Near Field Communications Handsets and Tags, NFC Pilots and Projects

Alliance proposes new rules for payments in U.S.

Thursday, September 10, 2009

Payment data breaches in the U.S. have caused individuals to go to two camps, either implement EMV or deploy end-to-end encryption of payment data. The Smart Card Alliance, however, is suggesting another option: contactless chip card technology and online dynamic cryptograms.

The Smart Card Alliance publication states that there is a lot of confusion when it comes to encryption. “End-to-end encryption does not necessarily mean the same thing to all people, and the payments industry has not yet defined standards,” the paper states.


Compared to end-to-end encryption, contactless cards with dynamic cryptograms would have the following advantages:

  • Less impact on the payments acceptance infrastructure for merchants, acquirers and issuers
  • Enable merchants to implement a solution more quickly and without waiting for new standards
  • Provide a high level of cardholder data protection by including a dynamic cryptogram with each transaction
  • Reduce the threats posed by cloning magnetic stripe-based cards and stealing cardholder data

EMV has also been offered as a solution, but critics of have argued that the merchant terminal implementation costs and the complexity of key management made chip cards prohibitively expensive.

Compared to EMV, contactless online-only implementation:

  • Lowers the cost of the cards since a crypto-coprocessor is not required
  • Eliminates the need for key management at the merchant terminal by using online cryptogram verification
  • Uses the existing contactless infrastructure that is already in place in many retailers
  • Readies the payments acceptance infrastructure for mobile NFC payments
  • Works with existing transaction processing networks
  • Can be coupled with contactless payment, an attractive payment product for consumers
  • Achieves the goal of eliminating fraud from cloned cards
  • Can be used with a handheld reader or with a mobile application to eliminate CNP fraud
  • Supports issuers who want to offer globally-interoperable chip cards

Download End-to-End Encryption and Chip Cards in the U.S. Payments Industry from the Smart Card Alliance[end] 

Revere Security, a wireless encryption solution provider, announced that it will co-chair the newly-formed DASH7 Alliance Security Working Group (SWG).

As the newest member of the DASH7 Alliance, Revere Security will focus on defining standards and interoperable security capabilities, as well as the most effective approaches to suit the varying memory, power and battery life requirements of wireless devices and network systems.

read more »

Multicard, a business unit of Identive Group, announced that it has been selected by Rabobank to provide personalization and fulfillment services for the Dutch bank’s latest application of its MiniTix cashless e-payment solution.

read more »

The Smart Card Alliance Transportation Council is holding a meeting on open standards payment for public transportation in New York City on September 22 - 23.

read more »

MarketsandMarkets has released a new report predicting that the value of mobile payment transactions in the US will reach $56 billion in 2015.

According to the report, “Mobile Payment - Advanced Technologies (NFC), Strategies And Future Of Remote & Proximity Payment In US,” the market for NFC mobile payment in the US is currently in its infancy, with an adoption rate of only 1.7%.

read more »

Canadian Retail Solutions (CRS) and YESpay International have partnered to deliver EMV chip and PIN managed card payment service to Canadian customers. YESpay’s EMBOSS is an EMV chip and PIN accredited and PCI-DSS Level 1 certified managed payment service.

read more »

The European Payments Council (EPC) has just published a white paper arguing the case for contactless mobile payment in the single euro payments area (Sepa), according to finextra.com.

read more »