SIST-TS CEN/TS 16406:2013

SLOVENSKI STANDARD
SIST-TS CEN/TS 16406:2013
01-marec-2013
Inteligentni transportni sistemi - Javni prevoz - Posredno polnjenje železniških kart
Intelligent transport systems - Public transport - Indirect Fulfilment for Rail
Intelligente Transportsysteme - Öffentlicher Verkehr - Indirekte
Schienenverkehrserfüllung
Émission indirecte de titres de transport ferroviaire
Ta slovenski standard je istoveten z: CEN/TS 16406:2013
ICS:
03.220.30 Železniški transport Transport by rail
35.240.60 Uporabniške rešitve IT v IT applications in transport
transportu in trgovini and trade
SIST-TS CEN/TS 16406:2013 en,fr,de
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------

SIST-TS CEN/TS 16406:2013

---------------------- Page: 2 ----------------------

SIST-TS CEN/TS 16406:2013


TECHNICAL SPECIFICATION
CEN/TS 16406

SPÉCIFICATION TECHNIQUE

TECHNISCHE SPEZIFIKATION
January 2013
ICS 03.220.30; 35.240.60
English Version
Intelligent transport systems - Public transport - Indirect
Fulfilment for Rail
Émission indirecte de titres de transport ferroviaire Intelligente Transportsysteme - Öffentlicher Verkehr -
Indirekte Schienenverkehrserfüllung
This Technical Specification (CEN/TS) was approved by CEN on 13 August 2012 for provisional application.

The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to submit their
comments, particularly on the question whether the CEN/TS can be converted into a European Standard.

CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS available
promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in force (in parallel to the CEN/TS)
until the final decision about the possible conversion of the CEN/TS into an EN is reached.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.





EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2013 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TS 16406:2013: E
worldwide for CEN national Members.

---------------------- Page: 3 ----------------------

SIST-TS CEN/TS 16406:2013
CEN/TS 16406:2013 (E)
Contents Page
Foreword .3
Introduction .4
1 Scope .5
2 Terms and definitions .5
2.1 Additional terms for the TAP-TSI Glossary .5
2.2 Changed terms in the TAP-TSI Glossary needed to support indirect fulfilment .7
3 Indirect fulfilment formats for international rail services .8
3.1 Ticket on departure method .8
3.2 Print-at-home ticket method .8
3.3 E-tickets .8
4 Indirect fulfilment framework .9
4.1 Actors involved in the indirect fulfilment framework.9
4.1.1 General .9
4.1.2 Commercial links .9
4.1.3 Reservation requests . 10
4.1.4 Security management . 10
4.1.5 Fulfilment requests . 10
4.1.6 Use reporting . 10
4.2 Indirect fulfilment dialogues . 10
4.3 Indirect fulfilment messages . 14
4.4 Indirect fulfilment message composition . 16
4.5 Additional coding for indirect fulfilment message elements . 18
5 Security requirements for indirect fulfilment . 20
5.1 Security architecture . 20
5.2 Security architecture dialogue . 21
Annex A (informative) Technical documents . 23
A.1 Technical documents referenced in the TAP-TSI . 23


2

---------------------- Page: 4 ----------------------

SIST-TS CEN/TS 16406:2013
CEN/TS 16406:2013 (E)
Foreword
This document (CEN/TS 16406:2013) has been prepared by Technical Committee CEN/TC 278 “Road
transport and traffic telematics”, the secretariat of which is held by NEN.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
This document has been prepared under a mandate given to CEN by the European Commission and the
European Free Trade Association.
According to the CEN/CENELEC Internal Regulations, the national standards organisations of the following
countries are bound to announce this Technical Specification: Austria, Belgium, Bulgaria, Croatia, Cyprus,
Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany,
Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland,
Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom.
3

---------------------- Page: 5 ----------------------

SIST-TS CEN/TS 16406:2013
CEN/TS 16406:2013 (E)

0 Introduction
0.1 General
This document has been prepared as a Technical Specification (TS) because the subject of indirect fulfilment
for rail is a volatile and fast-moving business and technical subject. Moreover, it is expected that a revision to
the TS will be needed, specifically to make changes related to the indirect fulfilment of "Non-integrated
reservation tickets" (NRT tickets"), and will take place no longer than two years after its bringing into force. At
that time it is expected that the TS after having become an EN will have been referenced by the TAP-TSI and
any variation will require to be approved not only by CEN/TC 278 but the European Rail Agency's Change
Control Management process for changes to TSIs.
The purpose of the TAP-TSI is to introduce a statutory framework of requirements and obligations for railway
operators, infrastructure managers and others that will ensure interoperability in rail transport ticketing and
information provision. Within the 2011 version of the TAP-TSI text there are some open points related to
indirect fulfilment and Security.
This document is intended to become a European standard contributing towards closing these open points
relating to the subsystem 'Telematics applications for passenger services' of the trans-European rail system
(TAP-TSI) as well as to the relevant technical documents listed in Annex III of the TAP-TSI (see Annex A).

0.2 Indirect fulfilment open points
The open points in the TAP-TSI cover indirect fulfilment used for international services and cross-border
sales. In these cases, the TAP-TSI already has layout specifications for the RCT2 paper ticket used in direct
fulfilment, based on UIC leaflet 918-2, and for the A4 print-at-home indirect fulfilment method, based on UIC
leaflet 918-3.
Fulfilment specifications are missing
 for ticket on departure (TOD - where the passenger is given a code at the time of sale, and uses the code
or a payment card to collect the RCT2 paper ticket at the station), and
 for manifest-on-list (or e-ticket or paperless ticket – where there is no ticket at all, the ticket control staff
having pre-loaded or over-the-air access to the reservation database, and the passenger proves they can
travel by showing some ID).
To meet the indirect fulfilment needs of the open points, a set of specifications are needed for a generic
indirect fulfilment request framework and for a security method for fulfilment requests. These specifications
are given by this TS.
In order to ensure the compatibility between this TS and in particular between the future standard and the
TAP-TSI, several changes to the TAP-TSI are needed after agreement by the ERA and the rail sector. The
changes are in three main parts. The first is the change to the Basic Parameters in chapter 4 of the TAP-TSI
where the obligations are defined. The second change is to the technical documents being annexes to the
TAP-TSI (see Annex A) that specify the method by which timetable, fares, reservation and other data has to
be exchanged. For indirect fulfilment, the Technical Document affected is B5, covering reservations. The third
change is to the glossary, which defines what the terms used in the TAP-TSI mean.
The analysis later in this document demonstrates that, although security requirements are relevant for indirect
fulfilment, no rail-specific requirements exist at this time and open standards for key distribution and
management are sufficient. As a result, no specification is needed for the TAP-TSI to meet the Open Point.
4

---------------------- Page: 6 ----------------------

SIST-TS CEN/TS 16406:2013
CEN/TS 16406:2013 (E)
1 Scope
This Technical Specification provides, in Clause 2, new and changed glossary items needed to define indirect
fulfilment and its characteristics and to support the changes to the TAP-TSI and ERA Technical Document B5.
Clause 3 defines the layout formats used for international rail services fulfilled using the ticket on departure
and print-at-home ticket methods.
Clause 4 provides the changes to ERA Technical Document B5 that are required to provide the generic
indirect fulfilment framework, covering ticket on departure, print-at-home and e-ticket fulfilment methods,
although the main use of the specification is expected to be for ticket on departure.
Clause 5 provides the analysis of the security requirements of indirect fulfilment, and the conclusion that no
rail-specific specifications are needed.
2 Terms and definitions
For the purposes of this document, the terms and definitions given in TAP-TSI and the following apply.
2.1 Additional terms for the TAP-TSI Glossary
2.1.1
indirect fulfilment
the process of fulfilment where the customer purchases a ticket other than at a station or face to face at a
ticket vendor
Note 1 to entry: Indirect fulfilment methods are conventional ticket on departure, print-at-home ticket, e-ticket and smart
ticket on departure.
2.1.2
indirect fulfilment message framework
a set of computer-to-computer messages between involved parties including carriers, issuers, retailers,
distributors, attributors, station managers and TCOs that allow for the indirect fulfilment of all types of tickets
excluding a conventional ticket
2.1.3
indirect fulfilment security framework
the set of equipment, processes and messages that ensures the security of the indirect fulfilment and ticket
control of all forms of tickets
2.1.4
product owner
the product owner is responsible for his products
 Functions of Ownership: Specifying pricing, usage rules and commercial rules.
 Functions of Clearing: Trip reconstruction, product aggregation based on received usage data using
product definition rules, linking of aggregated usage data with acquisition data, preparation of
apportionment data based on product specification rules.
 Functions of Reporting: Detailed acquisition data with no link to usage data within the reporting period,
usage data with no link to acquisition data within the reporting period, linked aggregated product data
within the reporting period
Note 1 to entry: This term is required as ticketing equipment is not always defined by carrier(s), as it could be defined by
an organisation owned wholly or partly by Transport Authorities.
[SOURCE: ISO 24014-1:2007, 5.1]
5

---------------------- Page: 7 ----------------------

SIST-TS CEN/TS 16406:2013
CEN/TS 16406:2013 (E)
2.1.5
conventional ticket
a ticket for a product printed as specified by the carrier(s) on paper or paper-derived card and optionally with
machine-readable magnetic stripe and/or optically readable product data which the TCO(s) for the transport
service are equipped to read
Note 1 to entry: A conventional ticket provides autonomous and independent title to the transport contract and does not
require further information such as from a sales or reservation database.
Note 2 to entry: Each RU as carrier maintains its own specifications for conventional tickets and is eligible to participate in
the maintenance of the specification for conventional tickets used for international rail passenger services.
2.1.6
conventional ticket on departure
a conventional ticket that is printed on the demand of the passenger subsequently to the conclusion of the
sale of the product using instructions supplied by the carrier(s) and as advised to the passenger by the retailer
2.1.7
print-at-home ticket
a ticket for a product printed by the passenger as specified by the carrier(s) on plain paper or a mobile phone
display with optional security devices in the design and with optional optically readable product data which the
TCO(s) for the transport service are equipped to read
Note 1 to entry: A print-at-home ticket provides autonomous and independent title to the transport contract and does not
require further information such as from a sales or reservation database.
Note 2 to entry: Each RU as carrier maintains its own specifications for print-at-home tickets and is eligible to participate in
the maintenance of the specification for print-at-home tickets used for international rail passenger services.
2.1.8
smart ticket
a ticket for a product stored as specified by the carrier(s) in an application on media that is machine-readable
using the iso/iec 14443 standard which the retailer is able to store and which the TCO for the transport service
is equipped to read
Note 1 to entry: Such media is commonly known as a chipcard or smartcard but also an emulation of a chipcard or
smartcard on an NFC mobile or a secure device as defined by global platform specifications.
Note 2 to entry: A smart ticket provides autonomous and independent title to the transport contract and does not require
further information such as from a sales or reservation database.
Note 3 to entry: Each RU as carrier maintains its own specifications for smart tickets. There is currently no expectation that
a specification for smart tickets to be used for international rail passenger services will be developed.
2.1.9
smart ticket on departure
a smart ticket that is stored on the demand of the passenger subsequently to the conclusion of the sale of the
product using instructions supplied by the carrier(s) and as advised to the passenger by the retailer
Note 1 to entry: The equipment used to fulfil the smart ticket on departure has to be as specified by the carrier(s).
2.1.10
e-ticket
a ticket for a product stored on a sales or reservation database and not printed or stored on any other media.
the passenger may be supplied with a receipt that appears to be another form of ticket, but the receipt is not
an e-ticket
Note 1 to entry: The passenger demonstrates his/her right to use the transport service defined by the product by providing
such identification and in such a manner as specified by the carrier(s) and as advised to the passenger by the retailer.
One such manner is manifest on list.
6

---------------------- Page: 8 ----------------------

SIST-TS CEN/TS 16406:2013
CEN/TS 16406:2013 (E)
Note 2 to entry: The e-ticket receipt does not provide autonomous and independent title to the transport contract and
depends on further information such as from a sales or reservation database.
Note 3 to entry: Each RU as carrier maintains its own specifications for e-tickets and is eligible to participate in the
maintenance of the specification for e-tickets used for international rail passenger services.
2.2 Changed terms in the TAP-TSI Glossary needed to support indirect fulfilment
2.2.1
attributing (allocating) system
an electronic system hosting the catalogue of transport services for which a transport service provider
authorises retailers to issue and fulfil travel documents
2.2.2
attributor
a company managing an attributing system
Note 1 to entry: This may be a carrier.
2.2.3
decryption
the converting of encrypted data back into its original form
2.2.4
distributor
an undertaking providing equipment and services to issuers and retailers to sell rail products
Note 1 to entry: This may be a carrier.
2.2.5
encryption
the encoding of data to keep it secret
2.2.6
fulfilment
the process which delivers the product to the customer after his/her purchase
2.2.7
issuer
an undertaking selling the ticket and receiving payment, which is the carrier
Note 1 to entry: the issuer is the undertaking indicated on the ticket with its code and possibly its logo.
2.2.8
manifest on list
indirect fulfilment e-ticket method where the customer receives only a confirmation, usually with a reference
code
Note 1 to entry: The undertaking performing this kind of sale provides to the TCO a list of all customers and reference
codes. The customer proves their identity for the TCO before/after departure in order to embark/be accepted on the train.
The TCO controls whether the Customer is admitted to embark/stay on the train.
2.2.9
product
the unique combination of some or all of origin, destination, route, specific trains, date and time, tariff type,
and discount category that uniquely defines what transport service can be/has been purchased by the
customer
7

---------------------- Page: 9 ----------------------

SIST-TS CEN/TS 16406:2013
CEN/TS 16406:2013 (E)
Note 1 to entry: Product in the transport sense is identical to the use of the word in the retail industry, being the
unambiguous description of things that can be bought.
Note 2 to entry: See also Attributing System.
2.2.10
reservation system
a computerised system used to store and retrieve information about the availability and price of seats,
sleeping compartments and similar assets on trains, and conduct transactions related to the use of those
assets
Note 1 to entry: A reservation system is capable to keep the inventory correct in real or near-real time.
2.2.11
retailer
an undertaking which sells to the customer a ticket without or with a reservation for a rail service
Note 1 to entry: A retailer can be an Issuer or a Ticket Vendor licensed by an Issuer.
2.2.12
technical document
any technical document published by the European Railway Agency according to Article 5.8 of Directive
2008/57
2.2.13
ticket on departure
TOD
a ticket that is printed on the demand of the passenger subsequently to the conclusion of the sale of the
product using instructions supplied by the carrier(s) and as advised to the passenger by the retailer
3 Indirect fulfilment formats for international rail services
3.1 Ticket on departure method
Where a ticket for an international rail service is fulfilled indirectly using the ticket on departure method, then
the ticket shall be printed using the format defined in ERA Technical Document B6 – Electronic Seat/Berth
Reservation and Electronic Production of Transport Documents (RCT2 Standards).
Where the ticket is not for an international rail service then the product owner is free to specify the fulfilment
format(s) that may be offered by the retailer to the customer.
3.2 Print-at-home ticket method
Where a ticket for an international rail service is fulfilled indirectly using the print-at-home ticket method, then
the ticket shall be printed using the format defined in ERA Technical Document B7 – International Rail Ticket
for Home Printing.
Where the ticket is not for an international rail service then the product owner is free to specify the fulfilment
format(s) that may be offered by the retailer to the customer.
3.3 E-tickets
Where a ticket for an international rail service is fulfilled indirectly using the e-ticket method, then there is no
physical ticket issued and therefore no requirement for a standardised fulfilment format.
8

---------------------- Page: 10 ----------------------

SIST-TS CEN/TS 16406:2013
CEN/TS 16406:2013 (E)
4 Indirect fulfilment framework
4.1 Actors involved in the indirect fulfilment framework
4.1.1 General
Indirect fulfilment links together a wide range of actors in rail retail. Figure 1 summarises their roles, and the
relationships between them.
NOTE 1 One organisation can perform several roles.
NOTE 2 Boxes in orange are organisations; boxes in blue are systems.

Figure 1 — Roles, and relationships of the actors involved in the indirect fulfilment framework
In the following, an outline description of the relationships is given.
4.1.2 Commercial links
Organisations are linked together by licence or similar commercial agreements. Product owners, carriers,
issuers and attributors are linked. The product owner and the carrier are usually the same organisation for
conventional rail, although a public authority can be the product owner in cases of public service contracts.
Product owners and carriers agree that Issuers and their retailers can sell their products, and jointly agree that
distributors (or attributors) can manage the reservation and eventual fulfilment of the services offered by the
product owners and carriers.
Issuers licence retailers to sell products; Issuers can also act as retailers. Retailers have the primary
relationship with passengers, and are responsible for sale and after-sale transactions. The exception is during
travel, where primary responsibility for passenger support lies with the carrier.
9

---------------------- Page: 11 ----------------------

SIST-TS CEN/TS 16406:2013
CEN/TS 16406:2013 (E)
Carriers licence station managers to provide fulfilment equipment on stations that can be used by passengers
to collect tickets. Carriers and others can act as station managers. Carriers and product owners provide on-
train equipment for ticket controllers that hold the manifests or provide the online database access needed for
e-ticket fulfilment, and the readers for print-at-home and other tickets.
Ticket control at stations is carried out by station managers using equipment specified by carriers and product
owners. Ticket control on trains is carried out by ticket controllers, who can be carriers and others, using
equipment specified by carriers and product owners.
4.1.3 Reservation requests
The link between the retail equipment and the reservation system allows requests for reservations to be
made, changed and deleted. In TAP-TSI terms, this link is covered by ERA Technical Document B5, derived
from UIC leaflet 918-1.
4.1.4 Security management
A new link is needed to meet the open points. This is between the product owner or carrier, whoever holds the
security keys, and all the passenger-facing equipment. The link can operate in two ways. The first is where the
carrier’s security management service distributes both the write and read keys for the products that the retailer
sells, that the ticket on departure or on-train equipment fulfils, and that the ticket control equipment checks.
This arrangement is used largely in smartcard schemes, which need to be able to work without frequent online
references to the product owner’s systems, and where symmetric keys are often needed for speed of
operation. Such ticketing schemes are excluded from the list of TAP-TSI open points and therefore do not
need to be addressed by the CEN work under this Mandate at this time.
The second way is where the carrier’s security management service holds in secret the private write keys. In
this latter case, the security management service can provide a digital seal for each product on request of the
retailer. It can return to the retailer all the data needed from which, for example, a barcode can be printed for
an A4 print-at-home ticket, without the retailer needing to know the carrier’s write key. In fact, it need only
return to the retailer an Internet link from where the passenger can directly print the ticket, essentially passing
fulfilment responsibility back to the carrier. Where ticket control equipment needs to read and check a
barcode, it does so using the carrier’s public key. Public keys can be freely distributed using IT industry
standards.
4.1.5 Fulfilment requests
The other new link need to meet the open points is that between the retail equipment and the reservation
system. This link allows requests for indirect product fulfilment, using a fulfilment request framework. With
indirect fulfilment the retailer is able, if desired, to pass full responsibility for fulfilment to the carrier.
Each method of fulfilment needs an appropriate physical layout format and a set of product details. The
overlap between data elements for each method is substantial. Fulfilment requests need to accommodate the
ERA TAP-TSI fulfilment method specifications for international service and cross border sales, and eventually
include those that will continue in parallel using domestic indirect fulfilment methods.
4.1.6 Use reporting
Another link, out of scope for this document, is product use reporting from ticket control equipment back to the
product owner or carrier. Work has been carried out in UIC leaflet 918-4, but has not been included in the
CEN standard, as it is not part of the open points.
4.2 Indirect fulfilment dialogues
Indirect fulfilment is executed through five dialogues. For an IRT product, each of these dialogues requires
that a reservation has been made prior to fulfilment using the specifications in ERA Technical Document B5.
10

---------------------- Page: 12 ----------------------

SIST-TS CEN/TS 16406:2013
CEN/TS 16406:2013 (E)
All fulfilment messages and data elements in this document are additions to that Technical Document and
should be read alongside that document.
The first dialogue, fulfilment options, allows the allocating system to advise the retailer which fulfilment options
are available for the product. The retailer asks the allocating system which fulfilment options are available and
agrees with the passenger which one is to be requested. This dialogue may be omitted where the preferred
fulfilment method is agreed in advance.

Figure 2 — Fulfilment options
The next dialogue, normal fulfilment, is the successful execution of an indirect fulfilment. The retailer requests
fulfilment using the method chosen by the customer from the options available, requesting for example with
ticket on departure the station where the customer would like to collect the ticket. The allocating system
replies in the FRR message with the details needed by the customer, for example the ticket collection code.
Once the customer has collected the ticket, the allocating system advises the retailer.
If the allocating system needs to update the information for the passenger after the immediate response with
the FRR message, this is done with the FD message.
In the case of ticket on departure, the retailer nee
...