Metric "Aura" EMV equipped Pay-and-Display machine

Although much of the publicity surrounding EMV “Chip and PIN” migration has related to its use in retail outlets, another market sector that has benefitted from EMV migration is Unattended Payment Terminals (UPT).

Unattended payments, where a customer uses an unsupervised terminal to pay for goods or services such as parking and vending machines or self-service kiosks, have traditionally been processed using cash. Where card payment has been supported this has been achieved by using the data from the magnetic stripe on a customer’s card, with no cardholder verification. This means that such machines are an obvious target for fraudsters trying to use stolen and cloned cards and, as there are no attendants to monitor these environments, it has been extremely difficult to crackdown on this illegal activity. This has therefore limited the growth of unattended card payments.

However, the advent of EMV cards means that secure PIN entry can now be used to verify the cardholder, and advances in communications technology means that it is also possible to quickly and safely authorise transactions with the card issuer even when there is no fixed communications infrastructure on site.

Together, these developments have fuelled a large growth in a number of unattended environments, including car parking, transport ticketing, automated supermarket lanes and other self-service kiosks vending higher value goods, as vendors can now have confidence that every transaction is genuine and they will always receive their payment.

This is just one example of the benefits that EMV migration can bring. The CreditCall EMV Kernels provide a simple but powerful way to add EMV Level 2 capability to payment devices. Check out www.emvx.co.uk for further details of these EMV Level 2 Kernels.

Whenever an EMV transaction is performed, the terminal’s EMV Level 2 Kernel processes the CVM list in order, until it finds a CVM that it supports and can process. In the event that no supported CVM is found or an error occurs during CVM processing (e.g. the PIN-Pad was malfunctioning), the EMV kernel will flag this in the Terminal Verification Results, which may cause the transaction to be declined or sent online for authorisation by the card issuer.

The CVM that EMV currently supports are Online PIN (required in certain countries for all transactions, and also for all ATM cash withdrawals), Offline PIN verified by the chip card (required in certain countries for all payment transactions), signature (for attended payment terminals in some countries), or a combination of both PIN and signature if additional verification is required.

Also, in some environments it is permissible to use no CVM for low-value transactions or for terminals that do not support any of the CVM on the cards.

CreditCall’s EMV Kernels support every EMV-defined CVM, and provide a simple yet powerful way to add EMV level 2 to payment devices. Check out www.emvx.co.uk for further details of these EMV Level 2 Kernels.

An EMV card generates a unique “Authorisation Request Cryptogram” for each transaction that requires online authorisation. This is calculated by encrypting the card and transaction data using a secret key that is known only to the card and the card issuer. When the transaction details are sent to the issuer during the authorisation process, the issuer can then use its copy of the secret key to verify that the cryptogram for the transaction is correct, and that therefore the card is genuine.

Once the issuer is satisfied that the request is genuine and they wish to authorise the transaction, they will generate an authorisation response cryptogram, which the card can then use to authenticate that the authorisation for the payment came from the genuine issuer of the card.

These checks allow the EMV card and the issuer to verify the authenticity of each other, and thus protect the cardholder from being debited for fraudulent transactions.

This is just one of the many benefits that EMV migration can bring. The CreditCall EMV kernels provide a simple but powerful way to add EMV level 2 to ATMs, PoS devices and unattended payment terminals such as kiosks.

Check out www.emvx.co.uk for further details of these EMV Level 2 Kernels.

It is of course possible to update an existing EMV solution to meet the latest specifications, but the sheer volume of specification changes means that this is a significant task. A better approach therefore, is to migrate to an EMV Kernel that is compliant with the latest EMV standards, such as the CreditCall EMV Kernels. Check out www.emvx.co.uk for further details of these EMV Level 2 Kernels.

Found this Interesting, but struggling with the terminology? Why not consult the helpful Glossary of Terms at http://www.emvx.co.uk/glossary.aspx EMV de-mystified!