Calypso Networks Association (CNA), which brings transport operators and authorities together to evolve contactless ticketing systems, has launched a security certification program for Host Card Simulation (HCE)-based solutions.
This certification, conducted independently through the Internet of Trust, an expert in digital trust and cybersecurity evaluation, indicates compliance with Calypso’s enhanced security requirements for ticketing on Android OS devices, giving consumers confidence, convenience and trust in mobile ticketing.
The Calypso® HCE Security Certification (CHSC) scheme for solution providers is based on mobile security programs set up by the banking sector. This includes the Software-Based Mobile Payment Evaluation Process (SBMP) from global payments specification body, EMVCo, which supports contactless payments made using connected consumer devices and digital wallets.
Philippe Vappereau, CEO of CNA, explains why the security certification matter.
“The significant challenge for the industry is that typically, mobile software like HCE is not as secure as a contactless smart card or a secure element,” said Vappereau. “To help public transport operators and authorities, like Île-de-France Mobilités, widen their customer base and offer more choice in ticketing payments, CNA has worked with the ticketing community to implement additional security layers into the HCE specification to achieve a higher level of security. We are pleased now to offer an advanced security certification process to Calypso HCE service providers who would like to have an assurance of a guaranteed level of security.”
One such service provider is HID Global, which has become the first ticketing solution provider with an SDK fully certified and compliant to Calypso HCE standards. The company’s SOMA Atlas™ 4Digital SDK powers low-cost mobile tickets that can be used with contactless (NFC)-enabled smartphones. It uses Calypso HCE to make it even easier for consumers to pay and use public transport, while minimizing physical contact.
Cesare Paciello, vice president, events and mobility solutions at HID Global, added, “Using Calypso’s open standards, HID enables easier, more streamlined mobile ticketing choices for public transportation. Achieving full compliance with Calypso’s CHSC program provides trust to operators, authorities and manufacturers using the HID SOMA Atlas™ SDK to offer passengers flexible, fast and secure transport ticketing. Customers can tap to pay for their travel and use their mobile devices to add funds to their Calypso-based transport cards for account-based ticketing.”