Grand River Transit - Printable Version +- Waterloo Region Connected (https://www.waterlooregionconnected.com) +-- Forum: Waterloo Region Works (https://www.waterlooregionconnected.com/forumdisplay.php?fid=14) +--- Forum: Transportation and Infrastructure (https://www.waterlooregionconnected.com/forumdisplay.php?fid=25) +--- Thread: Grand River Transit (/showthread.php?tid=13) Pages:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
|
RE: Grand River Transit - danbrotherston - 03-12-2018 (03-12-2018, 10:18 AM)KevinL Wrote: GRT emailed all us farecard beta testers today and had us fill out an experience survey. That's great they confirm that, perhaps they are listening to us on the forum . In other news, my parents are moving back to London ON. When they left about two years ago, I recall that the London Transit Commission (LTC) was in the midst of a smart payment fare card rollout. Upon returning, I find that they are still in the midst of a smart card fare card rollout...it's a scary prospect, I do hope ours is going more smoothly. RE: Grand River Transit - chutten - 03-13-2018 I get the occasional media read error, but "smoothly" is the closest adverb to how the beta test is going from my experience. Now if they'd open up online pay and auto-recharge, I would remove any remaining reservations I had about it. Not looking forward to trekking to a terminal to recharge. RE: Grand River Transit - KevinL - 03-13-2018 (03-13-2018, 08:13 AM)chutten Wrote: Now if they'd open up online pay and auto-recharge, I would remove any remaining reservations I had about it. Not looking forward to trekking to a terminal to recharge. I was sure to make comments in this regard on my survey response. RE: Grand River Transit - Canard - 03-13-2018 Is the reader technology compatible with smartphones? What I mean: why not have an easyGo card in your iPhone Wallet, so you can just tap your phone. RE: Grand River Transit - KevinT - 03-13-2018 (03-13-2018, 09:52 AM)Canard Wrote: Is the reader technology compatible with smartphones? Apple are very developer-unfriendly when it comes to NFC. It's only in the latest-and-greatest iOS version that there are any developer APIs for it at all, and those only allow for the phone to read other things, not to emulate the things being read. Unless the region could somehow get Apple to code it into Apple Pay, from which Apple always gets a percentage of every transaction, there's just no way. Android allows full 'Host Card Emulation', which in theory can do the job, but depending on how GRT's fare system works that may not be a magic bullet either. If you look at Presto for example, the card stores the value and the history of recent transactions so that the next reader tapped can examine previous taps to figure out if any transfer or discount applies. This is great because it allows the readers to work 'offline', without communications delays or blockages to worry about when figuring out go/no-go on any given tap. But when you load value onto your Presto card online, EVERY machine in the system has to be updated (which for buses and streetcars is only when they're back in the garage) with a leger of outstanding loads, so that the next time you tap your card the 'reader' can write the value back onto it to complete the load. Why is that an issue for Android? Because the mobile would have to emulate a card of its own, with a unique identity, stored value, and transaction history that's completely independent of your physical Presto card. You couldn't start a trip on one and then continue with the other. If GRT's system works like Presto with 'stored value' on the cards themselves, then similar limitations will apply to the mobile use case, even on Android with those wonderful card emulation APIs for the developers to use at no charge. RE: Grand River Transit - KevinL - 03-13-2018 I've seen Apple technology used for fare payment; you can use an iPhone or Apple Watch instead of an Oyster in London, for example. (Oyster also accepts credit and debit tap cards.) RE: Grand River Transit - Canard - 03-13-2018 Thank you (as always) for the detailed explanation! RE: Grand River Transit - tomh009 - 03-13-2018 (03-13-2018, 12:42 PM)KevinL Wrote: I've seen Apple technology used for fare payment; you can use an iPhone or Apple Watch instead of an Oyster in London, for example. (Oyster also accepts credit and debit tap cards.) Same for Suica/PASMO in Japan. It's only iPhone 8 and X, though, not the earlier models. RE: Grand River Transit - danbrotherston - 03-13-2018 (03-13-2018, 01:31 PM)tomh009 Wrote:(03-13-2018, 12:42 PM)KevinL Wrote: I've seen Apple technology used for fare payment; you can use an iPhone or Apple Watch instead of an Oyster in London, for example. (Oyster also accepts credit and debit tap cards.) As KevinT provided in a great explanation, the fundamental payment technology is different. Oyster terminals also accept Visa cards, which means, so far as I understand, that every single payment terminal must have a continuous internet connection. Offline payments are not possible. Offline payment is possible with Presto, and I believe GRT has gone with the same underlying technology. Moreover, they are unlikely to ever allow Android phones (or any non-GRT secured hardware) to communicate with the payment terminal. Because your card stores the account value, if you can access the hardware (and by hardware, I mean the chip that is embedded in the card), you could program in a balance which doesn't exist. Moreover, you certainly cannot transfer a card to your phone, because in doing so you'd be able to rewrite the balance. RE: Grand River Transit - KevinL - 03-13-2018 Would it be possible to have, say, an expanded EasyGo app on an Android that is linked to an account that serves like a card - the balance would be managed by the (proprietary, encrypted-data-using) app and not the phone hardware itself? RE: Grand River Transit - danbrotherston - 03-13-2018 (03-13-2018, 01:56 PM)KevinL Wrote: Would it be possible to have, say, an expanded EasyGo app on an Android that is linked to an account that serves like a card - the balance would be managed by the (proprietary, encrypted-data-using) app and not the phone hardware itself? It *might* be possible. But its certainly a challenge. Technically there's probably a way to build a secure system, given the phone wouldn't have to store the secret. The biggest issue I see with that is a huge increase in latency. I'm not convinced that GRT or their contractors would be able to get network response times down to a level where it would be reasonable for tap payment, especially over a mobile network. But hey, if they were that would be awesome. RE: Grand River Transit - megabytephreak - 03-13-2018 All the new phones with NFC also have a secure element, a separate processor which is supposed to be able to store this kind of info on a user device, without them being able to alter it. This include an ability to load "apps" which are also secure from each other. This emulates the behavior of the processors in the DESfire cards. One of the applications is (eventually) to replace SIM cards with an eSIM functionality, which I understand has similar security requirements to something like a fare card. So from a technical perspective it is supposed to be possible to do the stored value thing securely. I'm not sure how far along the phone vendors are on exposing this functionality though. Perhaps the bigger issue is that given the locally stored value model, there would need to be a mechanism to move the info from a card to phone, or from phone to phone (i.e. if getting a new phone). And if your phone died, anything stored on it (passes, value) would not be able to be recovered without risk of duplication (how do you prove it it dead). Some sort of revocation mechanism might be possible though, similar to what I think is supposed to be available if you lose your card and it is registered. RE: Grand River Transit - chutten - 03-13-2018 (03-13-2018, 01:38 PM)danbrotherston Wrote: As KevinT provided in a great explanation, the fundamental payment technology is different. Oyster terminals also accept Visa cards, which means, so far as I understand, that every single payment terminal must have a continuous internet connection. Offline payments are not possible. Not necessarily. Credit card companies are only too happy to wait for a vendor to clear transactions a day or more later. (An extreme example: you can still use a physical carbon-paper credit-card payment device these days. The ones that go "ka-chunk ka-chunk") In fact, Transport for London's implementation wouldn't work without post-facto clearing. It requires you to use your credit card at tap-in -and- tap-out (and whenever a ticket inspector comes along). At the end of the day (or whenever they reconcile all of their data inputs in their system) they determine which cards tapped in, which cards tapped out, and which cards were inspected. If you've been inspected without tapping-in and out, you are penalized. If you've tapped-in without tapping-out, you pay the maximum fare. You also have per-day and per-week capping so that they only charge your credit card for the minimum of the sum of your individual trips, or the value of a daily or weekly pass over that period. They can do this through Quote:Offline payment is possible with Presto, and I believe GRT has gone with the same underlying technology. Moreover, they are unlikely to ever allow Android phones (or any non-GRT secured hardware) to communicate with the payment terminal. Because your card stores the account value, if you can access the hardware (and by hardware, I mean the chip that is embedded in the card), you could program in a balance which doesn't exist. Moreover, you certainly cannot transfer a card to your phone, because in doing so you'd be able to rewrite the balance. To my knowledge there is no technical reason you can't put a stored-value card like easyGO Fare Card on Apple/Android Pay. (search words: "secure element" "NFC") There are lots of political reasons not to. I'd see it far more likely that they'd furnish Apple/Android Pay with the device-specific card number and treat it like a credit card. Record the transactions, reconcile at day's end (but instead of reconciling against credit card companies, it would be against a centralized stored value balance). To be clear, I don't see this as at all likely, just _more_ likely. RE: Grand River Transit - danbrotherston - 03-13-2018 (03-13-2018, 05:01 PM)chutten Wrote:(03-13-2018, 01:38 PM)danbrotherston Wrote: As KevinT provided in a great explanation, the fundamental payment technology is different. Oyster terminals also accept Visa cards, which means, so far as I understand, that every single payment terminal must have a continuous internet connection. Offline payments are not possible. Possibly, I don't know the implementation details of Oyster, but at least here, card processors have moved to online processors. All the payment terminals we have are online. Historically they used the offline terminals (the paper ones), but even then you were required to check other ID or even call the Card Issuer under certain circumstances. It's all about risk of fraud. Processors can charge more for riskier transactions. Which is why there is a limit on how much you can tap to pay. Quote:To my knowledge there is no technical reason you can't put a stored-value card like easyGO Fare Card on Apple/Android Pay. (search words: "secure element" "NFC") There are lots of political reasons not to. It may be technically possible to implement stored value cards using the secure element on most modern phones, but now they're trusting a third, open ecosystem, as a trusted secure store of value. That simply isn't going to happen. I don't see them implementing a non-stored value option, given that they've gone through a lot of technical hoops to achieve stored value. But that could be done securely with phones given that the NFC wouldn't be storing anything. I also have no idea if the payment terminals are capable of this. One thing of note, there is a reason for stored value cards over account backed cards, and that's one of anonymity. While I don't personally use this, many people do feel it is important to be able to travel without being tracked. This wouldn't be possible without stored value cards. RE: Grand River Transit - danbrotherston - 03-13-2018 (03-13-2018, 05:01 PM)megabytephreak Wrote: All the new phones with NFC also have a secure element, a separate processor which is supposed to be able to store this kind of info on a user device, without them being able to alter it. This include an ability to load "apps" which are also secure from each other. This emulates the behavior of the processors in the DESfire cards. One of the applications is (eventually) to replace SIM cards with an eSIM functionality, which I understand has similar security requirements to something like a fare card. So from a technical perspective it is supposed to be possible to do the stored value thing securely. I'm not sure how far along the phone vendors are on exposing this functionality though. *supposed to* being the key here. GRT is unlikely to trust a third party open ecosystem to store value. If there was a bug found in Android's implementation (or any Android phone vendor, there are hundreds), anyone could get free rides, there's nothing GRT could do to stop it, besides stop accepting that form of payment, which is much harder to do than simply not starting. But I don't make GRT policy, I guess it's possible they'll surprise us one day. |