Empowering Secure PIN-on-Glass Payments at TRUSTECH 2018

Novemer 19, 2018

Christine Young By: Christine Young
Blogger, Maxim Integrated 


Maxim's booth at TRUSTECH this year will be much more than a typical tradeshow booth. We are transforming our space (Riviera A 021) into a café, where you can buy a cup of coffee and experience secure PIN-on-glass payment processing. With PIN-on-glass technology, smart devices such as tablets and mobile phones become EMV readers that can accept personal identification numbers (PINs) on their touchscreens. These devices would then be used to process payments, eliminating the need for standalone, point-of-sale (POS) terminals.

Mobile and contactless payment systems are becoming more popular. Proponents in the industry feel that PIN-on-glass technology can lower the cost of credit card processing, provide better protection against fraud, and eventually lead to higher credit card acceptance. Currently, about 55% of small businesses in the U.S don't accept credit cards, but the move away from hardware for payment processing could change this. However, payment solutions providers still face challenges in developing, certifying, and maintaining the EMV acceptance stack required for these systems. After all, EMVCo specification changes can happen as often as every six months. To streamline the process for designers, Maxim has teamed up with Amadis and Quanta Computer to develop a turnkey, all-in-one Secure Card Reader for PIN (SCRP) solution that we'll showcase in our café at TRUSTECH.

The technical minds at Amadis are behind an EMV pre-certified, chip-agnostic payment software stack that saves designers the roughly 12 to 18 months that developing and certifying their own EMV Level 2 software stack would require. Quanta has developed the ready-to-go SCRP hardware, which runs the Amadis software and features Maxim's MAX32560 DeepCover® secure microcontroller. The MAX32560 is the industry's first secure Arm® Cortex®-M3 flash microcontroller with integrated contactless and smartcard interface. Using this solution can substantially reduce the time and effort needed to turn a concept into a production-ready payment processing system that is aligned to Payment Card Industry-PIN Transaction Security (PCI-PTS) v5.1 standards. This version of the PCI Council's standards provides software-based guidelines to protect PIN entry on various commercial off-the-shelf (COTS) devices. By allowing PINs to be entered into smartphones and tablets, the council is acknowledging a world where we are increasingly engaging in different types of transactions from our mobile devices. Also called the PCI Software-Based PIN Entry (SPoC) Standard, the guidance introduces a requirement for a back-end monitoring system for additional external security controls, including attestation, detection, and response to address anomalies, according to the council.

Visit our booth to learn more about what you can create with our PIN-on-glass payment solution (the full solution, which can be branded by the customer, will be available from Quanta). Also at TRUSTECH, Dany Nativel, one of Maxim's embedded security experts, will present a talk on "Enabling the PIN-on-Glass Revolution with Production-Ready SCRP Devices" at 10a.m. on November 27 on the Innovation Stage. And Emmanuel Haydont, a payment acceptance expert at Amadis, will speak on "Card Industry Structuring Deficiencies—an Acceptance Perspective" at 2:40p.m. on November 27 during the conference's Industry Insights program.

We hope you'll come by our TRUSTECH booth for a cup of coffee—and some inspiration for your next EMV contact or contactless payment processing design.

Trustech

PIN-on-glass technology can turn a smartphone or tablet into a payment processing device.