Visa and MasterCard: HCE Can be as Secure as Secure Elements

NFC Times Exclusive: While continuing to support their applications on secure elements in NFC phones, Visa and MasterCard Worldwide confirmed their firm support for host-card emulation the past week, as they continue to fast-track new HCE specifications to the market.

Representatives from the two largest global payment networks, in interviews at the Mobile World Congress in Barcelona with NFC Times, contend that banks or other issuers rolling out Visa payWave or MasterCard PayPass using HCE could expect as much security as if they used NFC SIM cards or other secure elements–as long as the banks followed the specifications the payment schemes have introduced or are drafting. 

That includes using tokens on the phones in place of card credentials as part of “multiple layers” of security for the cloud-based applications. 

Some banks, particularly in Europe, along with, predictably, suppliers of secure elements and TSMs, and some other industry experts, question whether HCE implementations could reach the level of security of NFC SIMs and other smart card technology, which has been honed for nearly 20 years for open-loop payments. They also cast doubt on the maturity of HCE. 

But what is becoming increasingly clear is that the major established payment networks, facing threats to their business from over-the-top players–and growing pressure from many of their own banking customers to provide mass-market mobile-payment products–are embracing HCE as a viable option. 

Words:

2,500 

Among Topics Covered:

  • More details on host-card emulation specifications coming from Visa and MasterCard
  • Views of Visa and MasterCard on security of HCE compared with secure elements.
  • Tokenization as key part of the payment schemes’ plans for HCE
  • Options for loading tokens on NFC SIMs
  • New details about deal between MasterCard and Weve
  • Security questions remain regarding HCE
  • Range of options for NFC rollouts

Sources Quoted:

James Anderson, group head, emerging payments, MasterCard
Sam Shrauger, SVP, digital, developed markets, Visa
Brad Greene, VP, mobile products, Visa
Jorn Lambert, group executive, digital convergence, MasterCard
Linda Mantia, EVP, cards and payments solutions, Royal Bank of Canada
David Sear, CEO, Weve
Brian Byrne, director of operations, EMVCo
Michael Gargiulo, consultant, TNG Technologies
Jordi Guaus, head of mobile payments, CaixaBank. 

Among companies and organizations mentioned:

Visa
MasterCard Worldwide
Royal Bank of Canada, RBC
Weve
EMVCo
Bankinter
CaixaBank

This is premium content from NFC Times.

Read Full Article 

© NFC Times and Forthwrite Media. NFC Times content is for individual use and cannot be copied or distributed without the express permission of the publisher.

HEADLINE NEWS

Australian Transit Agency to Launch Mobility-as-a-Service Trial as It Pursues Long-Term MaaS Strategy

Plans by Transport for New South Wales, Australia’s largest transit agency, to launch a trial enabling users to plan, book and pay for multimodal rides is the next step toward the agency’s long-ter

Updated: U.S. Transit Agency Seeks to Reduce–Though Not Eliminate–Cash Acceptance with New Fare-Collection System

Updated: The Spokane Transit Authority in Washington state confirmed that its new fare-collection system will include contactless open-loop payments–with a beta test planned for next October, a spokesman told NFC Times' sister publication Mobility Payments.

UK Government Seeks to Bring London-Style Contactless Fare Payments System to Other Regions

The UK government’s plan to equip 700 rail stations over the next three years to accept contactless open-loop payments is a major initiative, as it seeks to replicate the success of London’s contactless pay-as-you go fare payments system elsewhere in the country–a goal that has proved elusive in the past.

More Cities in Finland Expected to Move to Open-Loop Fare Payments

A fourth city in Finland is beginning to roll out contactless open-loop payments, with “more in the pipeline,” according to one supplier on the project, making the Nordic country one of the latest hotspots for the technology.

Moscow Metro Expands Test of ‘Virtual Troika’ in Pays Wallets, as It Continues to Develop Digital-Payments Services

Moscow Metro is recruiting more users to test its “Virtual Troika” card in two NFC wallets, those supporting Google Pay and Samsung Pay, as one of the world’s largest subway operators continues to seek more ways for its customers to pay for rides.

Ohio Transit Agency Expects Significant Revenue Loss as it Builds Equity with Fare Capping

The Central Ohio Transit Authority, or COTA, officially launched its new digital-payments service Monday, including a fare-capping feature that the agency estimates will cost it $1.8 million per year in lost fare revenue, the agency confirmed to Mobility Payments.

Special Report: Interest Grows in ‘White-Label EMV’ for Closed-Loop Transit Cards

As more transit agencies introduce open-loop fare payments, interest is starting to grow in use of white-label EMV cards that agencies can issue in place of proprietary closed-loop cards for riders who don’t have bank cards or don’t want to use them to pay fares.

Swedish Transit Agency Launches Express Mode Feature for Apple Pay, though Most Ticketing Still with Barcode-Based App

Skånetrafiken, the transit agency serving one of Sweden’s largest counties, announced today it has expanded its contactless open-loop payments service to include the Express Mode feature for Apple Pay.

Major Bus Operators in Hong Kong Now Accepting Open-Loop Payments–Adding More Competition for Octopus

Two more bus operators in Hong Kong on Saturday launched acceptance of open-loop contactless fare payments, with both also accepting QR code-based mobile ticketing–as the near ubiquitous closed-loop Octopus card continues to see more competition.

Moscow Metro Launches Full Rollout of ‘Face Pay;’ Largest Biometric Payments Service of Its Kind

Touting it as the largest rollout of biometric payments in the world, Moscow Metro launched its high-profile “Face Pay” service Friday, as expected, and predicted that 10% to 15% would regularly us

Indonesian Capital Seeks to Expand to Multimodal Fare Collection and MaaS

Indonesia’s capital Jakarta, whose metropolitan area is home to more than 30 million people, is notorious for its stifling traffic congestion. In response, the government metro and light-rail networks and now it is funding an expansion of the fare-collection system to enable more multimodal payments and to build a mobility-as-a-service platform.

Exclusive: NFC Wallets Grow as Share of Contactless Fare Payments and Not Only Because of Covid

Transit agencies that have rolled out open-loop contactless payments are seeing growing use of NFC wallets to pay fares, as Covid-wary passengers see convenience in tapping their phones or wearables to pay.