{"id":6172,"date":"2014-06-11T01:02:22","date_gmt":"2014-06-11T01:02:22","guid":{"rendered":"https:\/\/www.gsma.com\/newsroom\/?p=6172"},"modified":"2015-05-12T14:53:48","modified_gmt":"2015-05-12T14:53:48","slug":"consult-hyperion-and-the-gsma","status":"publish","type":"post","link":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/","title":{"rendered":"CONSULT HYPERION AND THE GSMA PUBLISH REPORT CONTRASTING HCE AND SIM SECURE ELEMENT APPROACHES TO NFC PAYMENTS"},"content":{"rendered":"<p align=\"center\"><em>Balanced Analysis Provides Important  Guidance For Financial Institutions<\/em><\/p>\n<p><strong>Shanghai<\/strong>: Digital  payments experts Consult Hyperion, in conjunction with the GSMA, today published  a guide to help banks and mobile operators understand the Host Card Emulation  (HCE) and SIM Secure Element approaches for NFC payments. The guide, &ldquo;<em>HCE and SIM Secure Element: It&rsquo;s not Black  and White&rdquo;<\/em>, follows the recent introduction of HCE into Android 4.4 (KitKat)  and concludes that the SIM Secure Element and HCE approaches to NFC payments each  offer important benefits for financial institutions. Further, they should not  be viewed as mutually exclusive and a combination of the approaches may be  appropriate for differing applications and markets. <\/p>\n<p>&ldquo;This paper provides a balanced  analysis for financial institutions of HCE as an alternative proposition for  NFC payments, alongside the existing SIM approach,&rdquo; said Alex Sinclair, Chief  Technology Officer, GSMA. &ldquo;The recent inclusion of HCE into Android opens up the possibility of  performing NFC payments without using a SIM Secure Element and HCE could also  potentially remove complexity associated with SIM-based NFC payments. At the same time, SIM-based NFC offers a proven secure  solution that is being commercially deployed today. The challenge for the  mobile operator community is to simplify the provisioning process, further  accelerating deployments of SIM-based NFC on a global basis.&rdquo; <\/p>\n<p>&ldquo;MasterCard  has been technology agnostic, enabling mobile payments in a way that allows  current card accounts to be used seamlessly and securely from consumers&rsquo;  favorite electronic devices,&rdquo; said James Anderson, senior vice president of  emerging payments, MasterCard.&nbsp; &ldquo;We have deployed SIM and Secure  Element-based solutions through partnerships with mobile network operators, OS providers  and handset manufacturers, while recently adding support for cloud-based  payments.&nbsp; This paper will help both the mobile and payments industries  understand the strengths of each approach and allow them to choose the options  that align with their business strategies.&rdquo;<\/p>\n<p>Report co-author Steve  Pannifer, Head of Delivery at Consult Hyperion said: &ldquo;The inclusion of HCE into  Android has generated a lot of excitement that can only be good for NFC  payments. This, combined with the efforts to streamline SIM Secure Element based NFC  evident in many markets, will enable NFC payment products to be rolled out with  renewed vigour. We hope that this paper will encourage banks and mobile  operators to collaborate further in bringing NFC payments to the market. We  believe the mobile operators have an important role to play, particularly in  providing mobile security and authentication services that are paramount in any  payments service.&rdquo;<\/p>\n<p>The  guide shows that whilst HCE does indeed simplify some aspects of the NFC  ecosystem by allowing mobile NFC payments to be performed without using a SIM Secure  Element, this is only part of the landscape. HCE requires a new approach to  security in terms of ecosystem integration, risk management and certification  processes. In contrast, SIM Secure Element processes are well defined and mobile operators are  actively working with the ecosystem to simplify them further. <\/p>\n<p>The  report examines the heritage of SIM-based NFC, the lessons learnt from the  first deployments and the actions that have been taken to allow service  providers to deploy secure, stable and proven mobile payment services at scale.  The guide finds that whilst there is significant  interest around HCE, the SIM Secure Element approach for mobile payments still has  many complimentary advantages and it will be down to the banks to carefully  review their needs in each of their operating markets.<\/p>\n<p>&ldquo;Both  the People&rsquo;s Bank of China (PBOC) and China UnionPay have released mobile  payment specifications, which require a Secure Element to support NFC mobile  payments, in order to provide a secure and reliable payment service. China  UnionPay has worked very closely with Chinese operators on large-scale  commercial NFC services based on the SIM as Secure Element. In conjunction,  China UnionPay is working actively on a feasibility study of new technologies  including HCE,&rdquo; said Jiang Haijian, Deputy General Manager, Mobile Payment Dept.,  China UnionPay.<\/p>\n<p>Consult  Hyperion suggests that there are a number of key points for banks to consider  as they plan mobile NFC payments: <\/p>\n<ul>\n<li><strong>Understand  your local environment:<\/strong> The local conditions will play a big role in  determining the best approach<\/li>\n<li><strong>Understand  your target transactions:<\/strong> It is possible that HCE will be less suited to  certain transaction types (e.g. offline, high value) than SIM Secure Element. <\/li>\n<li><strong>SIM Secure  Element<\/strong> <strong>and HCE are not mutually exclusive:<\/strong> The most  effective solutions over the medium term may be hybrid models where, for  example, the SIM is used to address the security and authentication gaps in  HCE. <\/li>\n<li><strong>Build  flexibility into your strategy:<\/strong> There is likely to be considerable overlap between  SIM Secure Element and HCE in  terms of the systems and capabilities that are required<\/li>\n<li><strong>Collaborate  with the industry:<\/strong> Until there is a level of standardisation around HCE,  there remains the risk that banks could adopt solutions that are insufficiently  flexible or lock the banks in. <\/li>\n<\/ul>\n<p>David  Baker, Head of the Card Innovation Payments Unit at the UK Card Association  notes: &ldquo;While Host Card Emulation has  been hailed as a potential game changer for card-based NFC proximity payments,  this report gives valuable advice and guidance on the issues the industry must  address &#8212; and highlights the real need for collaboration between ecosystem  partners to ensure greater adoption of mobile payment services.&rdquo;<\/p>\n<p>The  full report can be seen <a href=\"http:\/\/www.chyp.com\/assets\/uploads\/Documents\/2014\/06\/HCE_and_SIM_Secure_Element.pdf\" target=\"_blank\">here<\/a> <\/p>\n<p align=\"center\">-ENDS-<\/p>\n<p><strong>Note to Editors:<\/strong><br \/>\n HCE is a recent feature of Android that allows an  Android application to emulate a contactless card via the NFC interface of the  handset; previously, this was reserved to applications stored in a secure chip  or Secure Element, typically the SIM card, with similar security features as  chip-and-PIN plastic cards. HCE opens the way to payment applications without a  secure element, but such applications need to reach a satisfactory level of  security. In order to achieve this, card schemes are developing a  &ldquo;tokenisation&rdquo; approach, whereby the payment card identifier is replaced by a  single use or limited use &ldquo;token&rdquo;. This reduces the impact of data breaches  significantly: if a &ldquo;token&rdquo; is compromised it will have limited and possibly no  value.<\/p>\n<p>The guide was commissioned by the GSMA, 5 New Street  Square, London, EC4A 3BF, United Kingdom. Any opinions, findings, and  conclusions or recommendations expressed in the material are those of the  author(s) and do not necessarily reflect those of the GSMA or its members.<\/p>\n<p><strong>About Consult  Hyperion<\/strong> <br \/>\n  Consult  Hyperion is an independent information technology consultancy that has spent  over two decades advising leading organisations around the world. Consult  Hyperion helps these organisations to reap real benefits from technological  change in the field of secure electronic transactions ranging from retail  payments to mobile wallets to contactless transit ticketing.&nbsp; Consult  Hyperion is uniquely qualified to advise on turning great business ideas into  working systems that can help customers, and to evaluate new business concepts,  develop new products and services from specification to customer roll-out, and  to test and certify complex systems.<\/p>\n<p> The four  main sectors the company operates in are; financial services, with card  schemes, banks, retailers and others; telecommunications and media, advising  world leading companies; technology, to support some of the largest IT  companies, and in the public sector and transit where projects include transit  operators, government and law enforcement.<\/p>\n<p>For more information visit <a href=\"http:\/\/www.chyp.com\" target=\"_blank\">Consult Hyperion<\/a>,  follow on Twitter <a href=\"http:\/\/www.twitter.com\/chyppings\" target=\"_blank\">@chyppings<\/a> and keep up to date with the latest debate at <a href=\"http:\/\/www.chyp.com\/media\/blog\/\" target=\"_blank\">Tomorrow&rsquo;s Transactions Blog<\/a>. <\/p>\n<p> <strong>Media  Contact:<\/strong><br \/>\n  Chaz Brooks, Chazbrooks Communications<br \/>\n  Tel: +44 (0)1483 537890\u00a0 <br \/>\n  Email: <a href=\"mailto:chazb@chazb.com\">chazb@chazb.com<\/a><\/p>\n<p><strong>Company  Contact:<\/strong><br \/>\n  Steve Pannifer, Consult Hyperion<br \/>\n  Tel: +44 (0)1483 301793<br \/>\n  Email: <a href=\"mailto:steve.pannifer@chyp.com\">steve.pannifer@chyp.com<\/a> <\/p>\n<p><strong>About  the GSMA<\/strong><br \/>\n  The GSMA represents the interests of mobile  operators worldwide.&nbsp;Spanning more than 220 countries and territories, the GSMA unites  nearly 800 of the world&rsquo;s mobile operators with more than 250 companies in the  broader mobile ecosystem, including  handset makers, software companies, equipment providers and Internet companies,  as well as organisations in industry sectors such as financial services,  healthcare, media, transport and utilities. The GSMA also produces  industry-leading events such as the Mobile World Congress and Mobile Asia  Expo.\u00a0 <\/p>\n<p>For more information, please  visit the GSMA corporate website at <a href=\"https:\/\/www.gsma.com\">www.gsma.com<\/a>. Follow the GSMA on Twitter: @GSMA.<\/p>\n<p><strong>Media Contacts: <\/strong><br \/>\n  For the GSMA<br \/>\n  Charlie Meredith-Hardy<br \/>\n  +44 7917 298428<br \/>\n  <a href=\"mailto:CMeredith-Hardy@webershandwick.com\">CMeredith-Hardy@webershandwick.com<\/a><u> <\/u><\/p>\n<p>GSMA Press Office <br \/>\n  <a href=\"mailto:press@gsma.com\">press@gsma.com <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Balanced Analysis Provides Important Guidance For Financial Institutions Shanghai: Digital payments experts Consult Hyperion, in conjunction with the GSMA, today published a guide to help banks and mobile operators understand the Host Card Emulation (HCE) and SIM Secure Element approaches for NFC payments. The guide, &ldquo;HCE and SIM Secure Element: It&rsquo;s not Black and White&rdquo;, [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":6174,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_jetpack_memberships_contains_paid_content":false,"jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[3],"tags":[],"algolia_discover_type":[6627],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.0 (Yoast SEO v22.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>CONSULT HYPERION AND THE GSMA PUBLISH REPORT CONTRASTING HCE AND SIM SECURE ELEMENT APPROACHES TO NFC PAYMENTS - Newsroom<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CONSULT HYPERION AND THE GSMA PUBLISH REPORT CONTRASTING HCE AND SIM SECURE ELEMENT APPROACHES TO NFC PAYMENTS\" \/>\n<meta property=\"og:description\" content=\"Balanced Analysis Provides Important Guidance For Financial Institutions Shanghai: Digital payments experts Consult Hyperion, in conjunction with the GSMA, today published a guide to help banks and mobile operators understand the Host Card Emulation (HCE) and SIM Secure Element approaches for NFC payments. The guide, &ldquo;HCE and SIM Secure Element: It&rsquo;s not Black and White&rdquo;, [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/\" \/>\n<meta property=\"og:site_name\" content=\"Newsroom\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/gsma\/\" \/>\n<meta property=\"article:published_time\" content=\"2014-06-11T01:02:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2015-05-12T14:53:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/2014\/06\/650-personal-data.jpg?fit=650%2C320&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"650\" \/>\n\t<meta property=\"og:image:height\" content=\"320\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"webteam\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@GSMA\" \/>\n<meta name=\"twitter:site\" content=\"@GSMA\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"webteam\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"CONSULT HYPERION AND THE GSMA PUBLISH REPORT CONTRASTING HCE AND SIM SECURE ELEMENT APPROACHES TO NFC PAYMENTS - Newsroom","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/","og_locale":"en_GB","og_type":"article","og_title":"CONSULT HYPERION AND THE GSMA PUBLISH REPORT CONTRASTING HCE AND SIM SECURE ELEMENT APPROACHES TO NFC PAYMENTS","og_description":"Balanced Analysis Provides Important Guidance For Financial Institutions Shanghai: Digital payments experts Consult Hyperion, in conjunction with the GSMA, today published a guide to help banks and mobile operators understand the Host Card Emulation (HCE) and SIM Secure Element approaches for NFC payments. The guide, &ldquo;HCE and SIM Secure Element: It&rsquo;s not Black and White&rdquo;, [&hellip;]","og_url":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/","og_site_name":"Newsroom","article_publisher":"https:\/\/www.facebook.com\/gsma\/","article_published_time":"2014-06-11T01:02:22+00:00","article_modified_time":"2015-05-12T14:53:48+00:00","og_image":[{"width":"650","height":"320","url":"https:\/\/i0.wp.com\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/2014\/06\/650-personal-data.jpg?fit=650%2C320&ssl=1","type":"image\/jpeg"}],"author":"webteam","twitter_card":"summary_large_image","twitter_creator":"@GSMA","twitter_site":"@GSMA","twitter_misc":{"Written by":"webteam","Estimated reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/#article","isPartOf":{"@id":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/"},"author":{"name":"webteam","@id":"https:\/\/www.gsma.com\/newsroom\/#\/schema\/person\/5f710fedc8509b0c9c60af69f66b28e3"},"headline":"CONSULT HYPERION AND THE GSMA PUBLISH REPORT CONTRASTING HCE AND SIM SECURE ELEMENT APPROACHES TO NFC PAYMENTS","datePublished":"2014-06-11T01:02:22+00:00","dateModified":"2015-05-12T14:53:48+00:00","mainEntityOfPage":{"@id":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/"},"wordCount":1403,"commentCount":0,"publisher":{"@id":"https:\/\/www.gsma.com\/newsroom\/#organization"},"image":{"@id":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/#primaryimage"},"thumbnailUrl":"https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/2014\/06\/650-personal-data.jpg","articleSection":["Press Release"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/","url":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/","name":"CONSULT HYPERION AND THE GSMA PUBLISH REPORT CONTRASTING HCE AND SIM SECURE ELEMENT APPROACHES TO NFC PAYMENTS - Newsroom","isPartOf":{"@id":"https:\/\/www.gsma.com\/newsroom\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/#primaryimage"},"image":{"@id":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/#primaryimage"},"thumbnailUrl":"https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/2014\/06\/650-personal-data.jpg","datePublished":"2014-06-11T01:02:22+00:00","dateModified":"2015-05-12T14:53:48+00:00","breadcrumb":{"@id":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/#primaryimage","url":"https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/2014\/06\/650-personal-data.jpg","contentUrl":"https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/2014\/06\/650-personal-data.jpg","width":"650","height":"320"},{"@type":"BreadcrumbList","@id":"https:\/\/www.gsma.com\/newsroom\/press-release\/consult-hyperion-and-the-gsma\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.gsma.com\/newsroom\/"},{"@type":"ListItem","position":2,"name":"CONSULT HYPERION AND THE GSMA PUBLISH REPORT CONTRASTING HCE AND SIM SECURE ELEMENT APPROACHES TO NFC PAYMENTS"}]},{"@type":"WebSite","@id":"https:\/\/www.gsma.com\/newsroom\/#website","url":"https:\/\/www.gsma.com\/newsroom\/","name":"Newsroom","description":"","publisher":{"@id":"https:\/\/www.gsma.com\/newsroom\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.gsma.com\/newsroom\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.gsma.com\/newsroom\/#organization","name":"GSMA","url":"https:\/\/www.gsma.com\/newsroom\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.gsma.com\/newsroom\/#\/schema\/logo\/image\/","url":"https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/GSMA_logo_colour_web.jpg","contentUrl":"https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/GSMA_logo_colour_web.jpg","width":1000,"height":1000,"caption":"GSMA"},"image":{"@id":"https:\/\/www.gsma.com\/newsroom\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/gsma\/","https:\/\/x.com\/GSMA","https:\/\/www.instagram.com\/gsmaonline\/","https:\/\/www.linkedin.com\/company\/12380","https:\/\/www.youtube.com\/user\/GSMAOnline"]},{"@type":"Person","@id":"https:\/\/www.gsma.com\/newsroom\/#\/schema\/person\/5f710fedc8509b0c9c60af69f66b28e3","name":"webteam"}]}},"jetpack_featured_media_url":"https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/2014\/06\/650-personal-data.jpg","jetpack_sharing_enabled":true,"featured_image_url":"https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/\/2014\/06\/650-personal-data.jpg","_links":{"self":[{"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/posts\/6172"}],"collection":[{"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/comments?post=6172"}],"version-history":[{"count":6,"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/posts\/6172\/revisions"}],"predecessor-version":[{"id":6194,"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/posts\/6172\/revisions\/6194"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/media\/6174"}],"wp:attachment":[{"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/media?parent=6172"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/categories?post=6172"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/tags?post=6172"},{"taxonomy":"algolia_discover_type","embeddable":true,"href":"https:\/\/www.gsma.com\/newsroom\/wp-json\/wp\/v2\/algolia_discover_type?post=6172"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}