Mobile Payment: The next step of secure payment VDI / VDE-Colloquium. Hans-Jörg Frey Senior Product Manager May 16th, 2013

Transcription

1 Mobile Payment: The next step of secure payment VDI / VDE-Colloquium May 16th, 2013

2 G&D has been growing through continuous innovation Server software and services Token and embedded security Cards for payment and telecommunications Government solutions Banknote processing Banknote and security paper Banknote and security printing Global leader in secure solutions Giesecke & Devrient 2

3 Business Units and Divisions Banknote Mobile Security Government Solutions Paper For banknotes Security paper/foils Plant engineering Printing Banknotes Printing plant services Secure Devices Cards, tokens, and embedded software Personalization and data management Server Software and Services Over-the-air management Trusted service management Security solutions for governments and their agencies ID documents Passports Healthcare cards Security printing Product and brand protection IT security Processing Banknote processing systems and identification modules Security features and sensor technology Services and technical support Applications Electronic payment transactions Secure mobile communications Ticketing and transit Authentication Giesecke & Devrient 3

4 Agenda 1. Mobile Payment from an End User Perspective 2. Proven Security in the Payment Card World 3. Transferring Security Mechanisms to the Mobile World 4. Worldwide Roll-out of Mobile Payment Giesecke & Devrient 4

5 1. From Banknotes to Mobile Payment Banknotes Since the 16th century Payment cards Since the 1980s Mobile I do not understand the processes in the background but I trust it. I believe everything works correctly and is secure. I pay only the amount which I know. Coming soon.. Giesecke & Devrient 5

6 1. Feedback has been extremely positive Just bought a milkshake with my phone. The future! Very excited made two mobile payments, one at McDs with Samsung Visa Galaxy S3 It s faster than chip-and-pin and gives users a greater ability to see what they re spending and how much money they ve got left Giesecke & Devrient 6

7 1. Motivation of End Users for Mobile Payment USER CONVENIENCE real-time account information fast payment access control Point of Sales Retail, merchant Giesecke & Devrient 7

8 2. Proven Security in the Payment Card World Giesecke & Devrient 8

9 2. Security Mechanisms Established in the Payment Card World Processing of payment transaction Processing of payment transaction Payment with debit- and credit cards is based on a secure eco-system All components are intensively tested (functionality & security) before receiving an approval Giesecke & Devrient 9

10 2. Authorization of a Payment Card Transaction Cardholder uses card at merchant authorisation is requested Merchant s bank asks card scheme to determine cardholder s bank Card scheme determines cardholder s bank and requests approval for purchase ACQUIRER ISSUER MERCHANT 7 6 PAYMENT SCHEME 5 4 Cardholder completes purchase and receives receipt Merchant s bank sends approval to merchant Card scheme sends approval to merchant s bank Cardholder s bank approves purchase Giesecke & Devrient 10

11 2. EMV Features - Reliable Cardholder Verification Methods Magstripe Technology Card verification code Visual code e.g. hologram EMV Chip Technology Card Authentication Method Encrypted messages and certificates Online method Offline authentication with Static or Dynamic authentication Giesecke & Devrient 11

12 2. Build Trust With a Certification Scheme Certification Body Requirements & Approval Consumers User Build trust with a certification scheme Tests & Reports Independent Third parties Example: Certification and approval of Debit- and Credit-cards Production & Delivery Vendors Giesecke & Devrient 12

13 2. Payment Schemes and their Major Global Product Brands Payment Schemes and their Major Global Product Brands MasterCard Visa Credit Debit ATM Contactless paywave Giesecke & Devrient 13

14 3. Transferring Security Mechanisms to the Mobile World Giesecke & Devrient 14

15 New innovative Payments: Contactless Payment NFC Near Field Communication Use of mobile phones for payments in retail, vending machines, and in the transport Attended POS Unattended, vending machines Giesecke & Devrient 15

16 3. What are the Components of the NFC Eco-System? What is a Contactless Frontend? NFC chip What is a Secure Element? (inclusive Applets) SE What is a Wallet-Applications? Wallet What is a Trusted Service Managers? TSM Giesecke & Devrient 16

17 3. What is NFC Technology? NFC is a contactless technology Contactless card mode ISO NFC air interface ISO Compatible to contactless magstripe and EMV equipped cards / terminals Standardized, convenient, easy to use Contactless antenna NFC chip (CLF - Contactless Frontend) NFC is deployed in mobile devices NFC is the gateway to multiple applications, e.g. payment, ticketing, loyalty, RFID SE - Secure Element (e.g. SIM, Embedded SE) NFC requires a Secure Element (SE) as processor and storage for securityrelevant applications, eg. payment Giesecke & Devrient 17

18 3. Basic Functions of a Wallet Visualize Payment Card(s) Show issuer pictures and scheme name Conduct contactless transactions Payment: Single Tap versus Double Tap Ensure security PIN Code Card Activation / Deactivation Manage Preferences Set Default cards Secure Element Service Provider Applet Service Provider Applet NFC Chip Mobile handset WALLET User Interface Antenna Giesecke & Devrient 18

19 3. NFC Ecosystem: Service Provider and SE Issuer (SEI) Request for Applet personalization TSM setup Applet Personalization Submit Applet Bureau SP-TSM Consumer: NFC device Secure Element Applet Applet Applet Supplier Supplier Supplier Right of use of Applet Service Provider MNOs Registration for NFC service Submit Applet SEI-TSM Applet download Giesecke & Devrient 19

20 4. Worldwide Roll-out of Mobile Payment Giesecke & Devrient 20

21 4. Examples of G&D NFC projects Giesecke & Devrient 21

22 4. Commonwealth Bank of Australia (CBA) Customer Commonwealth Bank of Australia Country Australia Product NFC Payment (PayPass M/Chip); icarte 420 for iphone 4/4S Volume Commercial Rollout Launch date December 2011 Role of G&D TSM services for full life-cycle management, online data generation, distribution of icarte, payment application provider Description First in the world commercial mobile payment project using icarte with one of the world s leading banks. Full mobile payment and banking services available on iphone. Giesecke & Devrient 22

23 4. G&D Ensures Security of O2 Wallet Payments in Germany Customer Country Telefónica Germany Germany Product Launch date February 2013 TSM (Trusted Service Manager) service, NFC SIM cards, MasterCard payment applet Role of G&D Description G&D s TSM service forms the basis for secure payments. Users personal payment-card details are securely transferred to a specially protected area on the NFC SIM card. Telefónica became the first network operator in Germany to launch a wallet service. With the wallet, O2 customers are able to use their NFC-enabled smartphones to make contactless payments in all participating shops around the world. Giesecke & Devrient 23

24 Summary Giesecke & Devrient 24

25 Summary: Mobile Payment with NFC Technology fast payment, added value, e.g. simple handling of bonus systems NFC - system components NFC Contactless Frontend SE: Secure Element Wallet: User Interface TSM: Trusted Service Manager Summary: Mobile Payment based on NFC technology is not a new system It s a further development of an worldwide existing payment system Giesecke & Devrient 25

26 Mobile Payment is coming. Questions? Giesecke & Devrient 26