MOBILE (NFC) SOLUTIONS

Transcription

1 TRANSFORMS YOUR PAYMENTS PERSPECTIVE SOLUTION FLYER MOBILE (NFC) SOLUTIONS VENDOR INDEPENDENCE SUPPORTING OPEN STANDARDS AND INTERFACES PREDICTABLE INTEGRATION TIMES FOR FASTER TIME TO MARKET FLEXIBLE, MODULAR, CARRIER-GRADE PLATFORM ACI: A TRUSTED PARTNER IN NFC Many relatively small near field communication (NFC) pilots show a high degree of customer enthusiasm for mobile contactless payments and prove the capabilities of the technology at both the device handset and terminal. These pilots, however, have generally involved a relatively small number of handsets, often with pre-loaded and pre-configured applications. To roll out such functionality to millions of users securely and remotely requires a robust and scalable solution with all of the necessary capabilities to manage the complex channels and combinations possible in the mobile ecosystem. ACI can assist and support all parties in the secure application lifecycle management for mobile-based applications.

2 ACI HAS LEVERAGED ITS EXPERIENCE IN CHIP LIFECYCLE MANAGEMENT TO DEVELOP ADVANCED TSM SOFTWARE TECHNOLOGY. VENDOR INDEPENDENCE ACI solutions support open standards and interfaces, which integrate into all existing networks, secure elements and operating systems. With no ties to any UICC (SIM) vendor or proprietary technology, ACI solutions provide true vendor independence from component suppliers throughout the mobile ecosystem. EXPERT KNOWLEDGE Employing one of the largest and most experienced expert teams in chip lifecycle management, ACI has the knowledge and experience to meet an organization s requirements. SHORT TIME TO MARKET Due to its proven modular and flexible approach, the use of standardized interfaces and its efficient configurator toolset, ACI can help organizations achieve significantly shorter implementation times. FUNCTIONALITY OVERVIEW ACI, in partnership with Bell ID, offers advanced over-the-air (OTA) provisioning and NFC application management capabilities, designed to assist organizations in executing TSM services. These include the delivery, personalization and management of applications on mobile handsets. The solutions are based on a proven and scalable software platform, which currently manages multimillion contactless and contact-based tokens globally, across the finance, identity and mobile sectors. 1 2 OTA provisioning Lifecycle management of: NFC applications Secure elements Cryptographic keys 2

3 MULTI-CHANNEL OTA PROVISIONING Securely load and personalize NFC applications onto mobile handsets via multiple channels. As a component, it can also interact with existing OTA platforms NFC APPLICATION LIFECYCLE MANAGEMENT Enable the dynamic management of content and parameters after handsets have been issued (e.g., load, update, delete), in accordance with requests from users and service providers SECURE ELEMENT MANAGEMENT Support any secure element form factor or vendor (e.g., embedded, UICC or MicroSD); also includes full support for simple and delegated security domain management Trusted third parties Mobile network operators and device manufacturers providers and application issuers TRUSTED THIRD PARTIES For trusted third parties, (e.g., personalization bureaus, payment/id/transport processors and bank/mno consortia), ACI offers combined SP and Root TSM functionalities, which are required in order for a trusted third party to take on the role of a TSM. The functionalities are often characterized by the following: Offer (Root and SP) TSM functionality as a service to third parties to act as a TSM on their behalf Offer other services to these third parties including card personalization and transaction processing Already have existing secure facilities certified to international payment scheme requirements Maintain connections with other (Root and SP) TSMs MNO MNO MNO MNO CRYPTOGRAPHIC KEY MANAGEMENT Generate and manage multiple key types and realize key exchange between different TSMs, service providers (SPs) and mobile network operators (MNOs) ACI Root TSM Solutions Trusted Third Party ACI SP TSM Solutions TSM MARKET SOLUTIONS ACI offers TSM software solutions that can either be installed in house or are provided as a hosted service through multiple partners worldwide. ACI TSM solutions can be tailored to support an organization s specific business and operational needs inside the NFC ecosystem. By meeting globally recognized, widely accepted standards and integrated support for inter-tsm communications and delivery, ACI can achieve significantly shorter implementation times. This is also supported by proven workflow and lifecycle blueprints, wizards and standard configurations. ACI supports three different commercial TSM business models that can include, but are not limited to: KEY FEATURES Easy integration with multiple wireless carriers (meeting global standards) Easy integration with multiple SPs (open interfaces) White label/oem Application and security domain lifecycle management Scalability (phased approach) Predictable integration times and short time to market Security (PCI DSS compliance) Support for many global and regional payment products Wide range of application deployment options Interoperability with existing delivery infrastructure (OTA platform, protocols) OTA component 3

4 MOBILE NETWORK OPERATORS AND DEVICE MANUFACTURERS ACI enables organizations such as MNOs and device manufacturers to manage secure elements of the NFC handset and delegate control to service providers in order to control their own security domains by becoming a Root TSM. ACI has no ties to any UICC vendor and therefore supports open standards and interfaces to integrate into existing networks. ACI s OTA delivery component can integrate with existing OTA platforms or can be deployed separately, communicating directly with the backend infrastructure. SERVICE PROVIDERS AND APPLICATION ISSUERS For such service providers as banks, identification and transit organizations willing to bring their TSM operations in house, ACI offers advanced SP TSM offerings that enable the following: Managing secure elements in any form factor embedded, UICC or MicroSD Initialize security domains Load management applications (authentication, rights management and wallet) Control delivery network or platform Maintain trusted relationships with multiple service providers and/or trusted third parties Mobile Network Operator, Device Manufacturer ACI Root TSM Solutions ACI provides service providers with integration services using GlobalPlatform standards, easily connecting to the MNO or Root TSM of the organization s choice. Management of applications in their (Root TSM assigned) security domain, including loading and personalization Control of application use infrastructure Integration with existing delivery network or platform (OTA component) or use open delivery mechanism (GPRS) Maintenance of a trusted relationship with one or more Root TSMs MNO/TSM MNO/TSM MNO/TSM MNO/TSM KEY FEATURES Easy integration with SPs and other actors in the ecosystem Set up end-to-end NFC services for different service providers, each with their own lifecycle (UICC centric) secure element lifecycle management Vendor independence supporting open standards and interfaces Predictable integration times and short time to market Actual carrier grade platform - Independent redundancy - Interoperability with existing delivery infrastructure (OTA platform, protocols) Wallet functionality Proven technology ACI SP TSM Solutions, Application Issuer KEY FEATURES Security (PCI-DSS compliance) Easy integration with multiple MNOs Wide range of application deployment options Application lifecycle management Significant scalability (phased approach) Predictable integration times and short time to market 4

5 ACI TSM TECHNICAL OVERVIEW Multi-secure element support UICC SE/SWP Embedded SMC/MicroSD Multi-channel provisioning SMS-PP CAT_TP HTTP Multi-OTA protocol support Network connectivity: SMPP, GGSN/SGSN (TCP/IP, UDP/IP) Delivery and communication protocols (GSM 03.48): ETSI TS , ETSI TS , 3GPP TS , ETSI TS , GlobalPlatform and 2.2 Amd B and C, supporting SMS-PP, SMS-CB, USSD, CAT_TP, RAM over HTTP, TCP/IP, BIP Security protocols (GSM 03.48): ETSI TS and 3GPP TS , 3GPP TS , TLS 1.2 (SSL), SCP-02, SCP-80, SCP-81 Key management components Cryptographic engine GlobalPlatform key profiles Import/export keys Secure channel 01/02/80/81 protocol keys Support for multiple applications VISA PayWave (qvsdc, VMPA) MasterCard Paypass/mChip American Express ExpressPay Discover Open or proprietary transit, loyalty, identity or finance applications Mobile token management components ACI Token Manager (Card, & SE application and security domain management system) Authorization control system Security domain management system Personalization web service Web services (interfaces) Notification service Secure element configurator Optional: Data preparation engines (e.g., contactless payment SE applications, ID SE application, transit SE application) and interface to certificate authorities (VISA, MasterCard, American Express) 5

6 REVOLUTIONIZES PAYMENTS ACI Worldwide, the Universal Payments company, powers electronic payments and banking for more than 5,600 financial institutions, retailers, billers and processors around the world. ACI software processes $13 trillion each day in payments and securities transactions for more than 300 of the leading global retailers, and 18 of the world s 20 largest banks. Universal Payments is ACI s strategy to deliver the industry s broadest, most unified end-to-end enterprise payment solutions. Through our comprehensive suite of software products and hosted services, we deliver solutions for payments processing; card and merchant management; online banking; mobile, branch and voice banking; fraud detection; trade finance; and electronic bill presentment and payment. To learn more about ACI, please visit com. You can also find us on Worldwide. 6 Americas Asia Pacific Europe, Middle East, Africa +44 (0) Copyright ACI Worldwide, Inc ACI, ACI Payment Systems, the ACI logo, ACI Universal Payments, UP, the UP logo, ReD and all ACI product names are trademarks or registered trademarks of ACI Worldwide, Inc., or one of its subsidiaries, in the United States, other countries or both. Other parties trademarks referenced are the property of their respective owners. AFL