Any card payment solution that accepts EMV cards (commonly referred to as Chip and PIN) must contain an EMV Level 2 Kernel that has undergone formal EMVCo type approval testing. There are several steps which need to be considered:
The first step on this path is to select an EMV Level 2 Kernel. Providers may choose to develop their own kernel, but a more common approach is to license the use of a third party EMV Kernel (i.e. CreditCall’s EMV Level 2 Kernels). The latest version of the EMV specifications contains more than 700 pages, and EMVCo regularly publish additional bulletins that clarify or update these specifications, and so developing a brand new Kernel is a daunting task.
After selecting a Kernel it is necessary to register with EMVCo and complete an Implementation Conformance Statement (ICS). The ICS details the specific features that the solution will support – there are many optional features in EMV and only a subset of them is required for each solution, and so it is important to understand which features will need to be supported. Some of these rules are driven by the regional banking regulations and others by the operating environment (for example an unattended device is not able to perform signature checking, in some markets EMV PIN entry is always required and cash dispensers must always contact the card issuer for authorisation before dispensing any cash).
Once the EMV Kernel has been integrated into the device and it has been configured to operate according to the ICS, it is necessary to submit the device to an EMVCo approved lab for formal EMV Level 2 Certification Testing. This involves hundreds of test cases being run on the device to verify its conformance to the EMV specifications, and only if the device passes every test case will EMVCo issue a Letter of Approval and add it to the list of approved solutions.
CreditCall have many years experience of developing EMV compliant solutions and guiding their customers through the necessary requirements and certification process, and in over 100 certification projects over the past 10 years CreditCall’s EMV Level 2 Kernels have always successfully passed the EMVCo certification process first time.
For more information on how CreditCall could assist with EMV migration please visit www.level2kernel.comTags: Certification Process, EMVCo