EMV Certification
EMV in transit is not a single certification. The scope depends on which acceptance model the operator picks, which schemes are accepted, and where the merchant boundary sits. This article walks through the applicable certifications, the roles of acquirer / scheme / terminal vendor / transit authority, and the realistic timelines from prototype to revenue service.
"EMV is designed to significantly improve the security for consumer card payments by providing enabling features for reducing fraudulent payment."
Four Key EMV Features
- Authentication of chip cards to prevent counterfeit fraud
- Risk management parameters defining conditions for chip card usage
- Digital signing of payment data for transaction integrity
- Enhanced cardholder verification against loss and theft
The Evolution of the EMV Specifications
The specifications began in 1994 through collaboration between Europay, MasterCard, and Visa. JCB joined in 2004, and American Express in 2009. Version EMV '96 was released in 1996, with production version 3.1.1 in 1998. The current version is 4.2 from 2008.
Three levels of EMV certification
- Level 1 — Hardware: "The physical terminal, logic, and transmission of payments are tested."
- Level 2 — Software Kernel: "The software written to facilitate the transfer of payment information is tested."
- Level 3 — Application: "Each card brand is tested against the entire processing solution."
EMVCo, composed of six member organizations, manages specifications and certifies Levels 1 and 2 only.
Who is Ambimat Electronics?
Close to 4 decades of design experience as a solution provider for payment products and IoT development across smartwatches, smart homes, medical devices, robotics, retail, and security.