Smart cards — from telephone card to FIDO authenticator.
Forty-five years of smart-card evolution — from the original contact-card patent through ISO/IEC 7816, GlobalPlatform, JavaCard, contactless DESFire, and modern multi-applet FIDO + PIV co-resident credentials.
Timeline
Roland Moreno patents smart card
French inventor patents the integrated-circuit memory card — the conceptual origin of the modern smart card.
Carte Bancaire and France Télécom cards
First widely-deployed smart cards: payment cards in France, prepaid telephone cards across Europe.
ISO/IEC 7816-1/2 first edition
Physical characteristics and dimensions of integrated-circuit cards standardised internationally.
Java Card introduced
Java Card is introduced as a very small Java framework for smart cards. Its first version, Java Card 1.0, was a specification for APIs only, initially proposed by engineers at Schlumberger.
Open Platform moves to GlobalPlatform
GlobalPlatform is formed to carry the Open Platform card specification forward: multi-application card management through an issuer security domain and card content management.
ISO/IEC 14443 (proximity cards) published
Part 1 (2000) and Parts 2–4 (2001) specify the contactless 13.56 MHz proximity-card interface. Foundation of NFC, transit, and contactless payment.
MIFARE Classic ubiquitous in transit
Contactless smart cards dominate urban public transit. The vulnerabilities that will be disclosed in 2008 are already in the field.
NIST FIPS 201 / PIV card
Standardised contact + contactless smart card for federal-employee identity. PIV applet defined.
MIFARE Classic cryptanalysis published
Crypto-1 stream cipher broken in public; transit operators begin migration to DESFire.
EMV contactless takes off
Visa payWave and Mastercard PayPass deploy widely; NFC contactless payments enter the consumer mainstream.
Java Card 3.0.5
Oracle releases Java Card 3.0.5 Classic. Paired with GlobalPlatform's AES-based SCP03 secure channel (AES-128, -192 or -256 keys), it becomes the baseline for high-assurance smart-card platforms.
DESFire EV2 launched
NXP launches DESFire EV2 (March 2016): multi-application support, transaction MAC, and secure-messaging upgrades. Transit and access control deploy it at scale.
GlobalPlatform Card Specification 2.3.1
Published March 2018: the card-management baseline for SCP03-era multi-applet cards.
FIDO2 smart cards in production
FIDO2 applets on JavaCard secure elements ship as the next generation of multi-protocol identity cards.
Twelve-applet co-resident architecture
A single CC EAL6+ smart card carries FIDO2 + PIV + OpenPGP + NDEF + Door Access + OIDC + biometric variants, AID-selectable.
Smart card as identity hub
The modern smart card is no longer one credential — it is an issuer-policy boundary, with the JCVM firewall isolating up to a dozen credential applets per chip.
Continue exploring.
How do you build against this evolution?
If your roadmap touches any of these milestones, our engineering team can map the standards posture to a deployable architecture.