All Secure Technology Alliance Publications
The following is a list of all Alliance reports and white papers in alphabetical order. Click here to find reports by category.
The Smart Card Alliance Identity Council developed this position paper to provide the Alliance interpretation and position on the OMB-defined levels of assurance.
This brief was developed by the Smart Card Alliance Healthcare Council to describe the benefits of smart cards for healthcare applications and to provide a comparison with magnetic stripe cards.
This document was developed by the Health and Human Services Council in response to the GAO report, “Potential Uses of Electronically Readable Cards for Beneficiaries and Providers.” The document discusses the benefits of implementing strong authentication for beneficiaries and providers using smart card technology.
The U.S. Payments Forum Transit Contactless Open Payments Working Committee developed this resource to outline customer communication best practices for contactless open payments acceptance in transit.
This white paper was developed by the Secure Technology Alliance Payments Council to provide a primer on biometric payment cards for issuers, issuer processors, payment networks and merchants. The white focuses on a specific implementation – one that incorporates fingerprint capture, template storage, and matching on the payment card itself – and reviews the biometric payment card technology and transaction process, key benefits, implementation considerations, and real-world examples.
This Secure Technology Alliance Payments Council webinar provides a primer on biometric payment cards that use fingerprints to authenticate the cardholder. New technologies that enable template matching and storage in the secure element, battery-free operation, and fast transactions are being showcased in pilots and proof-of-concept launches around the world. Webinar topics include: overview of biometric payment card technology; user experience and implementation considerations for biometric payment cards; examples of real-world implementations.
The Smart Card Alliance Mobile and NFC Council developed this primer to provide an educational resource on Bluetooth low energy, describing what it is, how it’s used, how it fits with other mobile technologies, and what security aspects should be considered for BLE-enabled applications.
This U.S. Payments Forum resource provides implementation guidance on application selection logic used by U.S. POS terminals to enable interoperability when processing Canadian cards.
The U.S. Payments Forum CNP Fraud Working Committee developed this white paper to provide a resource profiling different CNP fraud mitigation techniques.
The Smart Card Alliance Payments Council developed this white paper to educate payment industry stakeholders about the impact of and need to further address card-not-present fraud in conjunction with migration to EMV in the U.S. The paper summarizes recent trends in e-commerce and various types of fraud. The paper then briefly defines authentication, lists the building blocks commonly used to design authentication processes, and discusses both merchant and issuer considerations. The paper concludes with a brief discussion of historical approaches to combatting CNP fraud.
The Smart Card Alliance developed this white paper to educate stakeholders across the payments value chain about the critical aspects of deploying an EMV solution in their business environments in the U.S. The white paper describes the current state of the payments infrastructure in the U.S., discusses the impact of the global deployment of EMV on possible roadmaps, and provides a primer on EMV card authentication, cardholder verification and transaction authorization methods. For each stakeholder (issuers, merchants, acquirers/processors and ATM owners), the white paper outlines actions that need to be taken to issue EMV cards, and to accept and process EMV transactions.
The Smart Card Alliance Payments Council developed this white paper to describe the changing U.S. payments landscape for purchases at physical stores. The white paper reviews new innovations in payment trends and devices, discusses the impact on EMV migration, and offers perspectives on how these trends are changing the way consumers pay and merchants accept card-present transactions.
The Payments Security Task Force and U.S. Payments Forum collaborated to develop educational chip education webcasts for U.S. value added resellers, independent software vendors and merchant.
The Smart Card Alliance developed this white paper to describe chip-enabled mobile marketing and discuss the value propositions and implementation approaches. The white paper includes an overview of mobile marketing applications and approaches, the value proposition of chip-enabled mobile marketing, use cases for chip-enabled mobile marketing (with 20 pilots or commercial services profiled), and implementation approaches.
- The Commercial Identity Verification (CIV) Credential–Leveraging FIPS 201 and the PIV Specifications
This white paper was developed by the Smart Card Alliance Physical Access Council to provide guidance on how enterprises can take advantage of FIPS 201 and the PIV credential specifications to implement a standards-based commercial identity credentialing program. The white paper defines the Commercial Identity Verification (CIV) credential as a credential that uses the same technology and data model as the PIV-I credential.
This brief was developed by the Smart Card Alliance Access Control Council to provide an easy-to-use comparison of Personal Identity Verification (PIV), PIV-Interoperable (PIV-I) and Commercial Identity Verification (CIV) credentials.
Version 1.1 of the Workgroup for Electronic Data Interchange’s (WEDI) Health Identification Card Implementation Guide includes Integrated Circuit Cards (ICC), commonly known as smart cards, as an appropriate card type. For organizations considering upgrading their member identity cards to smart cards, this document serves as a supplement to the WEDI Health Identification Card Implementation Guide. It provides WEDI-compliant smart card designs and includes a discussion of the features and benefits of smart ID cards for healthcare providers and payers.
This U.S. Payments Forum white paper describes best practices for implementing contactless at the POS to reduce stakeholder and consumer confusion and to help contactless deliver fully on its benefits to merchants, issuers, consumers, and the entire payments ecosystem.
This U.S. Payments Forum webinar describes best practices for implementing contactless at the POS, including consumer communications, consumer transaction prompting and flow and cashier training.
The U.S. Payments Forum developed this resource provide education on consumer interactions with payment terminals that can be used to develop practical guidance for safer in-store payments.
This U.S. Payments Forum presentation provides a clear description of how an EMV transaction is secured using “cryptograms.” The presentation utilizes animation, straightforward messaging, and commentary to help the viewer understand the concept of cryptogram creation and validation in an EMV transaction.
The Smart Card Alliance Payments Council developed this white paper to describe the value propositions of contactless EMV payments for issuers and merchants. The white paper provides a fresh look at contactless payments in the current U.S. payments environment that is embracing both EMV and NFC-enabled mobile devices.
This Smart Card Alliance Payments Council webinar discussed the opportunities that contactless EMV payments offer to issuers. The webinar answered the most important questions about the adoption of contactless payments, such as: how contactless fits into today’s payment industry; what is different from earlier adoption attempts; and why the ideal time to go contactless is now.
This Smart Card Alliance Payments Council webinar discussed the opportunities that contactless EMV payments offer to merchants. The webinar answered the most important questions about the adoption of contactless payments, such as: how contactless fits into today’s payment industry; what is different from earlier adoption attempts; and why the ideal time to go contactless is now.
The U.S. Payments Forum developed this resource to provide guidance on how contactless limits are used during EMV contactless transaction processing in the U.S.
The U.S. Payments Forum developed this white paper to provide a resource to help merchants, issuers and acquirers understand the contactless operating mode rules set by each of the payment networks.
This Secure Technology Alliance Payments Council webinar discussed the status of U.S. and global contactless deployment, the issuer benefits of contactless payments and key issuer implementation considerations.
This Secure Technology Alliance Payments Council webinar discussed the status of U.S. and global contactless deployment, the merchant benefits of contactless payments and key issuer implementation considerations.
The Smart Card Alliance Payments Council developed two infographics to summarize the benefits of contactless EMV payments for issuers and merchants.
This document was developed by the Smart Card Alliance to address questions raised by the media about the security of contactless payment transactions and the risk of fraud to consumers.
The U.S. Payments Forum created this guide to provide accurate information for all stakeholders communicating about contact and contactless chip technology, including card issuers, retailers and the media.
This U.S. Payments Forum resource provides the issuing community with an educational resource on ODA and provides recommendations for issuing and personalizing dual-interface cards for the U.S. market.
This white paper was developed by the Secure Technology Alliance Payments Council to provide a primer on dynamic security code cards, their benefits for issuers, merchants and cardholders, and implementation impact on payments stakeholders.
This Secure Technology Alliance Payments Council webinar provides a comprehensive view of dynamic security code card technology and outlines the benefits of and considerations for implementation.
This recorded U.S. Payments Forum webinar provides guidance to help industry stakeholders create sound communication strategies that will help the U.S. market understand and embrace chip payments and their many security benefits.
Government policy makers are looking carefully at the best ways to improve the efficiency of information systems in the healthcare industry. Much emphasis has been placed on the need for electronic health records for every American, and at ways to exchange those records at the regional, state and national levels. This brief was developed by the Smart Card Alliance Healthcare and Identity Councils to introduce the current problems with healthcare identity management, security and privacy, and propose leveraging existing federal standards and technologies already used in other government identity programs.
This white paper was developed by the Secure Technology Alliance Payments Council to propose a framework for supporting open payment for electric vehicle charging when ISO 15118 is implemented.
This Secure Technology Alliance Payments Council webinar discusses the current status of electric vehicle charging payments and present emerging standards and technologies that will enable convenient, secure payments. The approaches discussed in this webinar will address the uncertainty EV drivers face when charging their vehicles, and ultimately work towards helping to drive EV adoption and use.
The Smart Card Alliance IoT Security Council developed this white paper to describe the value of embedded hardware security in end devices used in IoT applications.
This white paper was developed by the Secure Technology Alliance Payments Council to provide a primer on the EMVCo Payment Account Reference (PAR), document expected use cases for the PAR and describe the impact of PAR implementation on key payments ecosystem stakeholders.
The U.S. Payments Forum CNP Fraud Working Committee developed this white paper to provide a primer on the EMV 3DS protocol, its features and the data and transaction process.
This recorded U.S. Payments Forum webinar provides a primer on EMV chip payments, including the EMV transaction flow and options for card authentication, cardholder verification and transaction authorization.
This white paper provides an educational resource on EMV chip migration for the healthcare industry. The white paper describes EMV chip technology, discusses the impact of EMV for healthcare providers and hospital systems, and outlines how the healthcare industry can prepare for EMV chip migration.
The Smart Card Alliance Mobile and NFC Council and Payments Council developed this white paper to explain how EMV and NFC are companion technologies and clarify how they work together to enable secure payments. The white paper discusses the current status of EMV chip migration in the U.S., predictions for contactless payment, the intersection of EMV contact, contactless and dual interface chip cards and mobile NFC devices for payment, and key considerations for contactless payment implementations.
The Smart Card Alliance Transportation Council white paper, EMV and Parking, was developed in partnership with the International Parking Institute. The updated white paper provides parking industry stakeholders with an educational resource about the critical aspects of deploying an EMV solution in the parking infrastructure. The white paper provides an overview of EMV chip technology and describes key considerations and refreshed implementation scenarios for parking industry stakeholders who want to accept and process EMV chip transactions in both attended and unattended environments.
The Smart Card Alliance Payments Council developed this interactive PowerPoint presentation as an educational resource for the payments industry. The presentation shows the full EMV ecosystem, with participants who play roles in EMV issuance, acceptance and transaction processes. The presentation provides details on the participant’s role, example organizations that play this role, and key links with other ecosystem participants.
This U.S. Payments Forum infographic was designed to answer the key questions surrounding the U.S. migration to EMV chip cards for payment. From this infographic, readers will learn what the migration is and when it will happen; the security features of chip cards; what will change for the consumer; and how the payment process works with chip cards.
This FAQ was developed by the Smart Card Alliance to answer questions about EMV.
The U.S. Payments Forum Testing and Certification Working Committee developed this resource to discuss challenges and potential solutions to implementation and deployment of Level 3 (L3) certified EMV contactless implementations for merchants.
With Mexico and Brazil already well on their way to full migration, the Smart Card Alliance Latin America and Visa Inc. commissioned First Annapolis Consulting to survey issuers and acquirers in Brazil and Mexico on the current state of EMV migration and the long-term growth of the EMV market. The resulting report provides a detailed review of the adoption drivers, implementation considerations, migration strategies, business impact and evolution for Brazilian and Mexican issuers and acquirers. The study forecasts the size of the EMV/chip market in Brazil and Mexico through 2015, including chip cards, point-of-sale terminals and transactions. The report is available for a fee to both non-members and Smart card Alliance members.
The U.S. Payments Forum Mobile and Contactless Payments Working Committee developed this white paper to provide a primer on EMV payment tokenization and describe implementation lessons learned.
The U.S. Payments Forum Testing and Certification Working Committee developed this white paper to define the current processes required to test EMV chip transactions with MasterCard, Visa, American Express, and Discover. The white paper is intended to provide a clear approach to acquirer host and EMV chip terminal testing and certification, and includes examples of common use cases.
This Smart Card Alliance Mobile Council webinar provided an overview of EMV tokenization, reviewed the requirements for token service providers, discussed the tokenization methods used in digital wallets like Apple Pay, Samsung Pay and Android Pay, as well as in-app purchases, and addressed tokenization implementation and security considerations.
This recorded U.S. Payments Forum workshop provides a comprehensive review of chip technology and focused sessions on the development process and implementation best practices.
The Smart Card Alliance and EMVCo hosted a two-part webinar series to review the status of payment specifications and tokenization. The first webinar discussed progress made by the U.S. market in adopting EMV chip payments, contactless mobile payments and payment tokenization and described the evolution of EMVCo’s scope from the original EMV Chip Specification to now include card and terminal type approval, interoperability, contactless, mobile, next generation payment, and the specifications for payment tokenization and 3D Secure 2.0. The second webinar provided a deep dive into payment tokenization, covering how tokenization provides a layer security approach for payments and what EMVCo’s current payment tokenization activities and priorities are.
The new electronic passports (ePassports) include digital and physical security technologies that are integrated together to provide significantly higher levels of security. ePassports use advanced technologies that secure identities and new processes throughout the entire chain of trust – from manufacturing to use of the ePassport. This frequently asked questions (FAQ) document was developed by the Smart Card Alliance Identity Council to answer questions about how the ePassport works and what technology is used to protect an ePassport holder’s personal information.
The Smart Card Alliance Identity Council and Physical Access Council developed the summary of the Federal Identity, Credential, and Access Management (FICAM) Roadmap and Implementation Guidance to highlight key concepts and to make it more accessible to its target audiences. In developing and publishing the summary, the Smart Card Alliance hopes to expand the audience reading the document and promote its concepts broadly through the identity, credential and access management industry. The summary includes the FICAM segment architecture, as-is and target use cases, and roadmap and initiatives for Federal implementation of the FICAM architecture.
This Physical Access Council white paper provides a roadmap to the key specifications that agencies need to consider in implementing FIPS 201-compliant physical access control systems and provides an overview of the key open questions where work is still being done on standards definition and implementation guidance.
The Smart Card Alliance Physical Access Council developed this white paper to discuss factors that impact PIV II card transaction performance in PACS applications and provide recommendations on data encoding, user training and installation that can improve the user experience and reduce PIV II card PACS transaction time.
The U.S. Payments Forum developed this web site to provide easy-to-use resources for merchants interested in enabling consumers to make contactless payments.
“Meaningful use” has the top priority of today’s healthcare industry. In 2010, the government, healthcare organizations, consumers and technology providers came together to move toward interoperable electronic health records that can transform the healthcare industry. This white paper outlines the ways in which smart card-based systems can better position healthcare organizations and providers for meaningful use of electronic health records, while addressing many of the security and privacy challenges that come with electronic health records and health data exchange.
The U.S. Payments Forum developed this resource to provide an understanding of the global chip supply challenges and potential impacts to the payments ecosystem.
The U.S. Payments Forum developed a glossary that defines a set of standard terminology for common chip, EMV, and EMV migration terms for use in educational and marketing communications relating to the U.S. migration.
Developed by the U.S. Payments Forum and the Payments Security Task Force for consumers, merchants and issuers, the GoChipCard.com web site provides easy-to-use and simple resources, and consistent messages about chip cards and their use.
GSA published this guide with contributions from Secure Technology Alliance Access Control Council resources and members. The guide presents the concepts related to Federal Identity, Credential, and Access Management-compliant PACS.
This resource was developed by the Smart Card Alliance Access Control Council to provide a tool for architects, engineers, consultants, integrators, manufacturers and end users to incorporate smart card-based physical access control cards and readers into specifications. The resource includes a specification that can be “cut and pasted” into a bid specification.
This U.S. Payments Forum white paper provides guidelines and best practices for accepting contactless transactions completed with Near Field Communication (NFC)-enabled mobile wallets and contactless-enabled chip cards at the ATM.
The Smart Card Alliance Health and Human Services Council developed this infographic to depict the impact of smart card technology on the future of healthcare identity authentication and suggest how current challenges can be solved through interoperability, increased security, and multi-factor authentication.
This white paper was developed for healthcare CFOs by the Smart Card Alliance to outline the key benefits and business case for using smart cards for healthcare applications. The white paper outlines some of the major challenges faced by healthcare CFOs and discusses how smart card technology can provide innovative, practical and cost-effective solutions.
The Smart Card Alliance Health and Human Services Council developed this white paper to outline a vision for healthcare identity authentication and payments convergence and to provide insight into the opportunities and challenges afforded to the healthcare community as the U.S. migrates to EMV.
Policy makers are looking carefully at the best ways to improve our healthcare system with much emphasis being placed on the need for electronic health records for every American. This effort also includes creating an infrastructure to allow the exchange of these records at the regional, state and national levels. This paper introduces the current challenges and explains why identity management in healthcare is an essential and foundational element that must be made a priority by policy makers in order to achieve the goals of widespread use of electronic health records to support the secure and seamless exchange of healthcare information. The paper also recommends best practices for introducing a healthcare identity management infrastructure–one that provides the needed security and privacy controls that should be specified by policy makers.
This report discusses how smart cards can help health care providers and insurance companies meet the requirements of HIPAA Privacy and Security Rules. Designed as an educational overview for decision makers, it summarizes the HIPAA privacy and security requirements, provides an overview on how smart cards work, describes how smart cards can be used to support HIPAA compliance and implement other health care applications, and outlines key implementation success factors. The report includes profiles of several U.S. and international smart health card implementations.
The Smart Card Alliance Mobile and NFC Council developed this white paper to provide an educational resource on host card emulation (HCE), describing what it is, how it’s used, how it compares with the secure element (SE)-based card emulation approach, what key considerations are for payment applications, and what security aspects should be considered for HCE-enabled applications.
The Smart Card Alliance Mobile and NFC Council hosted this webinar to describe Host Card Emulation (HCE), discuss security approaches that can be used to mitigate HCE-related risks and describe real-world HCE implementations.
The U.S. Payments Forum Mobile and Contactless Payments Working Committee developed this white paper to provide an overview of emerging data elements and their use in face-to-face transactions initiated from non-traditional payment devices.
The Smart Card Alliance developed this position paper to describe the issues with unique identifiers and discuss how smart cards can be used as authenticators when using unique identifiers.
The Smart Card Alliance Identity Council developed this glossary to define commonly used terms related to identity and smart card technology and applications.
This position paper describes key elements in the design of an identity management system that affect privacy and security and the benefits that smart cards bring to identity management systems.
This FAQ answers questions about privacy, security and smart card benefits for identity management systems.
The Smart Card Alliance IoTSecurityConnection.com content portal provides educational resources and guidance for implementing secure IoT architectures using embedded security and privacy technology. The portal features relevant news, resources, expert commentary and thought leadership on the security and privacy of IoT for technology and service providers, IT and security experts, integrators, consultants and IoT enthusiasts.
This U.S. Payments Forum white paper provides guidance provide for ATM owners and issuers who are contemplating implementing PIN change at the ATM as part of, or subsequent to, their U.S. EMV migration. The white paper covers major considerations, including: PIN change in the magnetic stripe and EMV environments; current global payment network offerings supporting PIN change; key decisions and additional considerations for ATM owners and issuers.
This U.S. Payments Forum white paper provides guidance to ATM providers, acquirers, processors, and vendors who are preparing to implement EMV at the ATM in the United States. It includes information about which functions must be implemented to provide EMV compliance at the ATM, as well as recommended planning activities for EMV implementation. Technical details about an EMV transaction are also included.
The U.S. Payments Forum developed this resource to provide guidance for industry stakeholders about the introduction of 8-Digit BINs
This guide was developed by the Secure Technology Alliance Access Control Council to identify the essentials for a successful deployment of a physical access control system (PACS) that complies with Federal Information Processing Standard (FIPS) 201 and provide a streamlined, practical, layman’s version of the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-116 R1.
The U.S. Payments Forum Knowledge Center is the online resource library for all stakeholders involved in U.S. EMV implementation. The Knowledge Center has gathered white papers, links, industry best practices and other resources from across the web, all relevant to EMV migration in the U.S.
This U.S. Payments Forum document provides information on how to best manage tips and gratuities as the U.S. migrates to chip, and what options restaurant owners and other merchants in travel and entertainment can pursue. This document is intended to provide a high-level overview of tip processing in EMV chip environment.
Healthcare data breaches and medical identity theft are growing problems as the healthcare industry moves to electronic health records and health information exchanges. This brief describes the security and privacy issues that the healthcare industry is facing and advocates that the industry move to strong identity management practices and technology solutions to improve the privacy and security of health information systems and electronic health records.
This recorded U.S. Payments Forum webinar provides guidance on the status of the U.S. migration, considerations for making the decision to accept chip payments, and tools to begin project planning for chip card acceptance implementation.
This U.S. Payments Forum resource defines the minimum card and terminal EMV requirements for payment networks American Express, Armed Forces Financial Network (AFFN), China UnionPay, Discover, Jeanie, MasterCard, NYCE, PULSE, SHAZAM, STAR and Visa, in the context of the U.S. electronic payments marketplace and the October 2015 liability shifts.
The Smart Card Alliance Mobile and NFC Council, in partnership with GlobalPlatform and the NFC Forum, hosted a series of four webinars on mobile and NFC security fundamentals. The goal of the webinar series was to provide an educational resource for mobile application developers and the mobile community on the choices for security implementations for NFC applications.
This U.S. Payments Forum webinar series provided an in-depth review of mobile wallet models, security approaches and key merchant and issuer considerations for adoption.
The Smart Card Alliance Mobile and NFC Council developed a reference guide to mobile/NFC standards and an interactive PowerPoint tool to educate industry stakeholders broadly on the standards, specifications and certification requirements for the NFC ecosystem. The resources list standards and specifications that are relevant when deploying different NFC applications.
This brief was developed by the Smart Card Alliance Identity Council to present the vision of the secure use of mobile devices for identity applications and to describe different use cases for current and NFC-enabled mobile devices.
This Secure Technology Alliance Identity Council webinar series discusses mobile driver’s licenses (mDLs) and the impact they will have on identity verification as state issuing agencies and relying parties adopt the technology.
This white paper was developed by the Secure Technology Alliance Mobile Council to provide an overview of mobile ID authentication, to highlight use cases that rely on secure user credentials stored on a mobile device, and to provide some perspectives on how emerging technologies and standards are addressing the growing need for mobile ID authentication. Use cases highlighted include access control, payments, government-to-consumer services, and corporate applications.
The Smart Card Alliance developed this white paper to provide an overview of the current state of the market for mobile payments and NFC-enabled payment applications in the U.S and to discuss the advantages and disadvantages of different mobile payment approaches. The white paper describes mobile financial applications in use today, discusses the different mobile payments approaches, provides an update on the status of NFC mobile contactless payments infrastructure in the U.S., and evaluates how different mobile payment approaches fulfill overall market requirements.
The Secure Technology Alliance Transportation Council white paper, Multimodal Payments Convergence – Part One: Emerging Models and Use Cases, was developed in collaboration with the Association for Commuter Transportation to explore the rapidly evolving convergence of multimodal payments. The white paper describes emerging types of payments convergence and provides current examples of convergence.
The Secure Technology Alliance Transportation Council white paper, Multimodal Payments Convergence – Part Two: Challenges and Opportunities for Implementation, was developed to describe alternative visions of multimodal payments, the drivers and benefits of payments convergence, potential barriers to implementation and suggestions for actions to achieve payments convergence.
The U.S. Payments Forum Mobile and Contactless Payments Working Committee developed this reference to list standards and standards bodies that are applicable to mobile or contactless payments.
This white paper was developed by the Smart Card Alliance Transportation Council to discuss mobile applications that are relevant to the transit industry and to provide an overview of the benefits and implementation considerations for NFC applications.
-
Near-Term Solutions to Address the Growing Threat of Card-Not-Present Fraud
This U.S. Payments Forum white paper provides an educational resource on the existing best practices for authentication methods and fraud tools to secure the card-not-present (CNP) channel, given the potential increase in CNP fraud as EMV chip cards replace magnetic stripe only cards in the U.S.
The Smart Card Alliance Mobile and NFC Council hosted a series of webinars to describe the wide variety of NFC applications and the ecosystem participants that are involved in delivering those applications.
This FAQ was developed by the Smart Card Alliance to answer questions about Near Field Communication (NFC) technology and NFC-enabled applications.
The Smart Card Alliance Mobile and NFC Council developed this white paper to provide an educational resource that highlights the different NFC non-payments use cases, describes commercial and pilot use case implementations, and discusses security and implementation considerations. The white paper discusses use cases for marketing (loyalty, coupons and offers), identity and access (hospitality check-in, boarding passes, physical access control, automotive and healthcare), ticketing (transit and event) and gaming.
The U.S. Payments Forum Testing and Certification Working Committee developed this resource to discuss solutions to help reduce the implementation time and effort required for the AFD community to meet the October 2020 fraud liability shift deadline.
The U.S. Payments Forum developed this resource to provide overview of Account Takeover fraud.
This white paper was developed by the Smart Card Alliance Physical Access Council and Identity Council to describe the benefits of FIPS 201, PIV standards and PIV-I framework for state and local governments to enable interoperability and trust across different government issuers for a wide variety of identity credentialing programs. The white paper discusses policy, process and technology considerations related to the implementation of state and local government identity credentialing initiatives. The white paper summarizes important aspects of the current state of policy, process and technology and identifies opportunities to support additional work to further improve each through the use of the PIV-I framework and the PIV standard.
This guidance document was developed by the Smart Card Alliance Access Control Council and Identity Council to help users diagnose the cause of any PIV card/reader issues with physical access control systems and provide troubleshooting guidance to quickly identify corrective actions.
This white paper was developed by the Smart Card Alliance Identity Council to document the benefits of using PIV-interoperable credentials for enterprises and to provide implementation case studies of enterprises that are issuing or planning to issue PIV-I credentials.
- Planning for New Fare Payment and Collection Systems: Cost Considerations and Procurement Guidelines
This white paper was developed by the Smart Card Alliance Transportation Council to present a conventional approach for planning, conducting a cost analysis, and procuring a new fare payment system or upgrading an existing system. Additionally, a cost model is presented that allows the user to input an agency’s current fare payment and fare collection costs and compare them to the costs for proposed alternative systems. The cost model is available as an Excel workbook and provides an interactive tool for agencies to use to assess different fare payment system alternatives.
State policy makers are looking carefully at the use of RFID technology in identity cards and the implications that holds for protecting privacy and personal information in identity applications and systems. This brief was developed by the Smart Card Alliance Identity Council to examine best practices for privacy-secure identity systems from the point of view of card technologies.
This U.S. Payments Forum guide provides a step-by-step resource for issuers and merchants to develop effective messaging and education approaches during the U.S. migration to chip technology. The guide recommends a consistent, continuous and multi-channel approach to provide specific details on chip technology use and security benefits within each stage of the migration.
The Smart Card Alliance Transportation Council white paper, Reference Enterprise Architecture for Transit Open Payment System, was developed to support developers, integrators, procurers, and users of open payment systems for transit and transportation services with a framework for specifying, developing, integrating and managing the lifecycle and evolution of these systems. The framework provides a model for implementing a seamless fare payment system that traverses transportation modes, jurisdictions, markets, and technologies.
This Smart Card Alliance white paper compares RFID technology and RF-enabled smart cards and describes key requirements in RF-enabled applications.
The Alliance IoT Security Council developed and submitted this response to the NIST invitation for stakeholder input outlined in the NIST “IoT Security and Privacy Risk Considerations” document.
This white paper provides an overview of the ecosystem of proximity mobile payments. It introduces the stakeholders in the mobile payment ecosystem and describes their roles and responsibilities in assuring the security of sensitive data. It explains how the payment application, consumer credentials and consumer account information are securely delivered to, loaded on and stored in a mobile device. It explains how a mobile device transmits data to a merchant at the point of sale, identifies risks present during the lifecycle of the payment device, and suggests countermeasures. It also identifies industry standards and certifications organization organizations that address this ecosystem.
The Smart Card Alliance Transportation Council developed this white paper to provide the transit and financial industries with an educational overview of the various methods available for providing and re-loading fare media to individuals who do not have credit or debit cards, nor checking or savings accounts, and generally lack relationships with traditional banking institutions.
This white paper was developed by the Smart Card Alliance Healthcare Council to describe the value that smart cards deliver in a variety of U.S. healthcare applications. Developed as an educational overview for executives and senior managers in healthcare provider organizations, it reviews key challenges that the U.S. healthcare provider industry faces and examines the key drivers for implementing smart card-based systems to address these challenges. The white paper concludes with profiles of a number of organizations who are implementing smart cards illustrating the diversity of applications that are enabled by smart card technology and the business benefits that the technology delivers to healthcare organizations.
The Smart Card Alliance Access Control Council developed this position paper to highlight the impact of the OMB Circular A-130 Managing Information as a Strategic Resource 2016 update on the access control industry and on government agencies procuring and implementing access control systems.
This white paper was developed by the Smart Card Alliance Physical Access Council to describe the benefits of combining smart cards and biometrics to enable strong verification and authentication of an individual’s identity. The white paper provides an overview of biometrics technology, discusses how it’s used for identification and verification, and describes the benefits of using smart cards and biometrics to enable strong verification and authentication of the cardholder’s identity. The white paper includes eight case study examples of identity verification systems that combine smart cards and biometrics, including the Singapore Immigration Automated Clearance System, the Canadian Airport Restricted Area Identification Card, Amsterdam Schiphol Airport workforce ID card, the University of Arizona Keyless Access Security System, the FIPS 201 Personal Identity Verification (PIV) card, the U.S. Department of Defense Common Access Card (CAC), the U.S. Transportation Worker Identification Credential (TWIC), and the electronic passport.
This white paper was developed by the Smart Card Alliance Healthcare Council to provide an overview of smart card and biometric technologies, discuss the key considerations for selecting biometric and smart card technology for identity verification, and describe the benefits of combining smart cards and biometrics for identity applications.
The Smart Card Alliance Identity Council developed this white paper to describe the role of smart card technology in implementations of the FIDO protocols.
The Smart Card Alliance Identity Council developed this white paper to describe the benefits of combining smart card technology and strong credentials within the National Strategy for Trusted Identities in Cyberspace (NSTIC).
This frequently asked questions document was developed to answer questions about how smart cards work and how the technology is used to manage patient identity and protect a healthcare consumer’s personal information.
This white paper was developed by the Smart Card Alliance Healthcare Council to describe the benefits of smart cards to healthcare industry participants. The paper describes the challenges within the healthcare industry and the clear opportunities for the use of smart card technology for security and privacy in healthcare. The paper examines smart card use in healthcare today and suggests additional applications for consideration.
This white paper presents key encryption as a viable approach to safeguarding sensitive data in the public and private sectors, explores the use of Hardware Security Modules (HSM) and delves into effective key lifecycle management.
This white paper was developed by the Smart Card Alliance Access Control Council to discuss the benefits of using smart card technology for strong authentication for logical access.
The Smart Card Alliance Identity Council, Mobile and NFC Council and Access Control Council developed this white paper to provide guidance to U.S. Government policy makers and technologists on the key technical, business and policy considerations for supporting the Personal Identity Verification (PIV) application and credentials on mobile devices using the UICC.
The Smart Card Alliance Payments Council developed this white paper to describe the role of EMV, encryption and tokenization for securing the payments infrastructure and preventing payment fraud. This white paper provides an overview of the three technologies and describes how each addresses payments security. The white paper concludes with a discussion of how payments industry implementation of the three technologies together secures the payments infrastructure and prevents payment fraud.
The Secure Technology Alliance Access Control Council developed this white paper to recommend an approach for implementing temporary identity credentials for physical PACS in federal agencies
The U.S. Payments Forum developed this resource to provide practical tips for a “cleaner” payment experience for merchants, ATM owners and consumers.
This white paper was developed by the Smart Card Alliance Transportation Council to inform the transit industry of the opportunities, benefits and challenges of accepting contactless open bank cards for fare payment and to inform the bank card industry of unique requirements for transit fare collection.
This U.S. Payments Forum Transit Contactless Open Payments Working Committee resource provides technical solution guidance for implementing transit contactless open payments use cases with contactless EMV cards and NFC-enabled mobile devices.
The Smart Card Alliance Payments Council recently published a white paper, The True Cost of Data Breaches in the Payments Industry, to provide an educational resource for payments industry stakeholders on the potential tangible and intangible costs that could be incurred during a data breach.
This U.S. Payments Forum white paper reviews use cases illustrating the hard and soft costs of fraud for consumers, merchants and issuers.
This white paper was developed by the Secure Technology Alliance Mobile Council to provide an educational resource on the TEE and relevant use cases. The white paper describes the TEE as a candidate for a mobile security solution that supports a wide range of use cases, such as payment apps, content protection, corporate applications, and loyalty.
The Secure Technology Alliance Access Control Council to help users diagnose the cause of TWIC card/reader issues with physical access control systems and provide troubleshooting guidance to quickly identify corrective actions.
This U.S. Payments Forum resource provides guidance on best practices for supporting fallback transactions at the automated fuel dispenser.
This U.S. Payments Forum white paper defines recommendations for a debit technical framework for the U.S. payments industry. The white paper provides a high-level description of the technical solution, which follows the EMV specification and accommodates flexibility to current and potential future debit routing regulatory requirement scenarios, as well as principles and guidelines for implementation.
This U.S. Payments Forum white paper provides information that was collected from Accel, American Express, China UnionPay, Discover, MasterCard, NYCE Payments Network, SHAZAM Network, STAR Network and Visa on the counterfeit and lost or stolen liability shifts to assist merchants, acquirers, processors and others implementing EMV chip technology in the U.S. with their migration.
The Smart Card Alliance Identity Council and Physical Access Council developed this white paper to provide an overview of FIPS 201 for corporate enterprise executives and to describe the benefits of using FIPS 201 as the foundation for enterprise identity management programs.
The Secure Technology Alliance Access Control Council and Identity Council developed this white paper to discuss how mobile devices can be used for physical access control. The white paper includes an overview of technology, trust frameworks, assurance levels and use cases.
This white paper was developed by the Smart Card Alliance Payments Council Security Work Group to provide an overview of the security features available with contactless and contact smart cards and describe how the security features might apply or be important to different applications.