EMVCo, the global payment specification body, and the FIDO Alliance, an industry consortium developing open, interoperable authentication standards, have announced they will collaborate and review how FIDO authentication standards can support EMV payment use cases.
A key aim of the initiative is to investigate providing simpler and stronger authentication for cardholders making mobile payments using on-device authenticators, such as biometrics, thereby reducing consumer fraud globally while maintaining a good consumer experience.
A Memorandum of Understanding (MoU) has been signed by the two bodies to guide evaluation and determine how and when payment use cases provided by EMVCo could be incorporated into FIDO Alliance’s technical standards. Initial activities will explore how FIDO’s authentication protocol can be used to support EMVCo’s cardholder verification technology. The outcome of this discovery process will then shape any combined future work efforts.
Jonathan Main, EMVCo Board of Managers Chair, comments: “The payments community wants consumers to benefit from the simplicity of device-based authentication, which could be a fingerprint or facial recognition, for example. As the cardholder’s credentials are stored and processed on the mobile device, it means that the cardholder can be verified even if the device is not connected to a network. This initiative, therefore, enables us to effectively combine EMVCo’s payment industry knowledge with the FIDO Alliance’s authentication expertise to deliver cardholder verification that is convenient for the user, sustainable for the marketplace and most important, highly secure, thereby reducing consumer fraud in the mobile payment space.”
“FIDO standards, solely focused on authentication, were designed to complement other technical body efforts. This partnership with EMVCo is a prime example of how industry bodies can work with the FIDO Alliance to use simpler, stronger FIDO authentication to fulfil their own requirements,” said Brett McDowell, Executive Director of the FIDO Alliance. “With the growing use of EMV mobile payment, there is a real need for cardholder verification that is highly secure but unobtrusive for consumers. FIDO standards address that need, and this joint work with EMVCo has the potential to accelerate the global adoption of mobile authentication standards within the payments community.”