

OpenPass is a method for recording data on RFID card, in a network of integrated access control, managed by devices with proprietary software from multiple vendors.
Open standard

OpenPass has been formalized by Regione Lombardia, in the project “Skipass Lombardia”.
OpenPass is under the GPL, the free software license.
The OpenPass system

Ticket printers:
for prints compatible with OpenPass standard.
Tickets:
on smartcards contactless ISO15693, without proprietary restrictions.
Network:
data sending realtime or batch.
Gates:
checkpoints compatible with OpenPass standard.
Central server:
with open platform for data collection.
The interchange format OpenPass
OpenPass defines an interchange format by the use of XML, to allow the exchange of information between access control systems with heterogeneous proprietary software. The format includes:
- one XML document thet describes the content of RFID card
- one XML document that explains the meaning of the standard terms in the previous document
- write and update operations, to bring on the card the changes made to the XML document
The data on the smartcard are organized by tokens. Token is a marker, defined by XML representation.
For each ticket is related to a range of predefined tokens and of tokens defined by the subjects of OpenPass system.
Predefined tokens:
Domain
the limits of validity in extension: all societies of the system, some societies, only one company.
Issuing company
every company has one or more issuing machines of tickets.
Issuing machine
the ticket printer that issues tickets.
Validity data
Day and time of beginning and end, rate type (whole, reduced, etc..), user type (junior, adult, senior, etc..), purchase price, etc.
The set of tokens and of the instructions for zip / unzip is called format.
More formats can coexist and each of these corresponds to a different type of ticket (seasonal, weekly, schedules, etc.). Formats can be defined with flexibility.
The XML representations of tokens and formats are stored and made public by the OpenPass server.
Flexible standard
Centralized data collection

The OpenPass standard defines a network of data centers, connected to web service with OpenPass server.
The information about the sale and transition are collected by the turnstiles and sent to the data centers, which retransmits to the central server.
REST is the XML-based exchange protocol chosen between server and collection centers. Data received from the server are stored in a centralized SQL database, where each item is related by serial number identifier and data of the customer.
The server maintains calls XML configuration and loading with predetermined frequency.
Free consultation
The OpenPass ticket
Multifunction
With a single RFID card, the end user accesses every place of the access control system.
Each company is able to issue the ticket yourself: the card is activated at the time of first use and is recognized by every member of the system.
The access credentials are stored on the smartcard, so that each peripheral subject can independently assess the validity, even in the case where there is no possibility to query the central server.
Each ticket stored on the card is made up of three areas:

- fixed area, wich contains informations established at time of issue;
- variable area,wich contains informations intended to change with the use of ticket (the last day of use, unused tickets, etc.);
- ancillary area, wich contains informations of issue not influential for the assessment of validity.
Further informations
Safety
The high potential cost of tickets makes it must apply anti-counterfeiting strategies, without limiting the data update. The access credentials are encrypted in the process of issuing the ticket. The card provides security, integrity, authenticity and confidentiality of OpenPass system. Techniques of asymmetric encryption and inherent safety features of the chip are used for protection. The presence of the access credentials enables the check of their validity, even in conditions of not connecting to the network.
Buy online
The system allows the presale and top-up of OpenPass ticket. In the case of top-up or updating, the physical write of data to card takes place on the first pass at the gate. The regular functioning of top-up of OpenPass ticket was certified September 15, 2014. The certification was issued as part of the project Skipass Lombardia.
Data sheet
The methodology was formalized in the documents of the “Skipass Lombardia ” project: Capitolato del bando del DGR approvato con decreto n. 3818 del 21.04.2009, BURL n. 17 – 2°supplemento straordinario del 28.04.2009.
Identification data
In relation to the type of ticket, the system can associate to OpenPass customer ID:
- Vital statistics. It is not necessary to provide a rigid encoding, or other personal data such as address, social security number, etc.
- Image format .jpag the holder of the title of access, for the eventual implementation of anti-fraud systems
The vital statistics of the card will be retained until the expiry of validity of the ticket.