Page 14 - GS161002
P. 14
News
3DS 2.0 adds tools, nology was originally introduced as Verified by Visa to
expands framework protect and enhance the online shopping experience.
A n updated version of EMV 3-D Secure will The technology has subsequently been adapted by EMVCo
be available in time for retail's peak season, and major payment card brands (in Mastercard's Secure-
EMVCo and the PCI Security Standards Council Code, AmEx.'s SafeKey and JCB International Credit Co.
reported. The news was welcomed by global Ltd's J/Secure) into a globally accepted security standard.
cybersecurity experts, many of whom are well aware of EMVCo stated that Visa will own and manage its propri-
numerous details and compliance requirements related to etary version of 3DS 1.0, while EMVCo will continue to de-
the launch. 3-D Secure is shorthand for 3 Domain Security velop the EMV 3DS 2.0 standard.
and is commonly abbreviated as 3DS.
Expanded framework, toolkit
EMVCo, a global body owned by American Express Co.,
Discover Financial Services, Mastercard, China UnionPay Interoperability was a consideration in designing addition-
and Visa Inc. that manages the EMV (Europay, Mastercard al tools and application programming interfaces to enable
and Visa) technology protocol, disclosed in January 2015 software developers to incorporate 3DS 2.0 into products
that it would launch 3DS 2.0 in 2016. The EMV 3-D Secure and services. Jonathan Main, EMVCo Board of Managers
– Protocol and Core Functions Specification v2.0 (EMV 3DS Chair, who represents Mastercard, expects the "toolbox"
2.0 Specification) will improve security and global interop- to significantly enhance global interoperability across nu-
erability while providing a consistent consumer experience merous ecommerce platforms while facilitating a unified
across e-commerce channels, connected devices and in-app international payments framework. "We recognize that
purchases, EMVCo stated. this [effort] requires a number of industry stakeholders to
work together to establish a secure framework, and we are
The PCI SSC, which manages the Payment Card Industry delighted to be collaborating with PCI Security Standards
Data Security Standard, will work with EMVCo to provide Council to facilitate this process," he said.
security requirements, testing procedures, assessor train-
ing and reporting templates, making these resources avail- Additionally, the partners noted that EMV 3DS 2.0:
able in 2017, council representatives stated.
• Facilitates app-based payments on mobile, connect-
Unified, international standard ed devices
3DS is designed to authenticate payment card transactions • Minimizes keystrokes to improve the consumer ex-
that originate online. The messaging protocol creates an perience
additional layer of security to protect the three banks or
"domains" of an ecommerce transaction, the issuing bank, • Uses advanced recognition and knowledge-based
acquiring bank and cardholder bank, through multifactor authentication capabilities
password or one-time password authentication. The tech-
• Gives end-users the option of incorporating their
Let us own authentication solutions
help you • Enables merchants to integrate the authentication
increase your process into application- and browser-based check-
bottom line out
today!
• Improves end-to-end message processing
• Provides improved authentication
Flexible, adaptable framework
EMVCo and PCI SSC leaders expect 3DS 2.0 to continue its
evolution in response to the ever-changing threat landscape,
regulatory environments and payment security initiatives.
The partners affirmed their commitment to creating a
flexible, adaptable framework designed to support a range
of online and mobile payment schemes and emerging
payment technologies.
Customized advertising Making tool kits widely available will reinforce interoper-
ability across multiple markets while supporting new ap-
company and budget. plication development and payments innovation, EMVCo
stated. Troy Leach, Chief Technology Officer at the PCI SSC
added, "[W]ith mobile payments projected to continue to
rise, it is vitally important that the security concerns be ad-
dressed in the design of the authentication system to keep
up with the evolving threats."
14 *Print ( various sizes)
*Online
