Archive for the ‘EMV Certification and Approvals’ Category

Increasing usage of EMV technology worldwide with 1.2 billion EMV cards in circulation & 18.7 million terminals based on the standard

May 25, 2011 at 12:47 pm

EMVCo, the EMV® standards body has released the latest EMV deployment figures which state that 40 percent of total payment cards and 71 percent of terminals worldwide are based on the EMV standard. The official EMV figures, which represent the latest statistics from American Express, JCB, MasterCard and Visa as reported by their member financial […]

Is the Chip and PIN Card Verification System Really Broken?

March 14, 2011 at 5:33 pm

In an address to the CanSecWest security conference this week, Inverse Path, a security research company claimed that “Chip and PIN is definitely broken”. This followed-up on concerns previously raised by Cambridge University that the international EMV standards that govern credit and debit chip card payments are flawed, which we commented on in this blog […]

Contactless card payment specifications

January 31, 2011 at 11:31 am

EMV has become firmly established as the global standard for processing transactions using Chip and PIN cards, and the specifications are managed by EMVCo (which is owned by Visa, MasterCard, JCB and American Express). However, with Contactless payment cards there has never been a universal standard – instead the card schemes have chosen to define […]

EMV 4.2c Updates

November 4, 2010 at 10:57 am

From November 1st 2010, the new EMVCo 4.2c test cases have come into effect. These contain new and updated tests for all the EMV specification changes that have been introduced by EMVCo bulletins over the past year, covering the following topics: EMVCo Specification Bulletin 75 This bulletin clarifies how the terminal should populate the Application […]

EMV becoming global payment standard

October 18, 2010 at 9:47 am

EMVCo have released an interesting press release that details the number of EMV cards and terminals, and the extent of EMV migration, in each geographic region of the world. According to their figures there are now more than 1 billion EMV cards in circulation worldwide and almost two-thirds of all terminals outside the United States […]

Multi-configuration EMV approvals

August 11, 2010 at 10:55 am

One of the primary advantages of using EMV is that it is a global industry specification, backed by Visa, MasterCard, American Express and JCB, and has been adopted for chip card deployments throughout the world. However, the EMV specifications allow a high degree of flexibility – in terms of both card and terminal functionality – […]

EMV Specification Bulletins – why you need to keep up-to-date with EMV Specs

May 13, 2010 at 3:12 pm

The EMV specifications, which cover all aspects of processing EMV “Chip and PIN” payments are freely available to download from the EMVCo website. However, EMVCo frequently issue specification bulletins that modify or clarify these requirements, but the published versions of the EMV specification is only updated every few years to include these updates. Some of […]

EMVCo’s reply to vulnerability concerns

April 14, 2010 at 5:36 pm

EMVCo has taken the highly unusual step of publishing a formal response to a recent Cambridge University report claiming that ‘Chip and PIN is broken’, but unsurprisingly have played down the impact of this potential flaw. The specific case highlighted by the report was restricted to stolen cards. Once a card issuer is informed of […]

EMVCo’s change of O/S process

March 23, 2010 at 1:34 pm

Over the years, EMVCo has developed a process for the management of multiple operating systems (O/S), which allows an EMV Level 2 Kernel to be approved for use with multiple different O/S provided the change of O/S does not require re-compilation of the Kernel. This process requires that the EMV Kernel is submitted for certification […]

EmvJ – EMV Level 2 Kernel for Java

March 2, 2010 at 10:24 am

Traditionally, most card payment terminals have used purpose-built hardware and software, running an embedded operating system for reasons of cost and performance. Over the years however the market has gradually evolved and many payment terminals now use general purpose platforms that support Java. When developing EmvJ – the platform-independent EMV Level 2 Kernel that runs […]