EMVCo White Paper on Contactless Mobile Payment 20110921111857912

  • Published on
    22-Dec-2015

  • View
    15

  • Download
    3

Embed Size (px)

DESCRIPTION

Detail about EMV.

Transcript

  • 2011 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo found at http://www.emvco.com/specifications.aspx.

    EMV*Contactless Mobile Payment

    EMVCo White Paper on Contactless Mobile Payment

    Version 2.0 September 2011

    * EMV is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo.

  • 2011 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo found at http://www.emvco.com/specifications.aspx.

    EMV Contactless Mobile Payment

    EMVCo White Paper on Contactless Mobile Payment

    Version 2.0 September 2011

  • EMV Contactless Mobile Payment EMVCo White Paper on Contactless Mobile Payment

  • EMV Contactless Mobile Payment EMVCo White Paper on Contactless Mobile Payment

    September 2011 v 2.0 Page iii 2011 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo found at

    http://www.emvco.com/specifications.aspx.

    Contents 1 Executive Summary............................................................................................. 1

    2 References ........................................................................................................... 3

    3 Contactless Mobile Payment Overview ............................................................. 5

    3.1 History ........................................................................................................... 5

    3.2 Meeting These Goals .................................................................................... 6

    3.3 Principles ...................................................................................................... 9

    4 EMVCo Technical Work and Perspective ........................................................ 11

    4.1 Contactless Mobile Payment Applications .................................................. 11

    4.2 Application Choice and Activation .............................................................. 11

    4.3 CMP Application Lifecycle .......................................................................... 12

    4.4 Payment Terminals Supporting Contactless Mobile Payment .................... 12

    4.5 Secure Elements ........................................................................................ 13

    4.6 Personalisation and Provisioning of CMP Applications .............................. 14

    4.7 Contactless Communication Modules ........................................................ 15

    4.8 Mobile Device Requirements to Support CMP ........................................... 15

    5 Type Approval .................................................................................................... 17

    5.2 Mobile Handsets ......................................................................................... 17

    5.3 Secure Elements ........................................................................................ 18

    5.3.1 Security Evaluation ......................................................................... 18 5.3.2 Functional Evaluation ...................................................................... 18

    5.4 CMP Applications ....................................................................................... 19

    5.5 Contactless Mobile Payment Terminal Approval ........................................ 19

    6 Looking Forward ................................................................................................ 21

    Annex A Summary of Contactless Mobile Payment Areas .............................. 23

    Annex B Frequently Asked Questions ............................................................... 25

    Annex C Actions Taken in Response to Areas Defined in the Technical Issues and Position Paper ................................................. 27

    Annex D Glossary ................................................................................................ 35

  • EMV Contactless Mobile Payment EMVCo White Paper on Contactless Mobile Payment

    Page iv v 2.0 September 2011 2011 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo found at

    http://www.emvco.com/specifications.aspx.

    Figures Figure 1 Simplified Architecture and Areas of Interest ............................................. 8Figure 2 Simplified Provisioning Architecture ......................................................... 14

    Tables Table 1 Areas Addressed by EMVCo and Other Specification Bodies................... 23 Table 2 Frequently Asked Questions ..................................................................... 25 Table 3 EMVCo Actions Based on Areas of Work Identified in

    Technical Issues and Position Paper ......................................................... 27

  • EMV Contactless Mobile Payment EMVCo White Paper on Contactless Mobile Payment

    September 2011 v 2.0 Page 1 2011 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo found at

    http://www.emvco.com/specifications.aspx.

    1 Executive Summary

    In 2007 EMVCo published two white papers. The first paper, The Role and Scope of EMVCo in Standardising the Mobile Payments Infrastructure (1) identified the mobile landscape at the time, and outlined the role and scope of EMVCos involvement in the standardisation of Contactless Mobile Payment within this landscape. This involvement was structured around two main areas: Technical Development and Industry Co-ordination. The second paper, the Technical Issues and Position Paper (2), highlighted a number of technical issues that EMVCo had identified as requiring solutions in order to enable the wide scale deployment of Contactless Mobile Payment, and EMVCos planned actions in addressing these issues.

    In the four years since EMVCo set out this vision, there has been significant movement in the industry. EMVCo has published a number of documents, and other industry bodies have also been active in the standardisation of technologies and services related to Contactless Mobile Payment.

    Toward meeting the goals of providing technical development and industry co-ordination, EMVCo has published the following technical documents:

    Contactless Mobile Payment Architecture Overview (3) provides an architecture and context for other EMVCo mobile documents

    Handset Requirements for Contactless Mobile Payment (4) provides guidance to the industry regarding features required for supporting Contactless Mobile Payment capabilities.

    Application Activation User Interface Overview, Usage Guidelines, and PPSE Requirements (5) defines how to configure a mobile device supporting multiple Contactless Mobile Payment applications to reflect the users choice and preferences.

    EMV Profiles of GlobalPlatform UICC Configuration (6) specifies a number of profiles for GlobalPlatform based UICCs which have been agreed upon by members of EMVCo.

    This white paper provides an updated view of the Contactless Mobile Payment landscape, setting out EMVCos current position and detailing how the issues identified previously have been addressed. It also identifies where EMVCo has on-going work in Contactless Mobile Payment, and highlights areas in which other industry bodies are providing input.

  • 1 Executive Summary EMV Contactless Mobile Payment EMVCo White Paper on Contactless Mobile Payment

    Page 2 v 2.0 September 2011 2011 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo found at

    http://www.emvco.com/specifications.aspx.

  • EMV Contactless Mobile Payment EMVCo White Paper on Contactless Mobile Payment

    September 2011 v 2.0 Page 3 2011 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo found at

    http://www.emvco.com/specifications.aspx.

    2 References

    The following documents are referenced in this white paper. All are available on www.emvco.com.

    1 EMV Mobile Contactless Payment: White Paper: The Role and Scope of EMVCo in Standardising the Mobile Payments Infrastructure. Version 1.0, 2007.

    2 EMV Mobile Contactless Payment: Technical Issues and Position Paper. Version 1.0, 2007.

    3 EMVCo Contactless Mobile Payment: Contactless Mobile Payment Architecture Overview. Version 1.0, 2010.

    4 EMV Contactless Mobile Payment: EMVCo Handset Requirements for Contactless Mobile Payment. Version 1.0, 2010.

    5 EMVCo Contactless Mobile Payment: Application Activation User Interface Overview, Usage Guidelines, and PPSE Requirements. Version 1.0, 2010.

    6 EMVCo Contactless Mobile Payment: EMV Profiles of GlobalPlatform UICC Configuration. Version 1.0, 2010.

    7 EMV Contactless Specifications for Payment Systems. Book C-1. Kernel 1 Specification. Version 2.1, 2011.

    8 EMV Contactless Specifications for Payment Systems. Book C-2. Kernel 2 Specification. Version 2.1, 2011.

    9 EMV Contactless Specifications for Payment Systems. Book C-3. Kernel 3 Specification. Version 2.1, 2011.

    10 EMV Contactless Specifications for Payment Systems. Book C-4. Kernel 4 Specification. Version 2.1, 2011.

    11 EMV Contactless Specifications for Payment Systems. Book D. EMV Contactless Communication Protocol Specification. Version 2.1, 2011.

    12 EMV Card Personalization Specification. Version 1.1, 2007.

    13 EMVCo Card Testing Framework for Contactless. Version 1.0, 2010.

    14 EMV Security Guidelines. EMVCo Security Evaluation Process. Version 4.0, 2010.

  • 2 References EMV Contactless Mobile Payment EMVCo White Paper on Contactless Mobile Payment

    Page 4 v 2.0 September 2011 2011 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo found at

    http://www.emvco.com/specifications.aspx.

  • EMV Contactless Mobile Payment EMVCo White Paper on Contactless Mobile Payment

    September 2011 v 2.0 Page 5 2011 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo found at

    http://www.emvco.com/specifications.aspx.

    3 Contactless Mobile Payment Overview

    The increasing rate of convergence between the mobile telecommunications and payments industries has led mobile payments to become a growing industry sector in recent years.

    All actors within the value chain are set to benefit from the wide-scale deployment of mobile payments: the financial community, merchants, network operators, technology providers, and consumers. These benefits are set to increase as mobile payment programmes evolve beyond the medium term reality of mass market contactless mobile payment.

    3.1 History In 2007, after analysis and vetting with its stakeholders, EMVCo decided that its role in Contactless Mobile Payment standardisation is two-fold. Firstly, with the growth of the contactless mobile payment sector, there was a need for EMVCo to address and resolve a number of technical infrastructure issues associated with enabling contactless payments via mobile phone handsets. This technical development responsibility was in line with EMVCos traditional role within the payments industry as a technology standards body. The mobile payment technical focus of EMVCo would be an adjunct to the organisations work towards the development of specifications related to contactless payment and the associated common Type Approval process for cards and terminals.

    Secondly, due to the nature and early lifecycle stage of the contactless mobile payment market there was a need for the payments industry to adopt a collaborative approach to standardisation. EMVCo would co-ordinate the payments industry efforts, in standardisation work with other industry groups and market forces in order that an interoperable contactless mobile payment model for EMV transactions could be defined and created. EMVCo would provide the common voice of the payments industry on contactless mobile proximity payment standardisation.

    EMVCos role within the standardisation of contactless mobile payment could be classified under two headings and broken down into a number of key deliverables:

  • 3 Contactless Mobile Payment Overview EMV Contactless Mobile Payment EMVCo White Paper on Contactless Mobile Payment

    Page 6 v 2.0 September 2011 2011 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo found at

    http://www.emvco.com/specifications.aspx.

    Technical Development:

    To define chip data security requirements

    To define a framework for Type Approval process

    To define global interoperability between Contactless Mobile Payment devices and payment acceptance infrastructure from a technical perspective

    To identify user interface issues

    Industry Co-ordination

    To standardise contactless mobile proximity payment infrastructure requirements

    To fill in gaps which exist in the standardisation of Over-the-Air (OTA) card and application management (for both secure elements and user interface applications)

    To actively engage relevant standards organisations in order to ensure EMV involvement in the standardisation for contactless mobile payment

    To speak with a common voice to vendors, operators, banks, and merchants about contactless mobile payment opportunities, challenges, and the need for standardisation.

    Throughout the process of working towards the creation of a global interoperable contactless mobile payment infrastructure for EMV transactions, EMVCo has solicited feedback on its role from the payments industry in order to remain relevant to, and representative of, the sector.

    3.2 Meeting These Goals In this environment, EMVCo identified the need for common specifications and common platforms in order to prevent fragmentation, which could in turn become a barrier to the widespread deployment of Contactless Mobile Payment (CMP). It was also recognised that mobile devices are not primarily...

Recommended

View more >