Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar :...
Transcript of Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar :...
![Page 1: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/1.jpg)
1UL and the UL logo are trademarks of UL LLC © 2015
Making Cloud-Based Payments a reality
Arman AygenRegional Sales Manager
30 September 2015
![Page 2: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/2.jpg)
2
Agenda
Mobile Payment StrategyScope and DevelopmentTesting and CertificationSecurity and Risk Assessment About UL
Current landscapeVision Strategy
![Page 3: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/3.jpg)
3
![Page 4: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/4.jpg)
5
Car
d P
rese
nt
Car
d N
ot
Pre
sent
Non
-Car
d P
aym
ents
Tokenization is necessary but not sufficient
Go Digital
![Page 5: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/5.jpg)
6
Current landscape
Proximity paymentsPOS – mPOSFragmented Mobile ecosystem Remote payments Peer to peerValue added services
![Page 6: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/6.jpg)
7
Assessing the impact
• Provisioning / Card profile
• Card Management System
• Authorization host
• UI / app / wallet
• Customer care / support etc.
![Page 7: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/7.jpg)
8
![Page 8: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/8.jpg)
9
Agenda
Mobile Payment StrategyScope and DevelopmentTesting and CertificationSecurity and Risk AssessmentAbout UL
Design & specificationsVendor vs In-houseDevelopment
![Page 9: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/9.jpg)
10
What is ‘cloud-based mobile payments’?
SE in the phoneReceives a secret onceand keeps the secret safe for 3 years!
10010101011001110010010110011100101
SE in the cloudGenerates a secret prior to every transaction & uploads it to the phone
Different concept…
..same user experience
‘Tap and Go’: same user experience for cloud and non-cloud based NFC payments
![Page 10: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/10.jpg)
11
Strategic choices
Backend integration•The issuer should integrate their backend to the xDES•Real time data handling and responses
Enrollment and Card provisioning•All processes and action for pre-digitization•Build internal support for pre-digitization and activation
Payment Transactions•Business as usual, receiving original PAN•Authorize transactions without crypto validation
Key decisions before implementating a mobile solution
![Page 11: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/11.jpg)
12The battle between Legacy & Innovation is also being fought “under the water”
Infrastructure Space
Core banking sys.
MDES / VTS
Tokenization
APIs
Biometrics
HCE
Device fingerprint
White-box crypto
Product SpaceApple Pay
Google Hands Free
Android Pay
![Page 12: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/12.jpg)
13
Agenda
Mobile Payment StrategyScope and DevelopmentTesting and CertificationSecurity and Risk Assessment About UL
![Page 13: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/13.jpg)
14
Testing each components in the product System under test
Payment Network
Aquirer
Cloud Based System Issuer
Internet
Merchant POS
Mobile Device
Issuance
Transaction
Cloud-based solution
HCE MPA
• MPA • Cloud based system
• Issuer (Card management system)• Issuer (Authorization system)• Issuer (Card profile)
Systems Under Test
![Page 14: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/14.jpg)
15
Ensuring interoperability on different levels
Objective 3• Ensure all functionalities of the
different mobile payment solution works correctly within one handset
![Page 15: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/15.jpg)
16
Agenda
Mobile Payment StrategyScope and DevelopmentTesting and CertificationSecurity and Risk AssessmentHow can UL help?
![Page 16: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/16.jpg)
17
PublicNetwork
Cloud Platform
Issuer Processing
Host S
ystem
Personalization backend
Application
Refreshment / Updatebackend
Mobile App Assets
CLF
Routingtable
SE
UI
Secure
OS
Rich OS
Application
HCECloud Assets
Cloud-based Payments.Security Evaluation – System Under Test.
Required bySchemes
Don’t forget the cloud
Provisioning, Account management. Life Cycle management
End User perspective
attacks
O.S. Attacks
U.I. Attacks
Pen -Testing
17
![Page 17: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/17.jpg)
18
Listen to your customers...
![Page 18: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/18.jpg)
19
Ensuring payment securityis one of highest priorities and security
in cloud-based payments is no exception
Since 2014, UL is a Visa, MasterCard and AmericanExpressCloud-based Mobile Payment Security Evaluation Laboratory
![Page 19: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/19.jpg)
20
Agenda
Mobile Payment StrategyScope and DevelopmentTesting and CertificationSecurity and Risk AssessmentAbout UL
![Page 20: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/20.jpg)
21
Safeguarding Security, Compliance and Global Interoperability
21
![Page 21: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/21.jpg)
22
![Page 22: Making Cloud-Based Payments a reality - CEESCA - Mobile payme… · UL – Innovation Seminar : Payment industry vs Silicon Valley. SF – Sept 9th 2015 Singapore – Sept 18th 2015.](https://reader033.fdocuments.us/reader033/viewer/2022060222/5f079e7a7e708231d41de350/html5/thumbnails/22.jpg)
23
THANK YOU.UL – Innovation Seminar : Payment industry vs Silicon Valley
SF – Sept 9th 2015 Singapore – Sept 18th 2015Leiden – Sept 25th 2015 Sydney – Sept 15th 2015
UL – Security SeminarShenzhen - Oct 20th, 2015 San Jose - Oct 21st, 2015Atlanta - Oct 23rd, 2015 Leiden - Oct 27th, 2015Dubai - Oct 29th, 2015
UL – Mobile Payment MasterClassLeiden – Sept 21st, 2015 Barcelona – Oct 13th, 2015Zurich – Oct 19th, 2015 Croatia – Nov 10th, 2015Dubai – Nov 17th, 2015 Singapore – Dec 9th, 2015Sao Paulo– Dec 9th, 2015