The Green Sheet Online Edition
February 11, 2019 • Issue 19:02:01
A word from EMVCo
We heard from EMVCo, the global technical body that facilitates worldwide interoperability and acceptance of secure payment transactions by managing and evolving the EMV Specifications and related testing processes.
The organization wished to augment information in "Software-based mobile payments join EMV family," which The Green Sheet published under Breaking Industry News on Jan. 14, 2019.
"EMVCo has established a Security Evaluation Process [www.emvco.com/processes-forms/product-approval/mobile/sbmp/] for software-based mobile payments (SBMP) to provide an efficient, flexible offering for product providers and promote a robust security foundation for SBMP solutions," EMVCo stated.
"There are an increasing number of solutions being deployed that use software applications to store and perform payment transactions on mobile devices," EMVCo continued. "As SBMP applications must operate in the more vulnerable consumer device environment, solutions often utilize a layered security approach incorporating various device and software components to help with combating the potential threats.
"EMVCo recognized an opportunity to develop a common approach to evaluating the security of SBMP solutions, consolidating existing processes and industry best-practices. The SBMP Security Evaluation Process therefore introduces a 'component' and 'integration' evaluation model. This allows components to be evaluated either independently or together to validate the security of the overall solution. Individual component evaluation modules include:
- Trusted Execution Environment (TEE)
- Consumer Device Cardholder Verification Method (CDCVM)
"EMVCo has also developed programme documents to describe the security requirements, evaluation process and methodology." Additionally, the organization noted that EMV is a registered trademark in the United States and certain other countries, and is owned by EMVCo LLC. EMVCo invited those who wish to stay informed, as well as receive advanced access to EMV Specifications and related documents, to join its Associates Programme at www.emvco.com/get-involved/ways-to-participate/ or subscribe at www.emvco.com/get-involved/subscribers/.
What about you?
Can you contribute further insights to our recent coverage? We're open to feedback on all sections from news to views to educational articles and profiles. Get in touch at email@example.com. And don't forget to send press releases to firstname.lastname@example.org. They're the first place we look for items for Industry Update.
Notice to readers: These are archived articles. Contact names or information may be out of date. We regret any inconvenience.