the cities that have issued the devices. The features of the card include authentication, management of personal data and token management – replacing paper tickets on buses, for example. It may eventually be possible to use it as a payment card for local shops or markets. However, the cards are not an excuse for French cities to start building up databanks on their residents, insists David Mitel, product manager at Morpho. Speaking during the ‘Security Documents and e-Government’ thread at the CARTES SECURE CONNEXIONS conference, he said strict rules for the cards’ use had been laid down by the countryís National Commission for Internet and Freedoms (CNIL).”CNIL said that a city should collect only information useful for [delivering] its services and not excessive data to be held ‘just in case',” he points out.”The city should have a limited data retention period and if it is to be extended, that must be agreed with the citizen.” To obtain a card – which can take the form of a smart card or mobile phone – the resident has to present some already-authenticated ID, such as a national identity card. Personal information on the NFC device is held by the device's secure element.

Related Content

  • Infineon: Device authentification increasingly important
    November 20, 2013
    Looking at new opportunities beyond chipcards, Infineon Technologies’ Stephan Hofschen focused on mobile device security, especially with moves to mobile ticketing. Device authentication will be increasingly important. Morpho’s Phillipe d’Andrea added that with cloud storage on the move industry has already secured payments – the next step will be securing smart phones and tablets as well as cards.
  • New legal basis brings EU wide cross border enforcement
    February 25, 2015
    Pan-EU enforcement is set to become a reality after legislation is revised. In May 2014 the European Court of Justice ruled that European Directive 2011/82/EU, which came into force in November 2013 to facilitate the exchange of information between member states in relation to eight road traffic offences, had been set up on an incorrect legal basis. The regulations had been introduced under police cooperation rules on the prevention of crime, but the Court decided that the measures in the Directive do not c
  • Cybercrime is not a remote threat for toll operations
    February 8, 2017
    The rise of cybercrime is starting to impact tolling concessions, as Colin Sowman discovers. Yahoo’s revelation that it has taken two years to discover that it had suffered a security breach resulting in hackers stealing the details of 500 million users is shocking - although the hackers only gained access to users’ names, contact details and encrypted passwords.
  • Entrust Datacard merger helps secure digital future in IoT era
    November 5, 2014
    s smart devices and e-transactions proliferate in the Internet of Things (IoT) era, newly-merged business Entrust Datacard is uniquely placed to secure the connections between them, says its CEO Todd Wilkinson. The company, formed from Datacard Group and Entrust and formally united at CARTES SECURE CONNEXIONS this week, combines broad and deep expertise in hardware and software together with the know-how to combine them.