Visa and MasterCard: HCE Can be as Secure as Secure Elements

NFC Times Exclusive: While continuing to support their applications on secure elements in NFC phones, Visa and MasterCard Worldwide confirmed their firm support for host-card emulation the past week, as they continue to fast-track new HCE specifications to the market.

Representatives from the two largest global payment networks, in interviews at the Mobile World Congress in Barcelona with NFC Times, contend that banks or other issuers rolling out Visa payWave or MasterCard PayPass using HCE could expect as much security as if they used NFC SIM cards or other secure elements–as long as the banks followed the specifications the payment schemes have introduced or are drafting. 

That includes using tokens on the phones in place of card credentials as part of “multiple layers” of security for the cloud-based applications. 

Some banks, particularly in Europe, along with, predictably, suppliers of secure elements and TSMs, and some other industry experts, question whether HCE implementations could reach the level of security of NFC SIMs and other smart card technology, which has been honed for nearly 20 years for open-loop payments. They also cast doubt on the maturity of HCE. 

But what is becoming increasingly clear is that the major established payment networks, facing threats to their business from over-the-top players–and growing pressure from many of their own banking customers to provide mass-market mobile-payment products–are embracing HCE as a viable option. 

Words:

2,500 

Among Topics Covered:

  • More details on host-card emulation specifications coming from Visa and MasterCard
  • Views of Visa and MasterCard on security of HCE compared with secure elements.
  • Tokenization as key part of the payment schemes’ plans for HCE
  • Options for loading tokens on NFC SIMs
  • New details about deal between MasterCard and Weve
  • Security questions remain regarding HCE
  • Range of options for NFC rollouts

Sources Quoted:

James Anderson, group head, emerging payments, MasterCard
Sam Shrauger, SVP, digital, developed markets, Visa
Brad Greene, VP, mobile products, Visa
Jorn Lambert, group executive, digital convergence, MasterCard
Linda Mantia, EVP, cards and payments solutions, Royal Bank of Canada
David Sear, CEO, Weve
Brian Byrne, director of operations, EMVCo
Michael Gargiulo, consultant, TNG Technologies
Jordi Guaus, head of mobile payments, CaixaBank. 

Among companies and organizations mentioned:

Visa
MasterCard Worldwide
Royal Bank of Canada, RBC
Weve
EMVCo
Bankinter
CaixaBank

This is premium content from NFC Times.

Read Full Article 

© NFC Times and Forthwrite Media. NFC Times content is for individual use and cannot be copied or distributed without the express permission of the publisher.

HEADLINE NEWS

Post-Lockdown, Transit Riders Want Agencies to Run Vehicles More Frequently, Provide Real-Time Arrival Information and Offer Contactless and Mobile Payments

NFC TIMES Exclusive Insight - Up to a third of transit riders in several cities say contactless payments and mobile ticketing would encourage them to return t

New York’s OMNY Project Completes Major Milestone, as Transit Officials Point to Steady Growth in Adoption

NFC TIMES Exclusive Insight – New York’s Metropolitan Transportation Authority says it is seeing steady growth in use of its OMNY open-loop fare payments system by customers–though overall open-loop payments remain small–as the agency continues its phased rollout of acceptance of contactless EMV bank cards and NFC Pays wallets. 

In-Depth: Trip-Planning Giant Moovit Begins to Enable Ticketing and Payments, as Rivals Make Similar Moves

NFC TIMES Exclusive Insight – Moovit, which bills itself as the world's largest “urban mobility app,” has begun to enable public transit ticketing and payments from its platform, as it seeks to deliver what it says is a true mobility-as-a-service experience for users.

Los Angeles Transit Authority Follows Through with Plans to Enable TAP Card for Apple Pay; Google Pay to Follow

NFC TIMES Exclusive Insight – Another major U.S. transit agency has introduced a virtual closed-loop card for Apple Pay this week, with the Los Angeles County Metropolitan Transportation Authority, or Metro, announcing the move Thursday. It comes a couple of days after the Washington (D.C.) Metropolitan Area Transit Authority, or WMATA, announced it had put its SmarTrip closed-loop card on Apple’s NFC-enabled devices, as well.

Apple Enables Virtual SmarTrip Fare Card for Apple Pay in Washington, D.C., with More Closed-Loop Transit Cards Expected This Year in U.S.

NFC TIMES Exclusive Insight – Apple added support for its latest closed-loop transit card for Apple Pay, enabling customers of the Washington Metropolitan Area Transit Authority, or WMATA, to tap their NFC-enabled iPhones and Apple Watches to pay for rides with WMATA’s SmarTrip virtual card.

Insight: Apple’s Long Game Pays Off, Conquering Resistance to Apple Pay from Banks in Europe and Beyond

NFC TIMES Exclusive Insight – It’s coming up on six years since Apple announced its groundbreaking digital-payments service, Apple Pay. And while consumer adoption remains a work in progress, Apple has had considerable success gaining participation from banks and other issuers in what is now more than 50 countries worldwide.

Transit Agency in Canada Plans to Launch Mobile Ticketing, Citing Covid Fears

NFC TIMES Exclusive Insight – Another transit agency in Canada has announced it will enable mobile ticketing, along with reloadable contactless cards, citing in part the Covid-19 pandemic and the desire to reduce the use of cash, vending machines and customer interaction with agency staff.

Biggest U.S. Supermarket Chain Trials Contactless as Covid-19 Fears Increase Demand for ‘No-Touch Payments’

NFC TIMES Exclusive Insight – The announcement by The Kroger Co., the largest supermarket chain in the U.S., that it has begun trialing contactless payments in a subsidiary indicates that one of the last major holdouts among big U.S. merchants will eventually accept such NFC payments services as Apple Pay and Google Pay, as well as contactless bank cards.

Southern California Transit Agency to Sell Tickets Via Google Maps and Google Pay; Others Expected to Follow

NFC TIMES Exclusive Insight – There’s more evidence that popular trip-planning apps Transit, Moovit and Google Maps are seeking to expand further into mobile ticketin

Insight: Apple Buys Mobile-POS Firm as It Seeks to Expand Acceptance of Contactless Payments

NFC TIMES Exclusive Insight – In a move seeking to expand the base of merchants that can accept its payments service, Apple Pay, Apple has reportedly acquired Montreal, Canada-based mobile POS company Mobeewave, which could enable small shop owners, restaurants and street vendors, among others, to more easily accept contactless EMV cards and NFC mobile wallets.

Exclusive: Google Tests Mobile Ticketing Initiated in Maps App; Could Lead to Mobility-as-a-Service Offer?

Jul 23 2020

NFC TIMES Exclusive – Three small public transit agencies in the U.S. are quietly testing use of Google Maps and Google Pay to enable customers to first plan then pay for tickets. It’s believed to be the first pilots of its kind for Google, a move that could mean the search giant plans to compete with such popular trip-planning apps as Transit and Moovit, which are starting to enable public transit ticketing and payments, NFC Times reports.

Los Angeles Transit Authority to Support Closed-Loop TAP Card in Both Apple Pay and Google Pay

Jul 17 2020

NFC TIMES Exclusive Insight – The Los Angeles County Metropolitan Transportation Authority, or Metro, plans to introduce an Android version of its TAP closed-loop fare card, with a virtual TAP card for the Google Pay wallet, a Metro spokesman confirmed to NFC Times.