EMVCo Adds Payment Account Reference to Payment Tokenisation

EMVCo Adds Payment Account Reference to Payment Tokenisation
29.03.2016 11:15 am

EMVCo Adds Payment Account Reference to Payment Tokenisation

Payments , Infrastructure

Global technical body EMVCo has released a bulletin updating the EMV® Payment Tokenisation Specification – Technical Framework to provide the payment community with a global, consistent framework to implement ‘Payment Account Reference’ (PAR). To be used by merchants, acquirers and payment processors, PAR can enhance security by limiting references to a cardholder’s primary account number (PAN) in the payment ecosystem.

Payment tokenisation is the process of replacing a PAN with a unique payment token that may be restricted in its usage, for example, with a specific device, merchant, transaction type or channel. Traditional PAN-based payments will continue to be used alongside EMV Payment Tokens. The introduction of PAR, which does not contain financially sensitive data, enables the payment acceptance community to link a cardholder's payment token with their PAN transactions without needing to use their underlying card account number. This allows for a consolidated view of transactions on a payment account. This is also needed for security and regulatory reasons, such as risk analysis and anti-money laundering. It is also important for value-added services, as these often leverage historical transactional data to derive analytics and measurements to support customer programmes such as loyalty.

Mike Matan, current Chair of the EMVCo Executive Committee, comments: “Payment tokenisation enhances the underlying security of digital payments by limiting the risks associated with the compromise or unauthorised use of PANs. As well as increasing security, we want to ensure the payment acceptance community can continue to deliver associated payment processing and value-added services which are currently enabled by PAN. PAR addresses this by enabling all payment transactions – regardless of how they are initiated – to be processed in a consistent manner.”

The presence of PAR fulfils a fundamental need to link PAN-based and token-based transactions together. PAR enables the industry to move away from dependence on the PAN as the primary linkage. PAR data cannot be reverse-engineered to reveal the PAN or EMV Payment Token and cannot be used on its own to initiate a transaction such as authorisation, capture, clearing or chargeback. Users of PAR data are required to protect PAR data in accordance with national, regional or local laws and regulations.

“EMVCo recognises the need to continually adapt and advance the EMV payment infrastructure to support and promote user convenience without compromising security,” adds Jack Pan, EMVCo Board of Managers Chair. “Our work to establish a secure and scalable payment tokenisation ecosystem is no different. Since EMVCo launched its activity to focus on the development of a tokenisation specification, we have been working with industry stakeholders and EMVCo Associates to solicit feedback and determine appropriate updates to the framework, which will optimise the benefits of this technology. In addition to PAR, EMVCo has launched a Token Service Provider (TSP) Registration Process, to promote transparency and interoperability of TSP entities. We look forward to continuing our work with the industry to manage and evolve this payment technology further.”

EMVCo – which is collectively owned by American Express, Discover, JCB, MasterCard, UnionPay and Visa – launched the EMV Payment Tokenisation Specification - Technical Framework v1.0 in March 2014. The PAR framework is designed to ensure global interoperability and support broad industry adoption. These latest updates are documented in the EMV Specification Bulletin No. 167, available to download without charge from the EMVCo website.

The specification bulletin accomplishes the following:

·         Introduces PAR as an industry aligned data structure.

·         Describes the presence of PAR in payment token and underlying PAN transactions.

·         Defines PAR to be used as a consistent value for all payment tokens affiliated with an underlying PAN.

·         Outlines how PAR can be used by acquirers, payment processors and merchants to link payment token transactions to those of the underlying PAN.

To join other industry stakeholders in contributing to EMVCo’s development of the tokenisation framework, become an EMVCo Associate.

Related News

Shopify introduces major product launches, including Shopify Balance and Shop Pay Installments

Shopify Inc., a leading global commerce company, announced new and updated products at ... Read more »

Recycling ATMs in Latin America to treble by 2024

Deposit automation and recycling terminals are revolutionising the way banks operate across the globe, allowing routine transactions to be migrated from the teller to self-... Read more »

Neobank Jingle Pay chooses W2 to power its new Super App for the Unbanked

W2, the leading provider of real-time digital solutions for global regulatory compliance, announced today that it has joined forces with neobanking group... Read more »

Wirecard and websms enable smart shopping via SMS and Messenger

Wirecard, the global innovation leader for digital financial technology, and websms, a pioneer in mobile messaging, have come together to set... Read more »

NatWest research: UK small businesses accelerate transition to cashless during pandemic

UK SMEs are moving to accept card and contactless payments at an increasingly rapid rate as a result of the coronavirus crisis, according to findings published today by... Read more »

Judopay and Mastercard partner with The Pharmacy Centre to ensure access and availability of medical supplies

Judopay, a leading mobile-first payment provider, today announced that together with ... Read more »

Magazine
ALL
Free Newsletter Sign-up
+44 (0) 208 819 32 53 +44 (0) 173 261 71 47
Download Our Mobile App
Financial It Youtube channel