Card Emulation Expected Soon Despite Doubts from Google Engineers

May 17 2011

Google NFC software engineers, while touting the “dozens” of NFC phones in the pipeline and prospects for compelling applications using tag reading and peer-to-peer communication, downplayed use of Android phones for payment with secure chips.

Two top Google NFC developers, Nick Pelly and Jeff Hamilton, speaking at the Google I/O conference yesterday in San Francisco, told Android developers attending a session on NFC not to expect application-programming interfaces, or APIs, to access the secure element on Google’s Nexus S or other Android NFC phones anytime soon.

Pelly, who led the presentation, “How to NFC,” and who appears to be a technical lead for NFC at Google, said Google has yet to introduce any APIs for card emulation because the company can’t yet ensure a “compelling” user experience when consumers tap their phones to pay using an application stored on a secure chip. He and Hamilton said there probably won’t be any APIs in the near future available to developers in software development kits.

If true, this could potentially delay the introduction of applications that would enable Android NFC phones to be used in card-emulation mode, that is, acting like contactless debit or credit cards, transit tickets or door keys.

But some industry experts are casting doubt on Google’s reluctance to support card emulation in Android phones.

After all, Google ordered the Nexus S with embedded secure chips, the PN65 from NXP Semiconductors, which can store applications. The NFC controllers in the phones also support applications for card emulation on SIM cards.

And there is little doubt that Google is developing an NFC mobile wallet to store payment and is building an m-commerce infrastructure that could deliver advertisements and targeted offers to consumers in and around the physical retail point of sale. A key piece of this m-commerce initiative is payment, for which Google would work with banks and established payment networks. Sources have said that among these are U.S.-based Citigroup and MasterCard Worldwide.

MasterCard: Card Emulation for PayPass Available
MasterCard, while not confirming that it is working with Google on NFC-based payment, told NFC Times in a statement that it fully expects to soon see PayPass rolled out on secure elements in NFC phones and for the applications to work with the hundreds of thousands of POS terminal readers that support PayPass worldwide and those to come.

Secure elements in the phones “provide the security necessary to protect the payment information,” noted a spokeswoman.

“MasterCard believes that the elements required for commercial deployment of MasterCard PayPass on mobile devices are available.”

She added that using NFC in peer-to-peer mode could enable MasterCard to offer other innovative services.

Despite the statements of the top NFC software engineers, Google might already be preparing to support card emulation and the embedded secure chips in its Nexus S phones, according to one Austria-based NFC researcher, who has monitored the NFC support in Google’s Android operating system.

He said the latest version, Android 2.3.4, contains commands to access the embedded chips. And he believes that Google itself wants that access.

“It’s an internal API, an API that is not public to anyone but limited to a certain group who has access to this,” Michael Roland, research associate at the Upper Austria University of Applied Sciences in Hagenberg, Austria, told NFC Times. “I think this group is limited to Google.”

It was not entirely clear from the Google presentation yesterday what problems applications using card emulation could cause. But Pelly seemed to say that card emulation would force NFC hardware on the phones to support a range of different contactless protocols now used on contactless cards. That would include both types A and B of the international ISO/IEC contactless standard, as well as proprietary contactless protocols.

In response to a question from the audience of developers, Pelly added that NFC chips “typically are going to be able to emulate only one of those RF technologies.

“So as an application developer, you don’t know which one is deployed to the phone,” he said. “I guess until we see the industry standardized around maybe one RF-level technology, or if we see NFC controllers able to support multiples of those, I guess what we are hoping is that everyone is moving to peer to-peer.”

P2P Unlikely for Bank Payment
But to another question, Pelly acknowledged that he knows of no major P2P NFC applications that have been developed for payment.

And the major card networks, such as Visa Inc. and MasterCard, are unlikely to accept the security now available in P2P mode for their contactless payment applications, payWave and PayPass.

They require those applications, along with the encryption keys that safeguard them, to be stored on secure elements and to interact in card-emulation mode with their standardized contactless point-of-sale terminals.

PayWave and PayPass applications are already being developed for both embedded chips, SIM cards and potentially other secure elements that could work directly in Android NFC phones, such as microSD cards.

Other service providers are planning to use card emulation in NFC phones to support such proprietary contactless protocols as Mifare for transit fare-collection and access control.

NFC Accounting and tax software provider Intuit, has been demonstrating a P2P payment application on Nexus S phones at the Google I/O conference as a possible expansion to its smartphone-based mobile-payment service, GoPayment.

But Intuit has called the NFC application only a “concept,” though has plans to introduce it. A spokeswoman told NFC Times the application simulates a prepaid debit card and uses a proprietary security scheme that the company declined to elaborate on.

Update: Rémy de Tonnac, CEO of France-based NFC chip supplier Inside Secure, noted that Google has joined the NFC industry relatively recently and may not know the standards and engineering work done on card emulation over the past several years.

“We are surprised that these guys are saying card emulation is not working," he told NFC Times. "We know that card emulation solution is working real fine, in type A and type B.” End update.

Android ‘Army’ Doesn’t Need Card-Emulation APIs
But Google has a point that there is some fragmentation in support among NFC chips and secure elements for the various contactless technologies used with applications in card-emulation mode, according to Einar Rosenberg, CTO for U.S.-based NFC application developer Narian Technologies. The industry is addressing those issues, especially on the NFC chip side, he added.

In any case, the main applications that will use card emulation–payment, transit ticketing and access control–were never meant to be open to the tens of thousands of Android developers who build apps for Google’s app store, Android Market, said Rosenberg. The security required for these applications means relatively few application developers will design the apps for the phones and fewer still for the corresponding applications on the secure elements.

So it is not so important whether Google publishes APIs for access to the secure elements.

“The army of Android developers are, for the most part, the independent innovators, not the big corporate conglomerates,” he said.

The real problem for card emulation could come if contactless applications are stored on different secure elements in the same NFC phone, said Christian Andresen, head of the NFC business unit for Germany-based Stollmann, which develops NFC middleware that runs on phones. The industry has yet to put standards and procedures in place to tell either the phone or contactless reader which secure element to communicate with.

But he said he doesn’t know of problems for NFC supporting the various protocols for card emulation.

“I would say, NFC is ready for card emulation,” he said.

Pelly and colleague Jeff Hamilton, however, were referring to potential problems for card emulation from even one secure element in an Android phone. And they have other concerns.

“To talk to the secure element, even from an application on the phone, you need to authenticate yourself properly,” said Hamilton. “And if you improperly authenticate yourself a certain number of times, there are secure elements that will physically destroy themselves and can never be recovered. So that’s something that we really think would be a bad experience for users.”

‘Zero-Click Sharing’
While Pelly said card emulation is the most popular topic in Google’s Android developer groups, it’s obvious he prefers the cleaner standards and less fragmentation expected for tag-reading and P2P applications.

Among those he and Hamilton demonstrated yesterday were enabling users to share apps, play games and transfer YouTube videos just by tapping their devices together. In one demo, they showed a tablet computer running Android and specially “hacked” to support NFC that could beginning playing a YouTube video transferred from a Nexus S phone. In the demo, the developers synced the video from the phone to the tablet with a simple tap, and the video starting running on the tablet at the exact point it was rolling on the Nexus S.

Pelly said Google would also support this kind of “zero-click sharing” in Ice Cream Sandwich, its planned successor to the Android-Gingerbread operating system.

'Dozens of Phones in the Pipeline'
The first question from developers during the Q&A session following the presentation did not concern APIs or secure elements, but the availability of Android NFC phones.

“We do know personally of dozens of phones in the pipeline for 2011 that are going to have NFC, so don’t worry, they will come, as well,” said Pelly.

That may be an exaggeration, however, since aside from the Nexus S, which hit the market last December, only one Android NFC phone model has been announced to date, the Galaxy S II from Samsung.

Other Android models are expected this year, including one or more each from LG Electronics, HTC and perhaps ZTE. Samsung is also expected to introduce more NFC phones. But most of the new Android NFC models are expected in the third and fourth quarters.

Operators in France and Taiwan told NFC Times in recent weeks that they expected only about 10 NFC models by the end of the year, not all of them Android phones.

NXP Semiconductors, the main NFC chip supplier to Android handset makers, estimates it had 40 NFC phones in the pipeline that would come to market over the next several months, according to internal estimates, NFC Times has learned. But not all of these will be Android smartphones.

Update: It remains to be seen when the Android phones will support card emulation, but with rollouts planned this year by telcos and banks that feature NFC-based payment, they will need to access the secure elements in the phones soon. 

“Google is caught in a dilemma, in that it is trying to drive new products and services using NFC technology, but as the implementation of the technology is not mature, the customer experience cannot be guaranteed at this stage,” said Tim Jefferson head of UK-based mobile consulting firm, The Human Chain. He agrees that NFC's tag-reading and P2P modes can offer compelling apps, but adds: “What is really critical for mass take-up of NFC payment in mobile handsets is that the suitable developers for payment products and services gain access to the API's for card emulation.” End update.

HEADLINE NEWS

Apple Enables Virtual SmarTrip Fare Card for Apple Pay in Washington, D.C., with More Closed-Loop Transit Cards Expected This Year in U.S.

NFC TIMES Exclusive Insight – Apple added support for its latest closed-loop transit card for Apple Pay, enabling customers of the Washington Metropolitan Area Transit Authority, or WMATA, to tap their NFC-enabled iPhones and Apple Watches to pay for rides with WMATA’s SmarTrip virtual card.

Insight: Apple’s Long Game Pays Off, Conquering Resistance to Apple Pay from Banks in Europe and Beyond

NFC TIMES Exclusive Insight – It’s coming up on six years since Apple announced its groundbreaking digital-payments service, Apple Pay. And while consumer adoption remains a work in progress, Apple has had considerable success gaining participation from banks and other issuers in what is now more than 50 countries worldwide.

Transit Agency in Canada Plans to Launch Mobile Ticketing, Citing Covid Fears

NFC TIMES Exclusive Insight – Another transit agency in Canada has announced it will enable mobile ticketing, along with reloadable contactless cards, citing in part the Covid-19 pandemic and the desire to reduce the use of cash, vending machines and customer interaction with agency staff.

Biggest U.S. Supermarket Chain Trials Contactless as Covid-19 Fears Increase Demand for ‘No-Touch Payments’

NFC TIMES Exclusive Insight – The announcement by The Kroger Co., the largest supermarket chain in the U.S., that it has begun trialing contactless payments in a subsidiary indicates that one of the last major holdouts among big U.S. merchants will eventually accept such NFC payments services as Apple Pay and Google Pay, as well as contactless bank cards.

Southern California Transit Agency to Sell Tickets Via Google Maps and Google Pay; Others Expected to Follow

NFC TIMES Exclusive Insight – There’s more evidence that popular trip-planning apps Transit, Moovit and Google Maps are seeking to expand further into mobile ticketin

Insight: Apple Buys Mobile-POS Firm as It Seeks to Expand Acceptance of Contactless Payments

NFC TIMES Exclusive Insight – In a move seeking to expand the base of merchants that can accept its payments service, Apple Pay, Apple has reportedly acquired Montreal, Canada-based mobile POS company Mobeewave, which could enable small shop owners, restaurants and street vendors, among others, to more easily accept contactless EMV cards and NFC mobile wallets.

Exclusive: Google Tests Mobile Ticketing Initiated in Maps App; Could Lead to Mobility-as-a-Service Offer?

Jul 23 2020

NFC TIMES Exclusive – Three small public transit agencies in the U.S. are quietly testing use of Google Maps and Google Pay to enable customers to first plan then pay for tickets. It’s believed to be the first pilots of its kind for Google, a move that could mean the search giant plans to compete with such popular trip-planning apps as Transit and Moovit, which are starting to enable public transit ticketing and payments, NFC Times reports.

Los Angeles Transit Authority to Support Closed-Loop TAP Card in Both Apple Pay and Google Pay

Jul 17 2020

NFC TIMES Exclusive Insight – The Los Angeles County Metropolitan Transportation Authority, or Metro, plans to introduce an Android version of its TAP closed-loop fare card, with a virtual TAP card for the Google Pay wallet, a Metro spokesman confirmed to NFC Times.

Uber Expands Mobile Ticketing to More U.S. Public Transit Agencies

NFC TIMES Exclusive – As expected, Uber today has expanded support for public transit ticketing in its app again, this time to a consortium of 13 small and mid-tier transit agencies in Ohio and Northern Kentucky–following two other U.S. transit agencies, in Denver and Las Vegas, which have already integrated with Uber–it was announced today. NFC Times had reported the planned move in late May. 

Open-Loop Fare Payments Rollouts Continue Post-Lockdowns, with Italy’s Fourth Largest City Latest to Launch Service

NFC TIMES Exclusive Insight – Another of Italy’s major cities has launched open-loop fare collection, with Turin enabling customers to pay for rides on its one-line metro and certain bus routes by tapping their contactless EMV credit and debit cards, along with smartphones and smartwatches supporting NFC payments services.

Calgary Transit Launches Mobile-Ticketing Service with Plans to Expand to Open Loop

NFC TIMES Exclusive Insight – Canada’s third largest city, Calgary, has introduced its first electronic fare payments service, offering mobile ticketing from a software-as-a-service platform provider, with plans to enable customers to pay for fares with their contactless EMV credit and debit cards and NFC wallets.

As E-Commerce Surges, Major U.S. Payments Networks Announce Plans to Expand Click to Pay Globally

NFC Times Exclusive Insight – As e-commerce continues to grow in importance as Covid-19 lockdowns ease, four major U.S. payments networks announced today they are laying the groundwork to expand their uniform e-commerce checkout platform internationally.