EMV® Fingerprint Sensor Assessment - Administrative Process

EMV® Fingerprint Sensor Assessment Administrative Process Version 1.0 October 2025 © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 2/32 Legal Notice This document is subject to change by EMVCo at any time. This document does not create any binding obligations upon EMVCo or any third party regarding the subject matter of this document, which obligations will exist, if at all, only to the extent set forth in separate written agreements executed by EMVCo or such third parties. In the absence of such a written agreement, no product provider, test laboratory or any other third party should rely on this document, and EMVCo shall not be liable for any such reliance. No product provider, test laboratory or other third party may refer to a product, service or facility as EMVCo approved, in form or in substance, nor otherwise state or imply that EMVCo (or any agent of EMVCo) has in whole or part approved a product provider, test laboratory or other third party or its products, services, or facilities, except to the extent and subject to the terms, conditions and restrictions expressly set forth in a written agreement with EMVCo, or in an approval letter, compliance certificate or similar document issued by EMVCo. All other references to EMVCo approval are strictly prohibited by EMVCo. Under no circumstances should EMVCo approvals, when granted, be construed to imply any endorsement or warranty regarding the security, functionality, quality, or performance of any particular product or service, and no party shall state or imply anything to the contrary. EMVCo specifically disclaims any and all representations and warranties with respect to products that have received evaluations or approvals, and to the evaluation process generally, including, without limitation, any implied warranties of merchantability, fitness for purpose or noninfringement. All warranties, rights and remedies relating to products and services that have undergone evaluation by EMVCo are provided solely by the parties selling or otherwise providing such products or services, and not by EMVCo, and EMVCo will have no liability whatsoever in connection with such products and services. This document is provided "AS IS" without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in this document. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NONINFRINGEMENT, AS TO THIS DOCUMENT. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to this document. EMVCo undertakes no responsibility to determine whether any implementation of this document may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of this document should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, this document may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement this document is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party's infringement of any intellectual property rights in connection with this document. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 3/32 Contents 1 Introduction ................................................................................................................. 5 1.1 Audience ............................................................................................................... 5 1.2 When to Use.......................................................................................................... 5 1.3 Fingerprint Sensor Assessment Documents .......................................................... 6 1.4 Definitions.............................................................................................................. 6 1.5 Notational Conventions.......................................................................................... 9 1.5.1 Abbreviations ................................................................................................. 9 1.5.2 Terminology and Conventions........................................................................ 9 2 Fingerprint Sensor Assessment Process Overview ............................................... 10 2.1 Fingerprint Sensor Assessment Flow .................................................................. 10 2.2 General Rules for a Test Session ........................................................................ 11 2.3 Submitting a Request for Test Assessment Form ................................................ 11 2.4 Fee Structure....................................................................................................... 11 2.5 EMVCo Service Levels ........................................................................................ 13 2.6 Product Provider Requirements ........................................................................... 13 2.6.1 Hardware ..................................................................................................... 13 2.6.2 Software ...................................................................................................... 14 3 Fingerprint Sensor Assessment Procedures .......................................................... 16 3.1 Fingerprint Sensor Provider Registration ............................................................. 17 3.2 Fingerprint Sensor Product ICS Submission ........................................................ 19 3.3 Testing phase ...................................................................................................... 19 3.3.1 Preparation for testing.................................................................................. 19 3.3.2 Formal testing .............................................................................................. 20 3.3.3 Product Provider Decision to Submit............................................................ 22 3.3.4 Assessment Phase ...................................................................................... 22 3.4 Fingerprint Sensor Test Assessment Summary ................................................... 25 4 Changes to Previously Assessed Fingerprint Sensor Products ........................... 26 4.1 Type of Changes ................................................................................................. 26 4.2 Change or Derivative Request Process Flow....................................................... 26 4.3 Test Requirements for Changed/Derivative Products .......................................... 27 5 Test Version and Specification Change .................................................................. 28 5.1 Test Cases Change Without EMV Requirements Change ................................... 28 5.2 Test Cases Change Due to New EMV Requirements or Bulletins........................ 29 © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 4/32 Tables Table 1-1: Referenced Documents....................................................................................... 6 Table 1-2: Definitions ........................................................................................................... 6 Table 1-3: Abbreviations ...................................................................................................... 9 Table 3-1: Checklist ............................................................................................................ 16 Figures Figure 2-1: Fingerprint Sensor Assessment Flow................................................................ 10 Figure 3-1: Fingerprint Sensor Product Provider Registration ............................................. 18 Figure 5-1: Release of New Test Cases without EMV Specification Change...................... 28 Figure 5-2: Release of New Test Cases with EMV Specification or Bulletin Change .......... 30 © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 5/32 1 Introduction EMVCo, LLC (“EMVCo”) is the owner of the EMV® Integrated Circuit Card Specifications for Payment Systems, EMV Common Payment Application Specification, EMV Biometric Card Specifications for Payment Systems, hereinafter called EMV Specifications. All readers of this document are advised that Fingerprint Sensor Assessment, when granted by EMVCo, shall not be construed as a warranty or representation of any sort, nor may it be relied upon by any party as an assurance of quality or functionality of any product or service. Please review the legal notice on page 2 of this document for important limitations on the scope of Fingerprint Sensor Assessment. Fingerprint Sensor Assessment is the verification by EMVCo that a specific fingerprint sensor product has demonstrated sufficient conformance to the EMV requirements. The Fingerpint Sensor process is applicable for Fingerprint Sensors used on biometric payment cards, where the cardholder’s fingerprint is used for cardholder verification. The goal of the testing is to help ensure the adequate level of security and convenience, such that the payment credentials can only be used by the legitimate cardholder and without compromising the current convenience of card-based payment. 1.1 Audience The information in this document is designed primarily for Fingerprint Sensor Product Providers and may also be relevant for biometric card manufacturers and issuers. This document is intended for all stakeholders interested in Fingerprint Sensor Assessment, including but not limited to: • Fingerprint Sensor Providers, • Biometric Card Providers, • Biometric Card Issuing Entities. This document will guide the reader through the process by defining formal sub-processes and steps. 1.2 When to Use This document is relevant in the following situations: • First Assessment of a Fingerprint Sensor integrated into a payment card. • If any changes are made to the assessed Fingerprint Sensor implementation such as changes to the Fingerprint Sensor chipset (hardware or firmware), Fingerprint Sensor driver, coating and any other changes that could impact the behaviour of the Fingerprint Sensor. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 6/32 • If any changes are made to the assessed fingerprint matching algorithm such as changes in template creation, matching algorithm logic or matching decision threshold. 1.3 Fingerprint Sensor Assessment Documents The documents listed in Table 1-1 are referenced in this document. Product Providers should check for the latest documentation versions and the impact of any amendments they contain before starting the Product Provider testing process. Table 1-1: Referenced Documents Reference Publication Name Version [REQ] [ICS] [RTA] [IFST] EMV Biometric Card Specifications for Payment Systems - Biometric Card Provider Requirements Request for Registration for Product Providers Implementation Conformance Statement Request for Test Assessment EMV Fingerprint Sensor Assessment Instructions for Fingerprint Sensor Testing 1.0 Latest available Latest available Latest available Latest available Distribution EMVCo Website EMVCo Website EMVCo Website EMVCo Website Restricted to Laboratories 1.4 Definitions The following terms are used in this document. Table 1-2: Definitions Term Definition Card Type Approval Secretariat Debug Testing The EMVCo entity that manages the Card and Mobile Type Approval processes as well as the Fingerprint Sensor Assessment. Early evaluation to obtain an indication whether the Fingerprint Sensor may pass Formal Testing. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 7/32 Dummy Image Enrolment Image EMV® EMV Specifications EMVCo EMVCo Recognised Laboratory Failure to Enrol (FTE) Formal Testing Implementation Conformance Statement (ICS) Laboratory Letter of Recognition Fingerprint Sensor Product Assessment An image (or equivalent) representing a failed fingerprint capture on the Fingerprint Sensor under test. The actual form and content are proprietary to the Product Provider and the software they provide, as long as a comparison with the corresponding enrolment template never generates a ‘true’ outcome. This image receives a unique identifier that would allow tracing it back to an individual and a specific finger of this individual. An image collected on an enrolment device that feeds into the development of the enrolment template; the enrolment template receives a unique identifier that allows tracing it back to an individual (live or synthetic) and a specific finger of this individual. A trademark owned by EMVCo, referring to the technical specifications published by EMVCo. Specifications managed, maintained, and enhanced by EMVCo, including those listed in Table 1-1 The organization that manages the EMV Specifications and their related testing processes. An independent, impartial entity that has received a Letter of Recognition from EMVCo, entitling it to perform testing for specified Type Approval or Assessment; in the context of this document, to perform testing for Fingerprint Sensor Assessment. Failure to create and store an enrolment template. Functional testing of a Fingerprint Sensor implementation for the purpose of issuing a formal compliance notice, in the form of a Fingerprint Sensor Test Assessment Summary (TAS). A form completed by a Product Provider identifying the product, the EMV mandatory functions, the EMV optional functions supported, and (if any) the non-EMV proprietary functions. A facility recognised by EMVCo to perform functional or security tests on a Fingerprint Sensor. Written statement that documents the decision of EMVCo that a laboratory is an EMVCo recognised laboratory and performs testing for Type Approval or Assessment in conformance with the rules defined by EMVCo. Verification by EMVCo that a specific Fingerprint Sensor product has demonstrated sufficient conformance to the EMV Specifications and other required testing. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 8/32 Fingerprint Sensor Product Assessment process Fingerprint Sensor Test Assessment Summary (TAS) Payment System Product Provider Recognition Registration Letter Registration Number Request for Test Assessment Request for Test Assessment Form Security Evaluation Process Test Test Report The steps necessary for a Fingerprint Sensor product to obtain an EMVCo Test Assessment Summary. A written statement that documents EMVCo’s assessment of the functional tests conducted on the Fingerprint Sensor. TAS may be used by other certification authorities as part of their own Type Approval processes. For the purpose of this document, a payment system is defined as a payment system that participates in EMVCo’s Fingerprint Sensor Assessment Process. The entity that submits a Fingerprint Sensor product to EMVCo for Assessment. Formal recognition by EMVCo that a test laboratory is competent to perform one or more categories of testing defined by EMV assessment procedures. Written statement provided by the Card Type Approval Secretariat including the Registration Number of the Product Provider or EMVCo Recognised Laboratory. Unique identification number that EMVCo assigns to the Product Provider or EMVCo Recognised Laboratory. The formal request by the Product Provider for EMVCo to evaluate the test report with the objective to receive a Test Assessment. The request includes test reports, forms and any other information required for evaluation and may be submitted by the Product Provider or by a laboratory acting on behalf of the Product Provider. The form used to enact a Request for Test Assessment. The process evaluating conformity to the EMVCo security requirements and guidelines. Any activity that aims at verifying the conformance of a selected product or process to a given requirement under a given set of conditions. Document provided by a laboratory containing the test results for a Fingerprint Sensor product testing. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 1.5 Notational Conventions 1.5.1 Abbreviations The abbreviations listed in Table 1-3 are used in this document. Abbreviation FAR FRR TAS FTE IAPAR ICS PAD PAI Table 1-3: Abbreviations Description False Accept Rate False Reject Rate Fingerprint Sensor Test Assessment Summary Failure to Enrol Impostor Attack Presentation Accept Rate Implementation Conformance Statement Presentation Attack Detection Presentation Attack Instrument 1.5.2 Terminology and Conventions Page 9/32 The following words are used often in this specification and have a specific meaning: Shall Defines a product or system capability which is mandatory. May Defines a product or system capability which is optional or a statement which is informative only and is out of scope for this specification. Should Defines a product or system capability which is recommended. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 10/32 2 Fingerprint Sensor Assessment Process Overview This chapter gives a high-level overview of the different steps in the Assessment process. 2.1 Fingerprint Sensor Assessment Flow The Fingerprint Sensor Assessment flow is shown in the picture below. Figure 2-1: Fingerprint Sensor Assessment Flow © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 11/32 2.2 General Rules for a Test Session The following rules must be followed by the laboratory performing Fingerprint Sensor evaluation: • The Product Provider must not be present during the testing of the Fingerprint Sensor. • Fingerprint Sensor products must be tested against the currently supported Test Instruction version(s) [IFST]. • No modifications are allowed to the Fingerprint Sensor product. If any modification is made to the Fingerprint Sensor product during the test session, the session must end and the Product Provider must initiate a new submission including a new ICS. • If any modification is made to the ICS during the test session (without any modification to the Fingerprint Sensor product), the modified ICS must be sent to EMVCo. The modified ICS is reviewed by EMVCo and if acceptable retains the validity period of the original EMVCo accepted ICS. Note: Modification of the ICS is subject to a fee (See Section 2.6). 2.3 Submitting a Request for Test Assessment Form A Request for Test Assessment Form, completed in its entirety, must be submitted by the Product Provider after testing is complete. Product Providers may submit a preliminary Request for Test Assessment Form during the Testing Phase, at any point after EMVCo notifies the laboratory that the ICS is acceptable. If the form is submitted early, EMVCo will invoice the Product Provider and the Product Provider can pay the administrative fees before test reports are available. Given that test reports are not reviewed until EMVCo has received payment of all fees, early payment avoids delays during the Assessment Phase. 2.4 Fee Structure EMVCo will charge fees to cover the administrative expenses incurred by EMVCo in managing the Fingerprint Sensor Assessment process. This process includes, but is not limited to: • updates to the Fingerprint Sensor Assessment documentation, and Test Requirements. • maintenance of the EMVCo website, including lists of assessed Fingerprint Sensor products, EMVCo Recognised Laboratories, and EMVCo Qualified Auditors. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 12/32 The following fee shall be paid to EMVCo by the Product Provider: • Request for Test Assessment Summary fee for a review of a Request for Test Assessment for a Fingerprint Sensor Product • Change Request fee for a review of an assessed Fingerprint Sensor Product Change Request • Reissuance of a Fingerprint Test Assessment Summary fee at the explicit request of the vendor (e.g. company or addressee name/address change). • ICS Replacement fee. One free ICS replacement is allowed during the ICS life cycle. Any subsequent ICS replacement requested is charged to the Product Provider: o Same submission process applies as for initial ICS submission (Laboratory submits the changed ICS). o This applies to any change in the ICS after the official approval of the ICS by EMVCo. o After the start of the test session of the Product, ICS replacements (following the rules of the previous bullet) are only allowed for administrative information update (such as name of product) but are not allowed for technical information update. o ICS replacement is not allowed after Test Report submission to EMVCo The following fee shall be paid to EMVCo by the laboratory: • ICS decline fee if an incomplete and/or inconsistent ICS is submitted to EMVCo for review (as Laboratory is responsible for reviewing the ICS provided by the Product Provider). ICS decline process applies to the initial ICS submission and also to any other ICS replacement (charged or not charged to the Product Provider) • Test report decline fee if an incomplete and/or inconsistent test report is submitted to EMVCo for review Note 1: The amount of each fee is published in the Fingerprint Sensor Assessment Bulletin No. 01 available on EMVCo Website. Please check the EMVCo website for the latest fee amounts Note 2: Payers are responsible for any bank charges associated with remittance. Each Paying entity must work with its bank to ensure that EMVCo receives the full amount of the fee. The Request for Test Assessment will not be reviewed until complete payment has been received. Note 3: The testing fees charged by the EMVCo Laboratory to execute test cases are not included and are the responsibility of the Product Provider. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 13/32 2.5 EMVCo Service Levels • The service level for the issuance of a Test Assessment Summary for a report showing 100% compliance shall be 5 business days from the receipt of all required documentation and payment of any applicable fees. • The service level for ICS review shall be 3 business days. • The service level for a change request or a renewal request review shall be 8 business days. EMVCo strives to provide the optimum service levels for all activities, but it cannot commit to service levels for matters that require investigational work, such as reviewing reports not showing 100% compliance. 2.6 Product Provider Requirements The Product Provider is required to provide the following hardware and software that make up the Product Provider toolset. If more than one Product Provider toolset is available and if these toolsets are identical (Hardware and Software), then the Laboratory can use them in parallel during testing. All sample toolsets submitted have to be identified in the ICS. 2.6.1 Hardware The Product Provider must provide the following Hardware: • Enrolment device The Product Provider must provide one or more enrolment devices with the Fingerprint Sensor that, for each presentation, outputs the captured image and any error message (such as failure to capture) to a PC application. • Development Board The Product Provider must provide one or more development boards with the Fingerprint Sensor that, for each presentation, outputs the captured image, the liveness decision, if done by the Fingerprint Sensor, and any error message (such as failure to capture) to a PC application. The Fingerprint Sensor may have the capability to turn liveness detection ON and OFF. By default, liveness detection should be ON when the feature is supported. The enrolment device and the development board have a free zone of radius 4 cm or more centred around the visual area of the Fingerprint Sensor. Enrolment device(s) and development board(s) are to be provided with any required adaptors to connect to the Laboratory’s test PC using an interface available on standard hardware configurations (e.g. USB). Note: Enrolment device and development board may be the same hardware. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 14/32 2.6.2 Software The Product Provider must provide the following PC applications: • Enrolment Application An application that allows fingerprint images to be captured, saved, and exported from an enrolment device with Fingerprint Sensor and converted into an enrolment template. Each enrolment template must be identified through a reference to the test individual and the finger. The enrolment process is at the discretion of the Product Provider and it shall be documented and delivered to the testing Laboratory • Fingerprint Capture Application An application that allows fingerprint images to be captured, saved, and exported from a development board with Fingerprint Sensor during Verification Capture. o When Fingerprint capture is successful, such captured fingerprint image is referred to as a ‘Verification Image’. o When Fingerprint capture is not successful, (presentation did not result in an actual image), the application must allow the Laboratory to insert a ‘Dummy Image‘. A ‘Dummy Image‘ is an image that will generate a ‘no match’ with any other image, including itself or another dummy verification image. Each of these images must include the identifier of the test individual (identification method is left at the Product Provider’s discretion), a reference to the finger (for instance RT for Right Thumb, LI for Left Index…). • Fingerprint Verification Application An application that implements the same image quality check, liveness detection (if not provided by the development board) and matching algorithm as the Fingerprint Sensor. This application can import the previously captured Enrolment Images or enrolment templates, Verification Images and Dummy Images. It outputs the match (‘true’)/no match (‘false’) decision and the liveness decision in a file, for further processing by the Laboratory. Each entry in this file must include both a reference (or the full name) to the enrolment template and to the Verification Image or Dummy Image. Export and import of images shall be lossless, such that the matching algorithm receives the same images when acquired directly from the Fingerprint Sensor (for instance, when embedded in a card) or when imported from a development board. Provided software must be compatible with Microsoft Windows 11. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 15/32 Format of the enrolment templates, the verification images as well as any file exported by the applications delivered by the Product Provider are at the discretion of the Product Provider. However, they must be documented so that the Laboratory can develop interfaces for testing purposes. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 16/32 3 Fingerprint Sensor Assessment Procedures The different steps and their outcome are summarised in Table 3-1. Who Product Provider Product Provider Laboratory Product Provider Product Provider Laboratory Product Provider Table 3-1: Checklist Step Description Product Provider Registration & Contract Fingerprint Sensor Product Provider executes contract for Fingerprint Sensor Assessment and receives Registration Letter with Product Provider Registration Number Complete Fingerprint Sensor ICS form Request the latest version of the ICS form Submit ICS form to EMVCo Ensure all fields are filled in correctly and submit the completed form to EMVCo. Book test slots at The list of Laboratories can be obtained from Laboratory. EMVCo’s website. Provide test material to the Laboratory. Ensure all test materials are delivered in due time to the Laboratory Issues test report once testing is completed. The test report must be provided to EMVCo for review. Receive TAS EMVCo will review the test report and issue a TAS. If the testing indicates non-conformance with the requirements, corrective action is needed and the Product Provider will need to restart by submitting a new ICS form. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 17/32 3.1 Fingerprint Sensor Provider Registration As illustrated in Figure 3-1, the Product Provider Registration process is as follows: • The Product Provider submits a completed registration request to the Card Type Approval Secretariat through the EMVCo website. • EMVCo reviews the submitted materials and, if acceptable, sends the following to the Product Provider: o Link to the EMVCo Test Contracts (DocuSign) o Appropriate contact information • The Product Provider shall sign the EMVCo Test Contracts with DocuSign Note 1: The contract for Fingerprint Sensor Assessment must be executed before the testing phase described in section 3.3 begins. • When the EMVCo Test Contracts are countersigned by EMVCo, the EMVCo Test Contracts are sent back to the Product Provider by DocuSign. • The Card Type Approval Secretariat provides the Product Provider with a Registration Letter which will include the Product Provider’s Registration Number. Note 2: If the Product Provider has already registered for EMVCo Card Type Approval, the Registration Number initially assigned will not change when requesting registration for Fingerprint Sensor Assessment. A revised contract may have to be signed to include Fingerprint Sensor Assessment. Note 3: EMVCo Test Assessment Summary is addressed to the primary and secondary contacts identified on the Request for Registration. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Figure 3-1: Fingerprint Sensor Product Provider Registration Page 18/32 © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 19/32 3.2 Fingerprint Sensor Product ICS Submission The first steps in the assessment process is the delivery of the [ICS] for the Fingerprint Sensor. • The Product Provider completes the [ICS] form with the support of the selected EMVCo Recognised Laboratory. • The [ICS] captures information about the Product Provider and the Fingerprint Sensor itself, including information on the hardware and software. • The [ICS] signed by the Product provider and the Laboratory is sent to EMVCo by the Laboratory. • The ICS acceptance notification from EMVCo contains the ICS reference number. Note 1: If this information changes after ICS submission, an updated [ICS] form must be submitted to EMVCo. An updated ICS reference number will be issued capturing the changes in the updated [ICS]. Note 2: The [ICS] may also be used to report changes or derivative implementations of a Fingerprint Sensor with a valid TAS. It is the Product Provider’s responsibility to provide information in the ICS form describing all the changes or differences between the variant Fingerprint Sensor implementation and the already assessed device Fingerprint Sensor Product (see section 4). 3.3 Testing phase 3.3.1 Preparation for testing Preparation for testing includes booking a test slot and providing the samples (Hardware and Software) and the documentation. 3.3.1.1 Debug Sessions Debug sessions occur between the Laboratory and the Product Provider and are beyond the scope of EMVCo. 3.3.1.2 Booking a test slot at a Laboratory The Product Provider must agree to relevant contracts and schedules with the Laboratory. The Laboratory will advise the Product Provider on the length of time to perform the tests. If there are updates to the ICS form, as a result of changes to the information, the hardware or the software, the Product Provider must provide the (updated) ICS form to the Laboratory before the start of testing. The Laboratory shall then submit this updated ICS to EMVCo. The latest ICS document is included in the report issued by the Laboratory, to capture the Fingerprint Sensor configuration that was tested. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 20/32 3.3.1.3 Test Material The Product Provider provides the Laboratory with the required samples for performing the testing as well as the tools and instructions specified below. The samples must match the information in the ICS form, must be production quality and must be the same as the devices planned to be launched to the market, that is, all features are implemented and working (Refer to section 2.6 for the list of Hardware and Software to be provided by the Product Provider). The Laboratory shall check with Product Provider regarding the software and hardware requirements for the PCs that will host the applications provided by the Product Provider. For all software provided, the Fingerprint Sensor Product Provider must provide detailed instructions on installation and usage. The Fingerprint Sensor Product Provider shall provide any additional instructions needed for the evaluation of the biometric system performance, such as guidance on the enrolment, template extraction, template update, etc. The Laboratory is required to retain test material according to the following rules: • Test reports and test logs for six years after the expiration date of TAS. • Fingerprint Sensor under Test (Hardware(s) as well as all software applications) for six years after the expiration date of TAS. • Fingerprint images and Enrolment Templates for six years after the expiration date of TAS unless regional regulations impose different rules. • Refer to [IFST] for the storage of Synthetic Fingerprint and PAI. 3.3.2 Formal testing Formal Testing consists of two tests, namely Reliability (Accuracy) and Presentation Attack Detection (PAD) as defined in [REQ]. The test report is issued by the Laboratory to the Product Provider. 3.3.2.1 Reliability (Accuracy) The aim of the accuracy test is to measure the FRR and FAR values of the Fingerprint Sensor. Using the tools listed above, the Laboratory collects enrolment and verification images, runs them through the matching software and collects this information, for further processing. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 21/32 3.3.2.2 Presentation Attack Detection In order to run the PAD test, the test Laboratory will create a number of PAIs. Following an enrolment phase, the test operator will try to "spoof" a genuine authentication by confronting several times the different PAIs with the Fingerprint Sensor/algorithm. The Laboratory will analyse results and determine an overall score for every PAI. An individual and a global Impostor Attack Presentation Accept Rate (IAPAR) will be determined that gives the final verdict of the PAD test session. 3.3.2.3 Initial Enrolment and Post Enrolment Enrolment is a mandatory phase before any fingerprint verification can be performed. During Initial Enrolment, fingerprints of individuals are captured and transformed into enrolment templates by the Fingerprint Sensor Product. Enrolment templates will be used as a reference to perform Matching Operation with fingerprints captured during the verification phase (Verification Images). Post-Enrolment Template Update is an optional feature that may be supported by the Fingerprint Sensor allowing continuous update and improvement of the stored enrolment template while the Fingerprint Sensor is in verification operation (after the Initial Enrolment phase). The Fingerprint Sensor uses Verification Images obtained during a Verification Capture to improve the quality of the enrolment template. Support of Post-Enrolment Template Update shall be documented in the ICS as well as the maximum number of Post-Enrolment Template Updates that may be supported. If supported by the Fingerprint Sensor, Post-Enrolment Template shall be tested. The Post-Enrolment Template Update process is at the discretion of the Product Provider. if supported, it shall be documented, and the document(s) shall be provided by the Vendor to the Laboratory. Note that for Testing purpose, infinite Post Enrolment Template Update is not supported. The number of Post-Enrolment Template Update cycles performed during testing will be set to the maximum number of template updates documented in the ICS or Thirty (30), whichever is smaller. During testing, the enrolment templates shall be stored the first time upon completion of the Initial Enrolment and a second time upon Complete Enrolment. Reliability and PAD Testing shall be calculated after Initial Enrolment and after Post Enrolment. Note: Failure to Enrol (FTE) has no associated pass criteria but a comment may be added in the TAS if it happens. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 22/32 3.3.2.4 Fingerprint Sensor Characterisation Product Provider may also ask the Laboratory to perform Fingerprint Sensor characterisation. Fingerprint Sensor characterization may be used by Payment Systems to verify that the process of embedding the Fingerprint Sensor into its final form factor (card) has no impact on image quality. This verification is outside the scope of EMV Fingerprint sensor assessment process. Decision to perform characterisation is at the discretion of the Product Provider. The procedure for regression testing consists of evaluating the Fingerprint Sensor Characteristics listed below. • Fingerprint Sensor size and position • Fingerprint Sensor native and effective resolution • Fingerprint Sensor grayscale repartition 3.3.3 Product Provider Decision to Submit The Product Provider determines whether the test results resulting from laboratory testing will be submitted to EMVCo for evaluation. Submitting test reports to EMVCo for evaluation indicates the Product Provider’s acceptance that the test results are a true representation of the performance of its Fingerprint Sensor product. EMVCo does not comment in advance on acceptance of a test report until it has received the completed test report. It is the responsibility of the Product Provider to ensure that all required materials are received by EMVCo prior to the expiration of the ICS validity period. The test report will not be reviewed until EMVCo has received payment of all fees and all required materials. Product Providers may submit the Request for Test Assessment Form before the test report package in order to receive and pay EMVCo’s invoice before testing is completed. 3.3.4 Assessment Phase A. The Product Provider submits a Request for Test Assessment to the Card Type Approval Secretariat (card_approval@emvco.com) that identifies all testing performed on the product and that includes: • The ICS reference number • The Test Report reference from the laboratory The Product Provider shall ask the EMVCo Recognised Laboratory to send the Fingerprint Sensor test report directly to EMVCo. B. The Laboratory submits a test report to the Card Type Approval Secretariat (card_approval@emvco.com). This test report must meet the following requirements: • Test reports must be in electronic format for review. When provided to EMVCo, the test report must follow the EMVCo required format. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 23/32 • Each test report must be digitally signed by the laboratory that performed the tests. • Test reports must include the ICS reference number on the cover page. • Test reports must include all tests performed. • If any modification was made to the ICS during the test session (without any modification to the Fingerprint Sensor product), the test report must identify the reason for the change and must include the laboratory’s assessment of the impact and the tests performed. • Test reports must include a detailed description of any exception test(s) performed or equipment used and a description of the related test results. • Test reports must include a detailed analysis from the laboratory of any test results designated as Fail. Note 1: EMVCo expects all test results in the test reports to have successfully passed. Note 2: If a failure is identified in a test report, the Product Provider must include an impact analysis and a technical explanation of the nonconformance in the Request for Test Assessment. C. Upon receipt of a Request for Test Assessment, EMVCo: • Determines whether the test report has expired. o If so, EMVCo notifies the Product Provider that the test report has expired. The Product Provider shall begin the process again. • Determines whether this is the first Request for Test Assessment submitted with this ICS reference number. o If so, EMVCo issues an invoice to the Product Provider for the applicable fees and waits for payment before proceeding with the next steps Note 3: The Request for Test Assessment will not be reviewed until payment of all required fees and all required items have been received. But it is possible to submit a preliminary Request for Test Assessment Form during the Testing Phase to accelerate the payment (see section 2.3) o If not and if the previously issued invoice has been paid, EMVCo continues with the next step. • Evaluates the submitted functional test report and the ICS submitted with the report. o If there are no issues, EMVCo issues a formal notice of compliance, called the Fingerprint Sensor Test Assessment Summary (TAS). The TAS references the product identification, the report(s) received from the laboratory and all the relevant technical information relating to the Fingerprint Sensor (from the ICS form) o If a test report shows less than 100% successful test results, EMVCo reviews the impact analysis of the non-conformance submitted by the Product © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 24/32 Provider: A TAS may be delivered even if the test report from the Laboratory shows the device has failed one or more test cases. This is because EMVCo may decide the failure is minor and should not affect the assessment. The TAS will contain a note regarding such cases. D. If the functional evaluation is acceptable, the Card Type Approval Secretariat issues an electronic TAS. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 25/32 3.4 Fingerprint Sensor Test Assessment Summary The Fingerprint Sensor Test Assessment Summary (TAS) is addressed to the Product Provider’s primary contacts as identified on the Request for Registration. The TAS is provided by EMVCo as a PDF signed electronically. Acknowledgement is granted for a maximum of three years. TAS only applies to Fingerprint Sensor products that are identical to the product tested by an EMVCo Recognised Laboratory. A Fingerprint Sensor Product should not be considered assessed, nor promoted as assessed, if any aspect of the prototype product is different from that which was tested. For example, if a prototype product contains components: chip, firmware or operating system, that have the same name or model number as those tested, but in fact are not identical to those tested, or have additional functionality not present in what was tested, the Fingerprint Sensor Product should not be considered or promoted as assessed. This also includes activating/deactivating functions and features that were disabled/enabled during testing. The Product Provider shall disclose any restrictions included in the Test Assessment Summary to its customers. A Fingerprint Sensor TAS is published on the EMVCo website © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 26/32 4 Changes to Previously Assessed Fingerprint Sensor Products This chapter outlines a list of possible changes that could be made to the Fingerprint Sensor after TAS delivery and actions that need to be taken by the Product Provider to maintain assessment of the Fingerprint Sensor. The Fingerprint Sensor Product Provider must declare any change to firmware, hardware or architecture of the Fingerprint Sensor that could impact compliance with [REQ]. 4.1 Type of Changes Two different types of changes can be submitted: • Derivative Product is when a product is altered and resubmitted to EMVCo in order to have a new TAS for the altered product. The goal of derivative submissions is to have a TAS for each derivative submitted in addition to the original product. A derivative submission can potentially be eligible for reduced testing (depending on the derivation) and may take advantage of lower administrative fees. See Appendix for test requirements. • A Changed Product is where a product is altered and resubmitted to EMVCo in order to either correct an issue found in the previous test cycle or to update the product. The goal is to have the TAS of the original product replaced by the TAS of the changed product. A changed product submission can potentially be eligible for reduced testing (depending on the change) and can take advantage of lower administrative fees. See Appendix for test requirements In all cases, any change to an assessed product may result in a new TAS following assessment of the changes. The new TAS will have a duration of 3 years independently of the TAS of the parent. 4.2 Change or Derivative Request Process Flow The Product Provider: • Checks Administrative Process to identify the major changes or derivation testing requirements. • Submits an ICS form for the changed/derived Product and selects Submission Type accordingly • Documents in the ICS the type of change in section D (Description/Declaration of change(s) being made) • Follows the standard process (Laboratory will apply reduced testing if applicable) © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 27/32 Note 1: A Product Change or Derivative Request Form can only be submitted while the parent Product’s TAS is valid. Note 2: A Product Change or Derivative testing can be performed by any EMVCo Recognised Laboratory (it is not mandatory to go to the same Laboratory as for the parent). However, using the same Laboratory may allow the Laboratory to reuse existing data from the original products type approval session when applicable. 4.3 Test Requirements for Changed/Derivative Products Change Type Of Change/Derivative Test Requirements ID CH1 CH2 Sensor Hardware change. Sensor MCU change Full testing on new enrolment and acquisition data Full testing on new enrolment and acquisition data CH3 Sensor Firmware change Full testing on new enrolment and acquisition data CH4 CH5 Matching Algorithm change Acquisition Algorithm change Full testing on same enrolment and acquisition data as for the parent (if the dataset still exists) Full testing on new enrolment and acquisition data CH100 CH100 Other change not listed above and impacting the performance of the Fingerprint Sensor Additional Minor change not impacting the performance of the Fingerprint Sensor Case by Case basis. Test Case requirements will be provided by EMVCo in response to the ICS form Case by Case basis. Test Case requirements will be provided by EMVCo in response to the ICS form © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 28/32 5 Test Version and Specification Change The following sections identify the impact on Fingerprint Sensor Assessment procedures when the EMV Biometric Card Provider Requirements [REQ] or EMV Instructions for Fingerprint Sensor Testing [IFST] change. 5.1 Test Cases Change Without EMV Requirements Change Periodically, a Fingerprint Sensor Assessment Bulletin may be published on the EMVCo website announcing the release of new Instructions for Fingerprint Sensor Testing and their activation date, as well as the deactivation date of the previous version. • The new [IFST] are immediately released to the test tool suppliers and Laboratory for implementation. • If required, new versions of the test tools are developed by the Test Tool Providers and subsequently qualified by EMVCo. • Product Providers may choose to have their products tested against the new version of the [IFST] at any time following the activation of the new [IFST] (depending on the availability of a qualified test tool), but no later than the deactivation date of the previous version of the [IFST]. Fingerprint Sensor Assessment Bulletins announcing exceptional revisions to the current version of the [IFST] and their activation date may be published on ad-hoc basis by EMVCo to cater for exceptional interoperability issues. EMVCo reserves the right to change and update the [IFST] at any time; for example, in order to increase the accuracy and performance of the tests. EMVCo will announce on its website the new version of the [IFST] and will set the date(s) for activation of the new version and deactivation of the previous versions and inform Laboratories and Tool Providers. By default, a migration period of 2 months between the activation date and the deactivation date, will apply for new products. Figure 5-1: Release of New Test Cases without EMV Specification Change Test Instructions Version n applicable Release of Test Instructions Version n+1 Migration Period No Test Instructions Version n beyond this date (deactivation date) Development and installation of new Test Instructions Version n+1 Test Instructions Version n+1 applicable Start running new Tests Instructions Version n+1 (activation date) Today Future If a Fingerprint Sensor Product is in an active testing phase, the [IFST] version used shall still be valid on the day that the Product Provider submits the Request for Test Assessment © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 29/32 to EMVCo. EMVCo reserves the right to immediately require the implementation of a new/updated version of the [IFST] at any time. 5.2 Test Cases Change Due to New EMV Requirements or Bulletins The release cycles of EMV Instructions for Fingerprint Sensor Testing [IFST] and EMV Requirements [REQ] and/or Requirements Update Bulletins are coordinated by EMVCo. There is no defined frequency. When it happens: • A new version of the EMV Requirements [REQ] and/or Requirements Update Bulletins is published on the EMVCo website. • Each new version of the [REQ] and each new Requirements Update Bulletin will indicate whether implementation is mandatory or optional and the implementation date. • An Assessment Bulletin is published on the EMVCo website announcing the release of the new version of [REQ], as well as the activation date of the new Instructions for Fingerprint Sensor Testing [IFST] and the deactivation date of the previous version. • When available, the new [IFST] are immediately released to the test tool suppliers and Laboratories for implementation. • New versions of the test tools are developed by the Test Tool Providers and subsequently qualified by EMVCo. • Product Providers may choose to implement the new functionality at any time following the publication of a new version of [REQ] and/or Requirements Update Bulletins, but cannot submit the product for assessment before the new [IFST] version is available. • Product Providers may choose to have their products tested against the new version of the [IFST] at any time following the activation of the new [IFST] (depending on the availability of a qualified test tool), but no later than the deactivation date of the previous version of the [IFST]. EMVCo will announce on its website the new [IFST] version and the date(s) of the activation of the new version and deactivation of the previous versions, and inform Laboratories and Tool Providers. By default, a migration period of 2 months between the activation date and the deactivation date, will apply for new products. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 30/32 Figure 5-2: Release of New Test Cases with EMV Specification or Bulletin Change Beyond this date only card products compliant to the EMV Specification Vn+1 will be supported by EMVCo EMV Specification Vn Card products compliant to old version of the EMV Spec are supported by EMVCo New version Vn+1 of EMV Spec released EMV Spec Vn+1 Test Instructions Vn Applicable No Test Instructions Vn for EMV Spec Vn beyond this date (deactivation date) Migration Period New version Vn+1 of New Test Instructions Vn+1 applicable Test Instructions released Development, Start running new Test Instructions Vn+1 for EMV Spec Vn+1 (activation date) installation of new Test Instructions Vn+1 Today Future EMVCo reserves the right to immediately require the implementation of a new/updated version of the [IFST] at any time. If a Fingerprint Sensor Product is in an active testing phase, the [IFST] version used shall still be valid on the day that the Product Provider submits the Request for Test Assessment to EMVCo. © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 31/32 *** END OF DOCUMENT *** © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Fingerprint Sensor Assessment Administrative Process v1.0 Page 32/32 © 2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries.