John Elliott
John is a leading authority on the design and implementation of open payments systems in public transport, using payment cards as a token for travel and an information security expert. He leads Consult Hyperion's Transit Practice and brings to the project team significant insight into the information security risks associated with Account Based Ticketing and Open Loop Transit Payment services, including compliance with the relevant PCI standards.
John led the Consult Hyperion team which supported the design and implementation of the world's first Open Payment transit ticketing service by Transport for London (TfL). As Head of Security within the TfL's Future Ticketing Project team, John authored the Security Requirements for the end-to-end service and oversaw the implementation of the security architecture by TfL's chosen supplier, Cubic. As the project matured he focused on PCI compliance and identifying the weaknesses within the system which might be exploited by fraudsters.
More recently John has advised transit operators and ticket resellers in Colombia, Hungary, New Zealand, India, Sweden, Belgium, Singapore and the UK on the design of their service and the management of their chosen vendors. He led the Consult Hyperion team working with ITSO to expand their specifications to support the deployment of ITSO products on mobile devices using HCE.
John is currently leading the team at Transport for the North (TfN) in the UK, capturing the requirements for an Account-Based Ticketing system working with all public transport operators across the north of England.