EMVCo certifies Trustonic to secure mobile payments apps

EMVCo certifies Trustonic to secure mobile payments apps
04.02.2020 08:20 am

EMVCo certifies Trustonic to secure mobile payments apps

Payments

Mobile device and app security leader Trustonic today announces that its trusted execution environment (TEE)* solution is the first hardware-backed TEE to complete the EMVCo Software-Based Mobile Payments security evaluation process.

EMVCo is the global technical body that facilitates the worldwide interoperability and acceptance of secure payment transactions. As such, this evaluation process confirms that the Trustonic TEE provides a robust security foundation that meets the requirements of software-based mobile payment (SBMP) and acceptance solutions.

“This technology is already protecting payment apps from small startups through to some of the largest OEMs and mobile payment providers in the world; all via a simple SDK,” comments Dan Rawlings, CCO, Trustonic. “This certification, and the adoption of Trustonic Application Protection in the financial sector, confirms what many fintechs, banks, payment schemes and mPOS developers already know. Trust, credibility and confidence are built and maintained with high levels of assurance, and combining software and hardware-backed security is the only way to achieve that when the stakes are high.”

The Trustonic Application Protection (TAP) development toolkit enables developers to easily build and deploy a range of secure financial applications including mobile payment, banking, and acceptance use cases like mobile point of sale (mPOS), ‘tap on phone’ and software-based PIN entry on COTS (SPoC). This protects mobile applications by securing sensitive code, data and processes in Trustonic’s heavily protected TEE. The environment continuously upgrades over the course of an app’s lifecycle to take advantage of the most advanced hardware and software security technologies available on smartphones. The platform includes Trustonic’s Trusted User Interface (TUI), which isolates and protects sensitive input and display user interactions from the device operating system – like PIN entry – in app user interfaces.

“Hardware-backed TEE technology plays a big role in enabling the mobile financial ecosystem to mature and achieve its potential,” adds Tim Hartog, Director Mobile Payments at Riscure, the independent security test laboratory that performed the security evaluation. “This is because hardware-backed TEE technology, like Trustonic’s TEE, can protect apps even if attackers have root privileges on the device. With Trustonic providing access to the TEE through TAP, solution developers are now able to effectively secure PIN entry on smartphones. This is a key enabler for using smartphones as acceptance devices.”

Dan Rawlings concludes: “The payments and banking ecosystems are leading the way when it comes to securing apps and data. As regulations like PSD2, SCA and GDPR evolve, privacy is pushed into the consumer domain, security is becoming a differentiator. Developers need to know that hardware no longer limits innovation and user experience, the flexibility of TEE security is nuanced and can be used to deliver simpler, richer and faster user experiences.”

Related News

Mastercard, PFS and Starling Bank team up to offer a trusted alternative to cash to NHS volunteers

As National Volunteer Week gets underway, Royal Voluntary Service has identified two Mastercard issuers to provide trusted payment cards to NHS Volunteer Responders. These can... Read more »

Brazilians tend to increase spendings on ecommerce after the pandemic, EBANX study shows

A research launched by EBANX, on the impacts of the COVID-19 pandemic on the ecommerce market in Brazil and the post-pandemic perspectives, brings in the results an intention... Read more »

Mastercard: Contactless payments have become the “new normal” across the UK

As Mastercard reveal that 66 per cent of all transactions across the UK are now contactless, new research released today identifies consumer habits and viewpoints that mean... Read more »

South Africa’s Mama Money Expands Global Reach with Western Union

Western Union, a leader in cross-border, cross-currency money movement... Read more »

SatoshiPay Secures $550,000 investment from Stellar Development Foundation

The Stellar Development Foundation ("SDF") has made a strategic investment of $550,000 by way of convertible loan notes. This investment marks the third investment made by SDF... Read more »

Enfuce powers payments in MaaS Global’s revolutionary mobility app

Maas Global, the leading Mobility as a Service provider, has partnered with Enfuce – Finland’s largest fintech startup – to launch a card payment offering in Whim, MaaS Global’... Read more »

Magazine
ALL
Free Newsletter Sign-up
+44 (0) 208 819 32 53 +44 (0) 173 261 71 47
Download Our Mobile App
Financial It Youtube channel