PCI Watch

Tracking changes across the Payment Card Industry

TapToMobile User Experience Guidelines v0.1 – Disposition of Comments

v1.0 Specifications
ContactlessMobile NFC Consumer Device

Draft Specification & Bulletin Industry Feedback Form Company Name: Associates Primary Contact Name: n/a Working Group or Task Force: TTM UX TF Document: EMVCo Mobile Payment

  • TapToMobile User Experience Guidelines v0.1 Date: 11 June 2021 Dual/BA/T A/Sub1 Clause No./ Subclause No. /Annex) Paragraph/ Figure/Tabl e/Note Type of comment2 Comment (justification for change) Proposed change CONFIDENTIAL Status (Accept, Reject, In progress) EMVCo Use Only EMVCo observations on each comment submitted Dual Dual 1.1 Last paragraph Ge This document should not be only guidelines, but guidelines and requirements Change the wording (title, introduction…). Most the of the SHOULD or MIGHT are likely to become SHALL. Reject Ge In the opinion of this associate company, in order to ensure fair competition, specific criteria for performances (level 1 or timing) should apply not depending on the type of terminal but on the use case. Reject The mandate for the task force was to generate guidelines only. Requirements would imply a compliance/conformance program which is beyond the mandate of the task force. This is an informative statement. It is not a requirement 1 BA/TA/Dual/Sub = Dual Associate, or Business Associate or Technical Associate, or Subscriber company (enter a 2-4 letter abbreviation for commenting) 2 Type of comment: ge = general te = technical ed = editorial – For technical comments, please indicate whether your comment is a MAJOR or MINOR technical comment. Completed form should be transmitted using EMVCo query system: http://www.emvco.com/subscriber/QueryAdd.aspx, topic "Mobile/General Mobile Payment". 02-Aug-2021 CONFIDENTIAL of 6 Draft Specification & Bulletin Industry Feedback Form Company Name: Associates Primary Contact Name: n/a Working Group or Task Force: TTM UX TF Document: EMVCo Mobile Payment
  • TapToMobile User Experience Guidelines v0.1 Date: 11 June 2021 Dual/BA/T A/Sub1 Clause No./ Subclause No. /Annex) Paragraph/ Figure/Tabl e/Note Type of comment2 Comment (justification for change) Proposed change CONFIDENTIAL Status (Accept, Reject, In progress) EMVCo Use Only EMVCo observations on each comment submitted Dual 1.1 Dual 2.1 Dual 2.1.3 Last paragraph Ge The role of EMVCo is to ensure Modify the guidance to allow the contactless In interoperability in payment transactions. symbol only on POS fully certified with progress The use of the EMVCo contactless symbol standard EMVCo requirements. should only be permitted on devices fully Create an alternative symbol "hotspot compliant with standard EMVCo contactless" for COTS. requirements which prove to allow a good level of interoperability Te MAJOR The goal of Tap to Mobile initiative is to use on the shelf devices. Adding a sticker or anything else to a standard COTS is contrary to the principles of the initiative Suppress paragraph. Reject 3rd paragraph Te MAJOR The correct position of the hotspot symbol is key. When it is displayed, the position depends on the device "The TapToMobile Application shall be able to determine…" Reject This is a decision that is still to be made within EMVCo. These guidelines will be update once the EAP has been completed and depending on the outcome of the EAP, a decision will be made on the use Contactless Symbol or an alternative. The objective of the guidelines is to improve the UX where possible. The sticker is just one example and as these are only guidelines there is no requirement to use a sticker. This is a guideline document not a requirement document 1 BA/TA/Dual/Sub = Dual Associate, or Business Associate or Technical Associate, or Subscriber company (enter a 2-4 letter abbreviation for commenting) 2 Type of comment: ge = general te = technical ed = editorial – For technical comments, please indicate whether your comment is a MAJOR or MINOR technical comment. Completed form should be transmitted using EMVCo query system: http://www.emvco.com/subscriber/QueryAdd.aspx, topic "Mobile/General Mobile Payment". 02-Aug-2021 CONFIDENTIAL of 6 Draft Specification & Bulletin Industry Feedback Form Company Name: Associates Primary Contact Name: n/a Working Group or Task Force: TTM UX TF Document: EMVCo Mobile Payment
  • TapToMobile User Experience Guidelines v0.1 Date: 11 June 2021 Dual/BA/T A/Sub1 Clause No./ Subclause No. /Annex) Paragraph/ Figure/Tabl e/Note Type of comment2 Comment (justification for change) Proposed change Dual 2.1.3 Dual 4.2 Dual 8 Figure Ed Te MAJOR Te The 2 contactless symbols are not at the same height. This may cause a risk of confusion. To ensure consistency of the user experience Visual and Audio indicators should be similar to what is described in EMVCO contactless Book A. There might be privacy concern if the merchant received notifications when the phone is handled to the cardholder. Refer to Book A Chapter 9. In 1.3 add a reference to Book A. Add a best practice to inhibit notifications during the payment transaction CONFIDENTIAL Status (Accept, Reject, In progress) EMVCo Use Only EMVCo observations on each comment submitted Accept The figure will be updated. Reject Reject The objective is to allow the TapToMobile developer to use the extended capabilities of the TapToMobile Devices. The current guideline is considered to be adequate and states that notifications should be supressed where possible. It is probable that suppression may not be possible in all cases. 1 BA/TA/Dual/Sub = Dual Associate, or Business Associate or Technical Associate, or Subscriber company (enter a 2-4 letter abbreviation for commenting) 2 Type of comment: ge = general te = technical ed = editorial – For technical comments, please indicate whether your comment is a MAJOR or MINOR technical comment. Completed form should be transmitted using EMVCo query system: http://www.emvco.com/subscriber/QueryAdd.aspx, topic "Mobile/General Mobile Payment". 02-Aug-2021 CONFIDENTIAL of 6 Draft Specification & Bulletin Industry Feedback Form Company Name: Associates Primary Contact Name: n/a Working Group or Task Force: TTM UX TF Document: EMVCo Mobile Payment
  • TapToMobile User Experience Guidelines v0.1 Date: 11 June 2021 Dual/BA/T A/Sub1 Clause No./ Subclause No. /Annex) Paragraph/ Figure/Tabl e/Note Type of comment2 Comment (justification for change) Proposed change CONFIDENTIAL Status (Accept, Reject, In progress) EMVCo Use Only EMVCo observations on each comment submitted Dual BA 5.1 Dual 5.1 p21 ge The document should indicate what EMVCO documents apply to TaptoMobile. Typically what chapters of Book A apply ? Will requirements of chapter 8 apply? Will the Best Practices for Contactless Acceptance at POS apply? Reject The scope of this document is UX guidelines. It does not cover contactless processing and therefore does not reference such processing or best practices documents. Ge On the PIN entry screen, since this is a consumer grade device, should there be any indicator that it is secure. I know for example on a Samsung device using KNOX when doing PIN entry it is often secure and you see a padlock indicator. Reject As this comment/suggestion is considered to be more relevant to PCI PTS and the SPoC documentation, this is out of scope of these guidelines. There is an ISO standard for PIN entry layout that could be referenced here for clairity Add reference to ISO PIN pad layout standard. This for example avoids the 123 on the top row starting 321 (which can be seen in the field!) Reject EMVCo is not mandating any particular PIN Pad layout nor preventing vendors from using alternatives if they see fit. The suggestion in the guidelines is to skew towards familiarity. 1 BA/TA/Dual/Sub = Dual Associate, or Business Associate or Technical Associate, or Subscriber company (enter a 2-4 letter abbreviation for commenting) 2 Type of comment: ge = general te = technical ed = editorial – For technical comments, please indicate whether your comment is a MAJOR or MINOR technical comment. Completed form should be transmitted using EMVCo query system: http://www.emvco.com/subscriber/QueryAdd.aspx, topic "Mobile/General Mobile Payment". 02-Aug-2021 CONFIDENTIAL of 6 Draft Specification & Bulletin Industry Feedback Form Company Name: Associates Primary Contact Name: n/a Working Group or Task Force: TTM UX TF Document: EMVCo Mobile Payment
  • TapToMobile User Experience Guidelines v0.1 Date: 11 June 2021 Dual/BA/T A/Sub1 Clause No./ Subclause No. /Annex) Paragraph/ Figure/Tabl e/Note Type of comment2 Comment (justification for change) Proposed change CONFIDENTIAL Status (Accept, Reject, In progress) EMVCo Use Only EMVCo observations on each comment submitted Dual general Dual 4.2 p 18 4 Real world observations of interactions will reveal a lot about how things actually progress. For example merchants often show the screen then take the card from the cardholder to tap. Suggest the working group get real evidence from observations in the real world of interactions between cardholder and merchant. Reject The dual audible tone is a good idea, note that this request is also being asked for by unattended terminal providers who see more contactless transactions. At Self operated checkouts a loud ‘this transaction was declined after authorization’ tone would help to avoid walk-away fraud. Its not clear if the failure should be an incorrect read, or a decline after authorization (or other failure like a timeout) Be more specific about where the failure alert tone will be used. Reject The TF has gathered real world evidence / observations from projects / pilots that individual member organizations have participated in. These observations have been reflected in the guidelines. These are guidelines. At this point in time EMVCo is not aiming to get a globally interoperable UX for TapToMobile solutions. 1 BA/TA/Dual/Sub = Dual Associate, or Business Associate or Technical Associate, or Subscriber company (enter a 2-4 letter abbreviation for commenting) 2 Type of comment: ge = general te = technical ed = editorial – For technical comments, please indicate whether your comment is a MAJOR or MINOR technical comment. Completed form should be transmitted using EMVCo query system: http://www.emvco.com/subscriber/QueryAdd.aspx, topic "Mobile/General Mobile Payment". 02-Aug-2021 CONFIDENTIAL of 6 Draft Specification & Bulletin Industry Feedback Form Company Name: Associates Primary Contact Name: n/a Working Group or Task Force: TTM UX TF Document: EMVCo Mobile Payment
  • TapToMobile User Experience Guidelines v0.1 Date: 11 June 2021 Dual/BA/T A/Sub1 Clause No./ Subclause No. /Annex) Paragraph/ Figure/Tabl e/Note Type of comment2 Comment (justification for change) Proposed change NOTE: EMVCo welcome further feedback on observations/responses provided via the query system on https://www.emvco.com/submit-a-query/ and use topic "Mobile/General Mobile Payment" CONFIDENTIAL Status (Accept, Reject, In progress) EMVCo Use Only EMVCo observations on each comment submitted 1 BA/TA/Dual/Sub = Dual Associate, or Business Associate or Technical Associate, or Subscriber company (enter a 2-4 letter abbreviation for commenting) 2 Type of comment: ge = general te = technical ed = editorial – For technical comments, please indicate whether your comment is a MAJOR or MINOR technical comment. Completed form should be transmitted using EMVCo query system: http://www.emvco.com/subscriber/QueryAdd.aspx, topic "Mobile/General Mobile Payment". 02-Aug-2021 CONFIDENTIAL of 6