Intro to ORCAHusky Card

1
Intro to ORCA/Husky Card

• UW SocTech, Spring 2007
• April 3, 2007

2
Where did ORCA come from?

• There are 7 transit systems which have
  overlapping riders integration should simplify
  things for riders
• King County METRO
• Kitsap Transit
• Sound Transit
• Washington State Ferries
• Pierce Transit
• Community Transit
• Everett Transit

3
What about the Husky Card?

• It is, among other things, a U-PASS
• With ORCA, the U-PASS sticker will no longer be
  accepted
• Rather than multiple cards, the Husky Card will
  also get RFID
• Other changes include integrating
  faculty/staff/student card issuance
• No more validation/expiration stickers
• Can be used as an ORCA card w/o U-PASS
• Deployment in Spring 2008
• Initially, RFID will ONLY be used for ORCA

4
Whats in it for us?

• No U-PASS stickers to return or visits to the
  transportation office
• No more U-PASS replacement fees (hopefully)
• U-PASS may potentially be good on more transit
  systems (all ORCA participants except for the
  ferries)

5
What we know about ORCA

• Contracted to ERG Group
• Uses Phillips MIFARE DESFire RFID chips (4 in.
  read, 3DES encryption)
• Supports multiple applications (e.g.,
  University of Washington, Boeing, KC Metro,
  Seattle CityCard, etc.)
• Will store last 10 transit interactions on the
  card (allows transfers, prevents duplicate
  charges)
• Minimum data retention of 90 days

6
What we know about ORCA

• It seems as though all data will be encrypted in
  flight and on the card
• By default, no personal ID attached to the card,
  but it can be registered
• A link will always exist with Husky Cards
• No personal data is stored on the card itself
• Location information is not personal data!
• Washington State laws protect a customers
  personal and travel use data from public
  disclosure

7
Other Deployments

• Octopus Card - Hong Kong
• Oyster Card - London
• UniRider - Auckland
• ChicagoCard - Chicago
• SmarTrip - Washington, D.C.
• CharlieCard - Boston
• Beijing, Melbourne, Salt Lake City, Atlanta, Las
  Vegas, etc.

8
Oyster Card

• Deployed in London 2003
• Over 10 million cards in use
• Over 80 of all journals use it
• Operated by TranSys
• Run with Phillips MIFARE (same as ORCA)
• Increasingly used for law-enforcement
• 7 requests in 2004
• 61 requests in Jan 2006

9
Octopus Card

• Hong Kong, 14 million cards, 95 of 16-65
  year-olds have a card
• Launched in Sept. 1997
• Used for mass transit, parking, convenience
  stores, fast food, supermarkets, etc.
• Subcontracted to ERG Group, though now run
  independently
• Sony FeliCa RFID

10
SmarTrip

• Deployed in 1999, gt1.2 million cards
• Used for Light Rail, Busses, Parking
• Recently, Employee IDs (EPA, etc.)
• Only opt-in to be tied to a name/identity (though
  this does let you reclaim any balance from lost
  cards)
• Originally built by Cubic Transportation Systems,
  but now maintenance done by ERG Group

11
Conclusions

• Most such systems are developed by a small number
  of companies (ERG)
• Previous work shares
• Anonymous cards, w/optional registration
• Relative success in terms of deployment
• Some technical security (encryption)
• Later shift to Employee/Student IDs
• Most important privacy issues seem to be in
  regulation/legal privacy rights
• Place limits on data retention
• Legal restrictions on data use

12
Long-Reaching Ramifications

• Starts with a simple goal of integrating multiple
  transit systems
• Only real options are companies with contactless
  smart cards (RFID)
• Once switching to RFID, it becomes feasible to
  implement U-PASSes without stickers
• Thus the Husky Card/U-PASS ends up being
  RFID-enabled