We are
(((eticket
Germany
© (((eticket Germany 2026
Since the introduction of the Deutschland-Ticket, there have been discussions about barcodes. Here’s how the standards differ.
On 28 November 2024, representatives of German public transport companies met in Cologne for an extraordinary general meeting. The aim was to agree on security standards for the Deutschland-Ticket, as the number of cases of fraud involving digital tickets has risen.
This marked the first time that the general meeting had not only discussed technical developments relating to the standard, but had also adopted guidelines for the issuance of tickets.
This is possible under the regulations of (((eTicket Deutschland, through which all transport operators in Germany are legally linked. However, this general assembly of the public transport sector makes decisions with a quorum of 75 per cent. This high threshold is necessary as the resolutions are binding and may, under certain circumstances, trigger investment.
A number of important resolutions were passed, such as those concerning the encryption of communications. Other issues, such as the security of the UIC barcode and the introduction of a central product manager system (ZPVS), were hotly debated and deferred.
One key question, however, remains unanswered: should the Deutschland-Ticket also be issued with the UIC barcode, or only with the VDV barcode?
The difference between UIC and VDV barcodes
The two barcodes differ primarily in their areas of application and the underlying concepts. However, all barcodes have a serious weakness: they can be copied and redistributed, for example, via screenshots.
The UIC barcode is a 2D barcode developed for international long-distance rail travel. It is issued by the International Union of Railways (UIC), which registers long-distance rail operators and maintains a public database of public keys. This enables railway operators involved in cross-border services to verify the authenticity of each other’s tickets.
However, the UIC only publishes the specification. Everything a transport operator requires for encryption, blocking, monitoring or the set of rules governing interactions between different companies must be set up and operated by the operator itself. As these are mostly national long-distance rail operators, which are generally state-owned, the number of UIC users who need to exchange data with their neighbours is manageable.
The VDV barcode is also a 2D barcode; it was developed specifically for local public transport in Germany and forms part of the VDV core application. It is embedded in the central back-end systems and the regulatory framework of (((eTicket Deutschland). It therefore utilises the same security infrastructure as that used for smart cards in Germany and is designed for interoperable use by thousands of organisations that do not know one another but must trust one another.
As the use of the VDV barcode requires only a participant agreement and at least one security module with a secret key, the VDV barcode is significantly more cost-effective for nationwide use in Germany than the UIC barcode. Full use of all back-end systems and centralised security management is included in full for participants. This includes encryption, blocking, communication within the shared network and national monitoring.
Motics – anti-counterfeiting protection for barcode tickets
To solve the problem of tickets that can be copied, we have developed the Mobile Ticketing Crypto Service – Motics for short – on behalf of the public transport authority. The system links the existing ticketing infrastructure with passengers’ smartphones. It has various implementation stages, meaning that tickets can be issued visually as barcodes or via NFC.
In the first phase, the VDV barcode is protected against copying by a dynamic security element. Motics enables the smartphone to generate a new barcode itself. This can, for example, be generated with a timestamp that is refreshed every 30 seconds. If the ticket is then copied and sent, the dynamic element remains unchanged and cannot be renewed on another mobile phone. Copied tickets are therefore immediately noticeable during ticket inspections. This process also works when the passenger’s smartphone is offline.
With Motics featuring NFC, tickets can be validated contactlessly via radio. There is no need to scan barcodes or check ID documents. This speeds up ticket validation enormously. At the same time, the same security procedure is used as with chip cards.
Motics has
now also found its way into Google Wallet. In close collaboration with Google, PaderSprinter and Ride, we have successfully integrated Motics’ functionalities into the Wallet. This enables transport operators and transport associations to offer secure mobile tickets directly from their online shop to their occasional customers as well. We have tested this on a large scale at the Oktoberfest and the Cologne Carnival so far: it works
We are
(((eticket
Germany
© (((eticket Germany 2026