strictly private and confidential · element issuer / owner ... a gsm association, pay buy mobile...

19
CTST May 2008 This document is prepared by CASSIS International solely for the use of our client, and it is not to be relied on by any third party without CASSIS' written consent. Strictly Private and Confidential Asia Pacific NFC Deployment Experience Thian Yee Chua [email protected] Orlando 14 May 2008

Upload: buianh

Post on 02-Apr-2018

219 views

Category:

Documents


3 download

TRANSCRIPT

Page 1: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

CTST May 2008

This document is prepared by CASSIS International solely for the use of our client, and it is not to be relied on by any third party without CASSIS' written consent.

Strictly Private and Confidential

Asia Pacific NFC Deployment Experience

Thian Yee [email protected]

Orlando14 May 2008

Page 2: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 2

Agenda

Consumer Landscape

User Experience

Deployment Examples

Conclusion

About CASSIS

Page 3: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 3

NFC/OTA Deployment Sites and Partners

USA France

Netherlands

Taiwan

Singapore

Australia

July 08

Finland

Korea

Malaysia

Korea

slovenia

Indonesia

Page 4: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 4

Consumer Landscape#1 Customers Pull

#2 Contactless Infrastructure Everywhere

#3 EMV and GP Enabled

SECURE ELEMENT ISSUER / OWNER DOMAIN

SECURE ELEMENT ISSUER / OWNER APPLICATIONS

APPLICATION OWNER’S DOMAIN

#1

APPLICATION OWNER’S DOMAIN

#2

APPLICATION OWNER’S DOMAIN

#N

SECURE ELEMENT MASTER KEY OWNED BY SECURE ELEMENT

ISSUER / OWNER

APPLICATION DOMAIN OWNER’S APPLICATIONS

APPLICATION DOMAIN OWNER’S APPLICATIONS

APPLICATION DOMAIN OWNER’S APPLICATIONS

APPLICATION DOMAIN KEYSETS OWNED BY RESPECTIVE

APPLICATION DOMAIN OWNER

SECURE ELEMENT ISSUER / OWNER :

• INSTALLS ITS APPLICATIONS INTO THE SECURE ELEMENT OWNER’S DOMAIN

• RESERVES RIGHT VIA SECURE ELEMENT MASTER KEY TO CREATE APPLICATION OWNER DOMAINS

APPLICATION DOMAIN OWNER :

• INSTALLS ITS APPLICATIONS INTO THE APPLICATION OWNER’S DOMAIN VIA THE APPLICATION DOMAIN KEY

SEC

UR

E EL

EMEN

T IS

SUER

DO

MA

INA

PPLI

CA

TIO

N

OW

NER

DO

MA

IN

#4 Largest Mobile Users Base

Asia Pacific (40%)~ 1.2B

ROW~ 1.7B

Source: GSMA Q4/07

Page 5: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 5

NFC Service Overview

Direct MarketplaceDirect Marketplace Remote MarketplaceRemote Marketplace

Buy or Top-Up

Service ProvidersService Providers

Trusted/TelcoService Manager

Trigger Smart Poster

Coupon Delivery

Buy

Loyalty Points Award & Instant

Redemption

Subscribe via OTA

Illustration OnlyIllustration Only

OTA, Security and Life Cycle Mgt

Page 6: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 6

Service Subscription Process

Trusted/Telecom Service Manager

OTA Remote Management

Loyalty & Coupon Management

Top-Up Management

Smart PosterManagement

Step 1 Service RegistrationStep 1 Service Registration

Card Issuer & Service Providers

Step 2 Approval NotificationStep 2 Approval Notification

Step 4

OTA Managed Services

Step 3 OTA Secured DownloadStep 3 OTA Secured Download

Payment

Transit

Coupon

Poster

Illustration OnlyIllustration Only

Page 7: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 7

Multi-discipline Expertise

• EMV DP & Personalization• Authentication• OTA• Mobile client application• Interface to other Mobile Services• Wireless Internet

• VAS applet, DP & Personalization• Authentication• OTA• Mobile client application• Interface to other Mobile Services• Wireless Internet

Deliver EMV Applications Deliver VAS Applications

Page 8: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 8

5 Key Considerations in Deployment

WAP / GPRS / UMTS etc

• Trust Model• CRM• Data Interface• Certification• Workflow

1

• PF and App Key Mgt• Life Cycle Mgt• EMV Data Preparation• Personalization Flow

2

• Operation Flow• Error Management• Protocols

3

• API to SE• Available models• API for UI development• Transaction terminal compatibility• NFC compliance

4

• Liabilities• Multi-sourcing• Standardization• API for UI development• Certification

5

Illustration OnlyIllustration Only

MobileMatrix[Remote Mgt Server]

Trusted/Telecom Service Manager

Card Issuer & Service Providers

Page 9: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 9

SK Telecom, Visa and LG Card - Korea

World’s first OTA download and personalization of Visa VSDC in 3G UICC

World’s first ‘Split Post Issuance’OTA Management Architect

World’s first Production Level system

Each party keeps their own secrets

Solution reviewed by Visa International

The only commercial and the largest OTA secure service delivery

Consumer

OTA NFC Platform(MNO)

NFC Handset Manufacturer

ORSecure Element

Manufacturer

Mobile Network

USIMUSIMUSIM

NFC SWP-SIM Enabled Phone

SD Creation

Mobile Network Operator

ISD Key Set

ISD Key Set

Visa Issuer(Card Issuer)

OTA NFC Platform

(Card Issuer)VPA EMV keys

SD keys

VPA Data

Client Application Load/Install and SD Key Rotation

SD Registration and Key Deposit

0a

0b

0b

1

3

4Initiate OTA Application

Loading

2

MobileMatrix #1

MobileMatrix #2

Page 10: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 10

CHT, Visa and CTCB - Taiwan

World First commercial deployment of Visa Mobile Payment Platform

First OTA download and personalization of Visa payWave in Taiwan

Participants buy the phone and apply the credit card

CASSIS deployed the solution within 8 weeks after contract award

Services provided from CASSIS Digital Security Centre in Malaysia

Consumer

Nokia NFC Key

Nokia 6131NFC Enabled

Phone

OTA Activation Sequencei. SA MIDlet Downloadii. CTCB SD Creation

Security Domain keys (Initial & Final)

VPA Data

OTA Activation Sequence i. VPA Download & Installationii. VPA Personalizationiii. SD Rotate Initial to Final Key value (secured mode)iv. VMA Download

Security Domain (SD) Registration

& SD Initial Key Deposit

0a

0b

0b

1

3

4Initiate OTA Application

Loading

2

Operated by CASSIS

ISD Key Set

Operated by CASSIS

VPA EMV keys

Page 11: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 11

Maybank, Visa and Maxis - Malaysia

Phase 2 of NFC Project using OTA Remote Management after the Phase 1 pre-issuance experiment

Expand services from Visa payWave to Smart Poster, Transit Ticketing and Top-up

Expand partnership from bank and telco to transit operator and media company

CASSIS deployed the solution within 8 weeks after contract award

Services provided from CASSIS Digital Security Centre in Malaysia

Page 12: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 12

KTF, MC and LG Card - Korea

World’s First OTA Management on SWP-SIM using MasterCard Paypass

A GSM Association, Pay Buy Mobile project, demonstrated during 3GSM Conference Asia in November 2007

CASSIS deployed the end-to-end solution

Services provided from CASSIS Digital Security Centre in Malaysia

Page 13: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 13

CASSIS manages the NFC ecosystem

First NFC project in Singapore with 1,000 users initiated by the transit operator

Specially built NFC phones are used for this project incorporating Felicaand NFC

Users can use the NFC phone as the transit ticket and to tap on the smart poster for rewards, top-up will be deployed shortly

CASSIS manages the OTA download of the MIDlet on the phone, smart posters and the top-up

Page 14: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 14

How to make NFC projects more successful?Bring more convenient to consumers and encourage daily usage

Adapt technologies and solutions to workflows across the participating industries: payment, mobile, transit, retail, advertising, …

Maximize participants’ existing infrastructure usage

Strong marketing leadership – leverage on the always-on channel

Keep with the mainstream technologies – EMV and GP

Avoid being drawn into immature technologies – BIP, SCWS

NFC services can be deployed as short as 8 weeks

Page 15: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 15

About CASSIS

Page 16: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 16

CASSIS OverviewLeading innovator in Smart ServicesOne-stop end-to-end solution providerPioneer in Mobile Service Convergence between Mobile, Financial, Transit and MediaWide and extensive experience in cross-border geographies supportsCustomers in Asia, Europe and the USFounded in 2002, different nationalities with end-to-end knowledgePartner of Visa Mobile Payment Platform

Page 17: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 17

Our Offer

TopupMatrix

Card Issuers

SmartMatrix

Trusted Service Manager

Handset Maker

Payment Asso

USB Dongle

Smart Poster

ISO Card

Mobile PhonePosterMatrix

MobileMatrix

Management of Secure Elements, Keys and Applications

Telcos

Transits

Media

IT Services

Technology

NFC Ecosystem

Next Generation Secure Element

Page 18: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 18

Our Offices

Aix en Provence, France

Kuala Lumpur, Malaysia (TSM) Singapore (HQ)

Seoul, Korea

Beijing, China

Serving 28 Mobile Operators, Banks and Transit Operators or potentially 100M customers worldwide

Page 19: Strictly Private and Confidential · ELEMENT ISSUER / OWNER ... A GSM Association, Pay Buy Mobile project, ... Strong marketing leadership – leverage on the always-on channel

© CASSIS International, Strictly ConfidentialPage 19

Singapore • Malaysia • Korea • France

Making Vision a Reality