Secure mobile payments
Token Pay
Token Pay is HCE based NFC payment solution which supports online and offline transaction as a NFC POS device. It enables all card types - from branched to co-branched to private label to debit cards.
It is based in Visa and Master Card Cloud based contactless specification. It uses an Alternate PAN or Token instead of the original PAN. The solution can be integrated into any existing Wallet platform.
Two components. One secure payment experience.
- 1. Mobile Payment Application (MPA) on the mobile device and is a combination of UI and HCE SDK
- 2. Cloud based server component secured by HSM for storing, provisioning, handling cards, keys, transaction processing, fraud protection and crypto validation.
The MPA is supproted for all Android enabled phones upwards of version kitkat 4.4.
How does it work?
After initialization and activation process, customer scans his/her card, enters expiry date and adds the card into the Android phone. The card data gets validated at the Issuer end and the server component requests Visa/MC who are the Token Issuers for tokens against this card. 3 to 5 tokens are issued by the CMS component in the server and pushed into the phone securely.
When the customer taps his phone against the NFC reader, APDU commands are exchanged between the phone and the reader. Token details are passed on to the POS and the ISO packet is made and sent to the Acquirer. When the transaction data reaches the VISA/MC network it sends it to the Cloud server which de tokenizes and authorizes the transaction based on original card number. This platform enables payment transaction to happen in an online mode also since 3-5 tokens are stored inside the mobile device. The tokens get replenished when the customer comes online in a Internet zone again