Tag Archive for: payment systems

EMVCo
Janine Wolff

SRC recog­nised as SBMP Evalu­ation Laboratory by EMVCo

Mobile Payments: From chip card to mobile device

Mobile Payment is an electronic form of payment using mobile devices such as mobile phones, tablets or smart­watches. Electro­mag­netic, i.e. contactless, techniques are used to initiate, authorise and realise the payment. This makes the security of this form of payment a challenge.

EMVCo and Software-Based Mobile Payment (SBMP) Programme

EMVCo, which defines and further develops the EMV standard and checks its imple­men­tation, addresses these challenges with its new SBPM approval process. SBPM stands for Software-Based Mobile Payment Evalu­ation Process. This evalu­ation examines whether the security mecha­nisms and protective measures of a component or solution have the minimum security level defined by EMVCo. Manufac­turers are certified with a security assessment certificate that their products can withstand known attacks.

With the SBPM approval process, EMVCo supports the global security and inter­op­er­ability of mobile payment trans­ac­tions. The range of security assessment processes has so far included products for integrated circuits (IC), platforms and integrated circuits (ICC). For the first time, EMVCo has extended the scope of its approval processes to include software compo­nents and solutions for mobile payments.

EMVCo recog­nises SRC as SBPM Evalu­ation Laboratory

SRC is recog­nized by EMVCo as a security lab/assessor for the security assessment of software-based mobile payment solutions and compo­nents, in addition to the existing Mastercard and Visa recognitions.

SRC performs compre­hensive checks of the security mecha­nisms of a Mobile Payment App or its compo­nents. The imple­mented measures are examined using state-of-the-art methods, such as reverse engineering, side channel and runtime analyses, and their resilience/resistance to attackers and protection against misuse is evaluated.

If you are inter­ested in further infor­mation on the subject or the evalu­ation of your payment solution, please contact us.

Bezahlen 2025
Janine Wolff

Paying in 2025 — Scenarios for the future of payment systems in Germany

A study by SRC Security Research & Consulting GmbH with profes­sional support from Z_punkt The Foresight Company and Fraun­hofer INT (orig. “Bezahlen 2025 — Szenarien zur Zukunft der Zahlungssysteme in Deutschland).

Instant payments, the digiti­sation of shopping, stricter regulation, payment releases — and account infor­mation services — it is already clear today that these issues will have a major impact on the world of payment in the future. How exactly these factors are designed and used, however, depends decisively on drivers whose influence can be predicted much less reliably:

How strong are the Fintechs? What role do the Internet giants want to play? Do customers accept new payment methods? What authen­ti­cation methods are available? What about the willingness to cooperate within the banking industry?

The study “Paying in 2025 — Scenarios for the future of payment systems in Germany” therefore does not predict the “one” true future. Rather, an expert survey and several rounds of experts identified those factors that will probably have the greatest impact on the future of payment in the next decade.
Building on this, various consistent future scenarios have been developed that help to form a concrete picture of what payment could look like in ten years’ time. The aim of the study is to provide decision-makers in payment trans­ac­tions with support in analysing the oppor­tu­nities and challenges of the future payment trans­ac­tions landscape.

Download the SRC study “Paying in 2025”

The website of Z_punkt The Foresight Company and Fraun­hofer Institut for Scien­tific and Technical Trend Analyses INT can be reached via z‑punkt.de or int.fraunhofer.de