EMVCo SBMP certification – security for software-based mobile payment solutions
Your experts for secure mobile payment solutions
With the increasing digitalization of payment transactions, software-based mobile payment solutions are gaining in importance. The EMVCo Software-Based Mobile Payment (SBMP) standard ensures secure implementation of these technologies and enables smooth certification by major card providers. SRC supports you with comprehensive testing and certification services for mobile payment solutions – from HCE wallets and SDKs to biometric authentication and Trusted Execution Environments (TEE).
What is EMVCo SBMP?
The EMVCo SBMP standard was developed to ensure the security of mobile payment solutions without dedicated hardware security elements. It comprises various components that play a role in modern payment systems:
✔ Host Card Emulation (HCE) – Software-based emulation of payment cards for mobile payment processing without physical secure elements.
✔ Consumer Device Cardholder Verification Method (CDCVM) – authentication methods such as fingerprint, facial recognition or iris scanning as an alternative to the PIN.
✔ Trusted Execution Environments (TEE) – Isolated, secure environments for processing sensitive payment data.
✔ Software protection tools – security mechanisms such as encryption, obfuscation and anti-tampering technologies to ward off attacks on mobile payment apps.
EMVCo SBMP simplifies the certification of software components by recognizing technologies that have already been tested as the basis for further safety assessments. This saves developers time and costs during market launch.
Our services
Evaluation & certification of your solution
We check whether your product meets the EMVCo SBMP security requirements and guide you through the entire certification process.
Analysis & vulnerability assessment
Our experts identify potential security risks before they become a problem – from code reviews to penetration tests.
Optimization for approval by card providers
Visa, Mastercard, American Express, Discover & Co. set high security standards. We help you to meet the compliance requirements at an early stage.
Everything from a single source
SRC offers comprehensive security checks for mobile payment solutions – efficient, reliable and individually tailored to your needs.
Why SRC?
Many years of experience – We are experts in the certification of payment solutions and understand the challenges of the market.
Efficient testing procedures – Thanks to optimized evaluation processes, we reduce costs and speed up the time to market.
Broad network – Our collaboration with leading technology partners ensures that your solution is tested to the highest security standards.
Make your mobile payment solution fit for the future – contact us for a no-obligation consultation!
