Gemalto CEO: HCE Not Secure for EMV Payments Unless Tokens Stored on Secure Elements or TEE

France-based vendor Gemalto Thursday confirmed its growth projections for 2014 and its longer-term forecast for 2017, despite the recent announcements of support for host-card emulation by Visa and MasterCard Worldwide.

Gemalto, the world’s largest smart card supplier and also the largest trusted service manager, has much to lose if pure host-card emulation, or HCE, takes off. It would enable banks and other service providers to avoid putting their applications on NFC SIMs, like the ones Gemalto supplies by the millions to mobile operators; or to require the hiring of a TSM to manage those applets over the air on the SIMs or other secure elements. 

Gemalto CEO Olivier Piou, while he questioned the inherent security of HCE for EMV payments, sought to put a positive face on the growing interest in the technology, in comments to financial analysts Thursday, following release of the company’s fourth quarter and year-end results. 

Among other things, HCE represents an endorsement of NFC by “all the main players of this ecosystem” for NFC, including Visa, MasterCard and Google, said Piou, who added that HCE would add momentum to the deployment of contactless point-of-sale terminals by merchants. In addition, he acknowledged that HCE enables easier development of applications for use with NFC phones, compared with secure elements. 

Some major telcos, including the Isis joint venture, have been using similar talking points, especially since Visa and MasterCard made their HCE announcements Feb. 19. 

But Piou, like the mobile operators, is taking a position on security that doesn’t quite match that of Visa and MasterCard or to jibe with the strict definition of HCE. Gemalto and the telcos are arguing that HCE is suited for such low-security applications as loyalty and couponing, not for open-loop payment. 

In this article: 

Words

3,500 

Among Topics Covered:

  • Gemalto CEO’s Olivier Piou’s contention that EMV tokens for HCE can't be secure in phone memory
  • Position of Visa and MasterCard on security of tokens and HCE
  • Piou: Decision on HCE security belongs to banks
  • Gemalto’s year-end revenue and profit report and multiyear goals
  • Review of hybrid approach to putting tokens on secure elements for cloud-based NFC payments
  • Oberthur’s take on HCE security
  • Isis’ view of HCE
  • Piou’s comments on Gemalto’s MCX contract and response to question about role vis-à-vis Paydiant 

Sources Quoted: 

Olivier Piou, CEO, Gemalto
Cédric Collomb, managing director, telecom, Oberthur Technologies
Scott Mulloy, CTO, Isis
Jorn Lambert, group executive, digital convergence, MasterCard 

Among companies and organizations mentioned:

Gemalto
Visa
MasterCard
Isis
Oberthur
MCX
Paydiant 

This is premium content from NFC Times.

Read Full Article 

© NFC Times and Forthwrite Media. NFC Times content cannot be copied or distributed without the express permission of the publisher.

HEADLINE NEWS

Vivo Last of Major Chinese Smartphone Makers to Officially Launch NFC Pays Wallet

NFC TIMES Exclusive Insight – Vivo, China’s second largest smartphone maker, made it official this week, launching its NFC-enabled “vivo Pay” wallet, the last of the major Chinese phone OEMs to roll out NFC payments–though their use has been disappointing, at least for payments in stores.

In-Depth: Fit Pay’s Troubles Indicate Difficult Business Case for Provisioning to Wearables

Sep 19 2019

NFC TIMES Exclusive Insight –  Given the poor financial results of U.S.-based Fit Pay, it’s becoming clear that the business case for provisioning of payment cards to wearable devices remains difficult.

Analysis: Chase Pay Latest Bank Wallet to Shut Down; Why Did They Fail?

NFC TIMES Exclusive Insight – Plans disclosed this week by JPMorgan Chase to shut down its Chase Pay app for in-store purchases is yet another nail in the coffin–perhaps the final one–for bank wallets in the U.S. And the situation does not look much brighter for bank-issued wallets abroad.

Miami Latest U.S. City to Introduce Open-Loop Transit Payments

NFC TIMES Exclusive Insight Transit officials in Miami-Dade County, Fla. are the latest in the U.S. to introduce open-loop payments of fares with contactless credit and debit cards and bank card credentials on NFC wallets, launching the service yesterday on the city's relatively small metro network, with plans to expand to buses later.

UK Tram Riders Take to Tapping with NFC phones to Pay for Fares, According to Early Results

NFC TIMES Exclusive – Transport for Greater Manchester, which last month launched open-loop payments on its large Metrolink tram network, said Thursday that contactless credit and debit cards and NFC wallets accounted for a combined 170,000 rides during the first four weeks of the service.

In-Depth: NFC Wallet Use for Open-Loop Transit Grows but Still Makes Up Relatively Small Share of Contactless Payments

NFC TIMES Exclusive – When New York City transit officials announced Tuesday that the 1 millionth ride paid for through their new OMNY open-loop payments service had arrived ahead of schedule, they also proudly noted that 80% of the contactless payments had come from NFC wallets, not physical bank cards. 

PayPay Gets Off to Quick Start as One of Many Digital Payments Services in Cash-Loving Japan

NFC TIMES Exclusive Insight – As Japan continues to fight what to date has been a losing battle against cash, an announcement by the joint venture behind QR code-based payments service PayPay offers a little bit of encouragement. 

Research Firm Projects Use of NFC Mobile Wallets in U.S. to Remain Disappointing This Year

NFC TIMES Exclusive Insight – As Apple Pay approaches the fifth anniversary of its launch in the U.S., there is more research showing that most American consumers simply don’t see the value of tapping to pay with NFC-based payments services. 

In-Depth: Five Years After Transport for London Launched Contactless Across Its Transit Network, UK Open-Loop Rollout Remains Uneven

Aug 15 2019

NFC TIMES Exclusive Insight – Five years ago next month, Transport for London introduced open-loop contactless payments across its transit network, including metro, trams and commuter rail, following an earlier launch on buses. The service now accounts for more than half of all pay-as-you-go journeys and has become a global showcase for the technology.

Apple Again Promises to Push Transit Ticketing as It Seeks Broader Adoption of Apple Pay

NFC TIMES Exclusive Insight – While noting to financial analysts late Tuesday that Apple Pay is now approaching 1 billion transactions per month globally and is in 47 markets, perhaps Apple CEO Tim Cook’s most significant comments about Apple Pay this week was to again emphasize that Apple wants to enable users to routinely tap to pay for bus, subway and other transit rides with their iPhones and Apple Watches. 

Chinese Mega Wallets Continue to Expand QR Code-based Transit Ticketing, while Major Agencies in West Stay with NFC

NFC TIMES Exclusive Insight ­– China’s mega-mobile wallet providers have continued their rollouts of transit payments in China, with Tencent Holdings announcing Tuesday that two years after launching its first QR-code-based WeChat “Ride Code” service in Guangzhou, total users for its transit payments services has reached 100 million.

Sydney Transit Authority Gives Users of Contactless Bank Cards Nearly All Discounts They Get with Closed-Loop Opal Cards

Jul 29 2019

NFC TIMES Exclusive Insight – Transport for New South Wales, Australia, the authority that oversees transit in and around Sydney, has taken a step toward phasing out its closed-loop contactless Opal fare card, today extending nearly all of the discounts it offers on Opal to users of open-loop Visa- Mastercard- and American Express-branded contactless cards.