Gemalto CEO: HCE Not Secure for EMV Payments Unless Tokens Stored on Secure Elements or TEE

France-based vendor Gemalto Thursday confirmed its growth projections for 2014 and its longer-term forecast for 2017, despite the recent announcements of support for host-card emulation by Visa and MasterCard Worldwide.

Gemalto, the world’s largest smart card supplier and also the largest trusted service manager, has much to lose if pure host-card emulation, or HCE, takes off. It would enable banks and other service providers to avoid putting their applications on NFC SIMs, like the ones Gemalto supplies by the millions to mobile operators; or to require the hiring of a TSM to manage those applets over the air on the SIMs or other secure elements. 

Gemalto CEO Olivier Piou, while he questioned the inherent security of HCE for EMV payments, sought to put a positive face on the growing interest in the technology, in comments to financial analysts Thursday, following release of the company’s fourth quarter and year-end results. 

Among other things, HCE represents an endorsement of NFC by “all the main players of this ecosystem” for NFC, including Visa, MasterCard and Google, said Piou, who added that HCE would add momentum to the deployment of contactless point-of-sale terminals by merchants. In addition, he acknowledged that HCE enables easier development of applications for use with NFC phones, compared with secure elements. 

Some major telcos, including the Isis joint venture, have been using similar talking points, especially since Visa and MasterCard made their HCE announcements Feb. 19. 

But Piou, like the mobile operators, is taking a position on security that doesn’t quite match that of Visa and MasterCard or to jibe with the strict definition of HCE. Gemalto and the telcos are arguing that HCE is suited for such low-security applications as loyalty and couponing, not for open-loop payment. 

In this article: 

Words

3,500 

Among Topics Covered:

  • Gemalto CEO’s Olivier Piou’s contention that EMV tokens for HCE can't be secure in phone memory
  • Position of Visa and MasterCard on security of tokens and HCE
  • Piou: Decision on HCE security belongs to banks
  • Gemalto’s year-end revenue and profit report and multiyear goals
  • Review of hybrid approach to putting tokens on secure elements for cloud-based NFC payments
  • Oberthur’s take on HCE security
  • Isis’ view of HCE
  • Piou’s comments on Gemalto’s MCX contract and response to question about role vis-à-vis Paydiant 

Sources Quoted: 

Olivier Piou, CEO, Gemalto
Cédric Collomb, managing director, telecom, Oberthur Technologies
Scott Mulloy, CTO, Isis
Jorn Lambert, group executive, digital convergence, MasterCard 

Among companies and organizations mentioned:

Gemalto
Visa
MasterCard
Isis
Oberthur
MCX
Paydiant 

This is premium content from NFC Times.

Read Full Article 

© NFC Times and Forthwrite Media. NFC Times content cannot be copied or distributed without the express permission of the publisher.

HEADLINE NEWS

Australian Transit Agency to Launch Mobility-as-a-Service Trial as It Pursues Long-Term MaaS Strategy

Plans by Transport for New South Wales, Australia’s largest transit agency, to launch a trial enabling users to plan, book and pay for multimodal rides is the next step toward the agency’s long-ter

Updated: U.S. Transit Agency Seeks to Reduce–Though Not Eliminate–Cash Acceptance with New Fare-Collection System

Updated: The Spokane Transit Authority in Washington state confirmed that its new fare-collection system will include contactless open-loop payments–with a beta test planned for next October, a spokesman told NFC Times' sister publication Mobility Payments.

UK Government Seeks to Bring London-Style Contactless Fare Payments System to Other Regions

The UK government’s plan to equip 700 rail stations over the next three years to accept contactless open-loop payments is a major initiative, as it seeks to replicate the success of London’s contactless pay-as-you go fare payments system elsewhere in the country–a goal that has proved elusive in the past.

More Cities in Finland Expected to Move to Open-Loop Fare Payments

A fourth city in Finland is beginning to roll out contactless open-loop payments, with “more in the pipeline,” according to one supplier on the project, making the Nordic country one of the latest hotspots for the technology.

Moscow Metro Expands Test of ‘Virtual Troika’ in Pays Wallets, as It Continues to Develop Digital-Payments Services

Moscow Metro is recruiting more users to test its “Virtual Troika” card in two NFC wallets, those supporting Google Pay and Samsung Pay, as one of the world’s largest subway operators continues to seek more ways for its customers to pay for rides.

Ohio Transit Agency Expects Significant Revenue Loss as it Builds Equity with Fare Capping

The Central Ohio Transit Authority, or COTA, officially launched its new digital-payments service Monday, including a fare-capping feature that the agency estimates will cost it $1.8 million per year in lost fare revenue, the agency confirmed to Mobility Payments.

Special Report: Interest Grows in ‘White-Label EMV’ for Closed-Loop Transit Cards

As more transit agencies introduce open-loop fare payments, interest is starting to grow in use of white-label EMV cards that agencies can issue in place of proprietary closed-loop cards for riders who don’t have bank cards or don’t want to use them to pay fares.

Swedish Transit Agency Launches Express Mode Feature for Apple Pay, though Most Ticketing Still with Barcode-Based App

Skånetrafiken, the transit agency serving one of Sweden’s largest counties, announced today it has expanded its contactless open-loop payments service to include the Express Mode feature for Apple Pay.

Major Bus Operators in Hong Kong Now Accepting Open-Loop Payments–Adding More Competition for Octopus

Two more bus operators in Hong Kong on Saturday launched acceptance of open-loop contactless fare payments, with both also accepting QR code-based mobile ticketing–as the near ubiquitous closed-loop Octopus card continues to see more competition.

Moscow Metro Launches Full Rollout of ‘Face Pay;’ Largest Biometric Payments Service of Its Kind

Touting it as the largest rollout of biometric payments in the world, Moscow Metro launched its high-profile “Face Pay” service Friday, as expected, and predicted that 10% to 15% would regularly us

Indonesian Capital Seeks to Expand to Multimodal Fare Collection and MaaS

Indonesia’s capital Jakarta, whose metropolitan area is home to more than 30 million people, is notorious for its stifling traffic congestion. In response, the government metro and light-rail networks and now it is funding an expansion of the fare-collection system to enable more multimodal payments and to build a mobility-as-a-service platform.

Exclusive: NFC Wallets Grow as Share of Contactless Fare Payments and Not Only Because of Covid

Transit agencies that have rolled out open-loop contactless payments are seeing growing use of NFC wallets to pay fares, as Covid-wary passengers see convenience in tapping their phones or wearables to pay.