Page 8 - GS190201

ReadersSpeak

A word from EMVCo utilize a layered security approach incorporating various
device and software components to help with combating
e heard from EMVCo, the global technical the potential threats.
body that facilitates worldwide interoper-
ability and acceptance of secure payment "EMVCo recognized an opportunity to develop a common
W transactions by managing and evolving the approach to evaluating the security of SBMP solutions, con-
EMV Specifications and related testing processes. solidating existing processes and industry best-practices.
The SBMP Security Evaluation Process therefore introduces

The organization wished to augment information in a 'component' and 'integration' evaluation model. This al-
"Software-based mobile payments join EMV family," which lows components to be evaluated either independently or
The Green Sheet published under Breaking Industry News together to validate the security of the overall solution. In-
on Jan. 14, 2019. dividual component evaluation modules include:
• Trusted Execution Environment (TEE)
"EMVCo has established a Security Evaluation Process [www. • Consumer Device Cardholder Verification Method
emvco.com/processes-forms/product-approval/mobile/sbmp/] (CDCVM)
for software-based mobile payments (SBMP) to provide
an efficient, flexible offering for product providers and "EMVCo has also developed programme documents to de-
promote a robust security foundation for SBMP solutions," scribe the security requirements, evaluation process and
EMVCo stated. "There are an increasing number of solutions methodology." Additionally, the organization noted that
being deployed that use software applications to store and EMV is a registered trademark in the United States and
perform payment transactions on mobile devices," EMVCo certain other countries, and is owned by EMVCo LLC. EM-
continued. "As SBMP applications must operate in the more VCo invited those who wish to stay informed, as well as
vulnerable consumer device environment, solutions often receive advanced access to EMV Specifications and related
documents, to join its Asso-
ciates Programme at www.
emvco.com/get-involved/ways-
to-participate/ or subscribe at
/USAePay
/USAePay www.emvco.com/get-involved/
subscribers/.
What about you?
SMARTER SOLUTIONS Can you contribute further
FOR SECURE PAYMENTS insights to our recent
coverage? We're open to
feedback on all sections
from news to views to
Ecommerce
educational articles and
Retail profiles. Get in touch at
greensheet@greensheet.com.
And don't forget to send
WELCOME
press releases to press@
Mobile greensheet.com. They're the
first place we look for items
for Industry Update.
www.USAePay.com 866.490.0042