<PLEASE DELETE & PRINT COMPANY LETTERHEAD>

Department of Trade and Industry

London Date: 19th Nov 2007

Dear Sir

We, (Heng Yu Technology Ltd., with offices at Room 1503-5, 15/F., Nan Fung Commerical
Centre, 19 Lam Lok Street, Kowloon Bay, Kowloon, Hong Kong), certify that the goods shown
below have been ordered by us from (name and address of Atmel sales office) in (country) as
sales office for Atmel,
Maxwell Building, Scottish Enterprise Technology Park, East Kilbride, Glasgow G75 0QF

The goods to be supplied are AT90SC, AT91SC & AT05SC Family Development tools,
silicon and technical data.

The goods will be used for the following purposes:

The development of PCI PED

By signing this letter, we certify that the goods above are for our own use and will not be re-
exported or sold for export.

We also certify that the goods will not be used for military purposes.

We confirm that the above goods will not be used for purposes associated with chemical,
biological or nuclear weapons, or missiles capable of delivering such weapons, nor will they be
resold if we know or suspect that they are intended or likely to be used for such a purpose.

For and on behalf of (Company name): Heng Yu Technology Ltd.

(Authorized signature):_______________________________________________________

Name: BLOCK CAPITALS) CHAN HOI KAI

Position/title R&D Manager Date 19th Nov 2007

CC R5 UK/France Export Declaration 1
<PLEASE DELETE & PRINT ON COMPANY LETTERHEAD>

Atmel Smartcard ICs

Maxwell Building
Scottish Enterprise Technology Park
East Kilbride, Scotland G75 0QR

and / or

Atmel
Zone Industrielle
13106 Rousset Cedex
France Date: 19th Nov 2007

Dear Sir

The following ‘End Use’ information is supplied to you as per your requirements
for Export certification. By completing and signing at the end of this document,
we confirm that the information contained herein is true and correct at the time of
completion, and that the goods are for our own use and will not be re-exported or
sold for export:

Atmel part number: AT90SC & AT05SC Family

Atmel ROM number: AT90SC & AT05SC Family
1. Customer name: (legal company name)

___Heng Yu Technology Ltd._______________________________________________

2. Shipping Address: (full postal address)

___Room 1503-5, 15/F., Nan Fung Commerical Centre, 19 Lam Lok Street, Kowloon Bay,
Kowloon, Hong Kong___________________________________________________

3. Definition of application(s): Company / standard agency etc. that defined the

application (For example, for a Mondex card the application definer would be Mondex
International.)
______________________________________________________________________
______________________________________________________________________

4. Destination country/ies: (including all countries involved in total lifecycle)

______________________________________________________________________
______________________________________________________________________
______________________________________________________________________

CC R5 UK/France Export Declaration 2
5. List of ALL encryption/decryption algorithm(s) & key lengths used:(Examples: DES-56
bit, RSA-512bit, ECC-72bit, SHA-1, custom-1024bit, etc.)

___DES-56 and SHA-1________________________________________________________

6. Purpose of algorithm(s): Is the encryption / decryption / key management capability

described by one or more of the following?

a. The device functionality will be determined (fixed) at the time of shipment from Atmel (such as
in ROM code or programmed into NVM), and will not be substantially changed at a later time.
YES____NO_X_
_

b. Not capable of message traffic encryption or encryption of user supplied data.

YES____NO____

c. Uses only "fixed" data compression or coding techniques (no changeable keys).
YES____NO_X_
_

d. Authentication - Equipment that calculates a Message Authentication Code (MAC), digital

signature, or similar result to ensure no alteration of text has taken place, or to authenticate
users,but does not allow for encryption of data, text or other media other than that needed for the
authentication. YES_X_NO____

e. Access control - Equipment that protects passwords, personal identification numbers (PINs) or
similar data to prevent unauthorized access to facilities but does not allow for encryption of files
or text (except as directly related to the password or PIN protection). YES_X_NO____

f. Proprietary software protection - Equipment where the cryptographic capability is not user-
accessable and which is specifically designed and limited to allow any of the following:

Execution of copy-protected software; Access to copy-protected read-only media; Access to

information stored in encrypted form on media (e.g. in connection with the protection of
intellectual property rights) when the media is offered for sale in identical sets to the public; or
Access to copying of copyright protected audio/video data. YES____NO____

g. Banking - Cryptographic equipment specifically designed and limited for:

I. Automatic teller machines YES____NO____

II. Self-service statement printers YES____NO____
III. Point of sale terminals YES____NO____
IV. Interbank transactions YES____NO____
V. Collection or settlement of fares YES____NO____
VI. Credit functions YES____NO____
VII.Other money transactions (describe) ______________________________________

h. Receiving equipment for radio broadcast, pay television or similar restricted audience
television of the consumer type, without digital encryption except that exclusively used for
sending the billing or programme-related information back to the providers. YES____NO____

i. Portable or mobile radio telephones for civil use (e.g., for use with commercial civil cellular
radio communications systems) that are not capable of end-to-end encryption.
YES____NO___
If the encryption/ decryption algorithm is not used for any application listed above,
describe the application here:

CC R5 UK/France Export Declaration 3
_________________________________________________________________________
_________________________________________________________________________
_________________________________________________________________________

7. Is an end product data sheet available? YES____NO____

8. What is the anticipated Project start date? _______________

9. What is the volume forecast for the product? ________________ units / parts
per annum

We certify that the goods will not be used for military purposes.

We confirm that the above goods will not be used for purposes associated with chemical,
biological or nuclear weapons, or missiles capable of delivering such weapons, nor will they be
resold if we know or suspect that they are intended or likely to be used for such a purpose.

It is further understood that if the answers to any of the above questions change in the future, the
company is obligated to inform Atmel of such changes, as they could affect the export licensing
status of the product.

For and on behalf of (Company name):__________________________________________

(Authorized signature):_______________________________________________________

Name: BLOCK CAPITALS)___________________________________________________

Position/title___________________________________Date________________________

CC R5 UK/France Export Declaration 4