EMVCo seeks industry input on digital payment credential framework

EMVCo is seeking industry feedback on a proposed framework designed to support interoperable verifiable digital credentials for card-based payment authentication, as the organization explores how digital identity technologies could reshape payment security and authentication processes worldwide.

The Foster City, Calif.-based organization on June 30 released a draft version of its EMV Digital Payment Credential Specification – Schema Framework for public review through July 23. The framework is intended to establish a common structure for Digital Payment Credentials, or DPCs, a type of verifiable digital credential that could eventually support payment authentication across multiple payment networks, wallets and verification systems.

EMVCo said its initial work focuses on defining how credential data is structured and stored within digital payment credentials. Longer term, the organization is also investigating how the technology could support payment initiation capabilities.

Verifiable digital credentials, or VDCs, are increasingly being adopted across digital identity ecosystems as a way to provide secure, privacy-preserving verification of identity and other information. They can represent credentials such as driver’s licenses, identity cards, diplomas or proof-of-age documentation and are typically stored in digital wallets on smartphones.

Preventing fragmentation

EMVCo said one challenge is that VDCs can vary significantly in how data is organized and verified depending on the use case. While that flexibility supports innovation, it also raises the possibility of fragmentation if multiple incompatible approaches emerge for payment authentication. The proposed framework is intended to create a standardized approach for card-based payment use cases.

According to EMVCo, the DPC initiative is designed to support card payment authentication requirements including device binding, cross-domain usage and dynamic linking while enabling consistent credential provisioning and verification processes. The organization said the framework is also intended to support privacy controls.

“Emerging digital identity technologies have the potential to promote more trusted and convenient card-based payments for consumers and businesses, but realising these benefits at scale requires global interoperability,” Patrik Smets, chair of the EMVCo Executive Committee, said in a statement.

EMVCo is the global technical body responsible for creating and managing EMV Specifications used in card-based payments worldwide. Formed in 1999, the organization is collectively owned by American Express, Discover, JCB, Mastercard, UnionPay and Visa and develops technical specifications intended to support secure and interoperable payment systems globally.

The organization said the work is being led by its Digital Identity and Payments Task Force in collaboration with industry groups including the FIDO Alliance, OpenID Foundation, OpenWallet Foundation and the W3C.

Industry stakeholders can review the draft specification and submit comments through EMVCo’s public feedback Industry stakeholders can review the draft specification and submit comments through EMVCo’s public feedback here .

Notice to readers: These are archived articles. Contact information, links and other details may be out of date. We regret any inconvenience.