Icon for Payment Solution testing, displaying a smartphone and a credit card

Smart Card Testing

Services regarding smart cards for health, EMV standards & other applications

As a leading and independent full service provider for testing and certification of SmartCard, RFID and NFC related solutions, cetecom advanced’s worldwide operating division SmartCard Technologies with laboratories in Saarbrucken (Germany) und Anyang (Korea) offers a wide range of debug and type approval services for banking and finance as well as eIdentification, eHealth, eTicketing and Biometrics for cards and mobile. We provide our customers with extensive support related to Smart Card testing services and similar solutions for multiple industries and applications.

Accredited testing services
around ePayment and Smart Card technologies

Based on various accreditations by international standardisation bodies, cetecom advanced offers consulting, testing
and certification services for any type of payment devices like POS, mPOS, SoftPOS, ATM, card, mobile or wearables.

The following overview shows our accreditations, as well as other services in the respective payment scheme:

EMVCO

Terminals

  • EMVCo Contact Terminal Level 1 and 2
  • EMVCo Contactless Terminal Level 1 & Level 2
  • EMVCo Contactless COTS Level 1
  • EMVCo Terminal ESD Evaluation

Cards / Wearables

  • EMVCo Contact Card Level 1
  • EMVCo Contactless Card Level 1

Mobile

  • EMVCo Mobile Level 1 (Phase II)
  • PPSE

3-D Secure

  • 3DS Server (SER, ACS, DS)
  • Access Control Server
  • Directory Server

VISA

Terminals

  • Visa Contactless Device and Reader (Contactless Terminal Level 2)
  • Tap to Phone (SoftPOS, COTS)
  • Fleet

Cards / Wearables

  • Contact/Contactless Level 1, VIS, VCPS, VBSS, Multi Access, Prepaid
  • Prepaid Chip
  • VISA Seccos (VCPS)

Mobile

  • Visa Mobile Payment (incl. HCE)
  • Visa Mobile Payment Application (VMPA incl. UICC/SE)

Biometric Product Testing

  • Sensor & Algorithm (Fingerprint Sensor)

Level 3 E2E Testing

MASTERCARD

Acceptance Devices

  • (Contactless Terminal Level 2)
  • Tap on Phone (SoftPOS /COTS)

Card Holder Devices

  • Contact/Contactless Level1
  • all M/Chip Technologies (including Biometrics)
  • Performance and Interoperability testing

Mobile

  • Mastercard Cloud Based Payments (MCBP)
  • Mastercard Mobile PayPass (incl. HCE/SE)

Formal Approval Service Provider

  • M-TIP
  • GICC-TIP
  • CPV

Biometric Product Testing

  • Sensor & Algorithm (Fingerprint Sensor)

Level 3 E2E Testing

AMERICAN EXPRESS (AMEX)

Terminals

  • Expresspay (Contactless Terminal Level 2)
  • AMEX SoftPOS (COTS)

Cards / Wearables

  • Level 1 Contact and Contactless
  • Card Functional (AEIPS & XPAY)

Mobile

  • Level 1 Mobile Handset (UICC & HCE)
  • Mobile Functional

Level 3 E2E Testing

DISCOVER

Terminals

  • Contactless D-PAS Terminal Application
  • Contactless D-PAS Terminal Cross Testing
  • SoftPOS (COTS)

Cards / Wearables

  • Contact D-PAS Card Application
  • Contactless D-PAS Card Application & Cross Testing

Mobile

  • Mobile D-PAS Card Application (SE)

Level 3 E2E Testing

JCB

Terminals

  • Acceptance Devices (Contactless Terminal Level 2)
  • Tap on Mobile (SoftPOS /COTS)

Level 3 E2E Testing

Union Pay (coming soon)

Terminals

  • Acceptance Devices (Contactless Terminal Level 2)
  • SoftPOS (COTS)

Level 3 E2E Testing

DK – DIE DEUTSCHE KREDITWIRTSCHAFT/ GERMAN BANKING INDUSTRY COMMITTEE (GBIC)

Accreditations for

  • GiroCard and Network Components
  • GeldKarte & Secoder
  • Payment Network Host Systems
  • GBIC ATM System (GA 20xx)
  • DC-POS 3.x / TA 7.x

cetecom advanced Test Tool

  • Web based Online Test Tool – “cetecom advanced Online Host”

KLSC (Korean Banking)

  • KLSC type approval process for credit cards and card readers

NEXO

  • POl Terminal

PURE

Terminals

  • PURE Terminal/ SoftPOS Certification

GOOGLE

Biometric Product Testing

  • Fingerprint Sensor
  • Face Recognition

Test schemes and accreditations around eHealth - Gematik

Smart cards are becoming increasingly important in the health sector. They facilitate the administration of patient data and accounting for medical services rendered. Because they are easy to use, they also contribute to cushioning the cost explosion that is taking place in the health sector.

cetecom advanced also offers testing service for Gesundheitskarte terminals and connectors.

Gematik (Gesundheitskarte / german electronic health card)

  • Card interface testing (based on EMV Level 1 specification)
  • EMC testing
  • Electrical Safety

Test schemes and accreditations around eIdentification

cetecom advanced is the only test lab in the world that has a BSI (Bundesamt für Sicherheit in der Informationstechnik / German Federal Office for Information Security) based on ISO 17025 for the testing of the RF-interface of electronic travel documents.

cetecom advanced conducts the following certification tests:

  • BSI TR-03105, Part 2 (documents/card)
  • BSI TR-03105, Part 4 (reader devices)
  • Certification handling with BSI

Further services

In our ISO 17025 accredited laboratory we test electronic travel documents (passports and national ID cards) as well as the different development stages of these products (chips, inlays, etc.) according to national and international requirements. These services are also available for the corresponding reader devices. In addition, we support you in the handling of application formalities and the accomplishment of the certification procedure with the referring national certification authorities.

In addition to the BSI standards mentioned above we offer test services according to the following specifications:

  • ISO/IEC 18745-2
  • ISO/IEC 10373-6

Test schemes and accreditations around Biometrics

Latest market data show that Biometric cards with fingerprint are accepted by consumers. The technology of Biometric fingerprint authentication makes payment easier and more secure, both in retail and in digital commerce (eCommerce). In particular, the increased security during payment transactions with the intensively tested fingerprint sensors and the sophisticated software algorithms is seen as a massive step towards fraud protection.

The current sensors are mature and can be used because years of experience in the field of identity documents (passport, ID card) can be drawn on here. The international standards for fingerprint technology (NIST, ISO, FIDO) are also taken into account for the new payment cards.

As a test laboratory, cetecom advanced has been involved with this new technology from the very beginning and got the accreditiations from Mastercard and Visa. Additional accreditations will follow.

Additionally, cetecom advanced is accredited and listed as Google corporation partner for Biometric Security Testing meeting Android’s requirements for fingerprint testing and face recognition.

What are the benefits for the card issuer?

The high acceptance of the Biometric payment card, which is of course contactless, has been accelerated by the developments of the Covid-19 Pandemic and has proven to be durable. Consumer confidence in card payments is thus increased for both the customer and the retailer (point of acceptance).

What is the test scope for Biometric card testing at cetecom advanced?

Quality assurance is a key step in the process of creating a certifiable Biometric identification or payment product. To optimize and guarantee high quality, cetecom advanced offers additional services for manufacturers and issuers of a fingerprint-based Biometric product to optimize the products during the different development stages:

  • Fingerprint sensor: Functional tests under clear test conditions and with defined acceptance criteria (FAR, FFR, IAPMR).
  • Biometric card products for the market: for example Mastercard, VISA
  • In particular, cetecom advanced provides a comprehensive test environment for Pre-testing and type approval (final tests for market launch).

Your partner for testing any payment technology

  • Reliable assistance and guidance from a single point of contact with a detailed project analysis in accordance with your special requirements.
  • Flexibility through short lead times and fast availability of test slots combined with remote access for debug testing – you can work at any time without regard to time zones.
  • Transparency through permanent data exchange, direct notification and support in failure analysis. You are always up to date on the status of your project.

NFC

Near Field Communication (NFC) is an extension of the existing SmartCard standards (contactless/RFID) that combines the interface of a smartcard and a reader into a single device.

Our Lab offers different test services for NFC devices:

  • Qualification tests of NFC devices based on ISO/IEC 14443 and ISO/IEC 10373

RFID

Whether RFID technology is used for ePassport, Contactless or NFC applications, cetecom advanced supports customers in setting and evolving the performance, ensuring that products meet the expectations for regulatory, quality, health, environmental and safety standards for almost any market around the world.

e-Ticketing

In Germany VDV eTicket Service GmbH & Co. KG (VDV-ETS) is responsible for the development of the VDV Core Application, the German standard of electronic fare management. To ensure interoperability, all eTicket applications must comply with this standard.

cetecom advanced has been designated by VDV-ETS, who manages the standard and offers services for system support, as the official test lab for conducting the related certification tests to make sure that all eTicketing systems are in compliance with the VDV Core Application.

To ensure proper implementation of all involved systems at a maximum reliability and security level all terminal types, background systems, SAMs and smartcards will be tested following the VDV Core Application specifications. The referring test tools are provided by UL Transaction Security, well-known for its expertise in the field of test tool development.

cetecom advanced’s eTicket test spectrum following VDV Core Application comprise:

  • Qualification testing for smartcards
  • Qualification testing for security modules
  • Qualification testing for terminals
  • Qualification testing on background system interfaces
  • Qualification testing on barcode readers

Requirement for qualification testing is physical testing and inspection of the Device under Test (DUT). cetecom advanced conducts this testing and inspection for the customers.

As a further service in the eTICKETING area, cetecom advanced offers (currently, as the only laboratory recognized by the German Federal Office for Information Security) compliance tests according to the Technical Guideline BSI TR-03150:

  • Contactless media according to BSI TR-03150 Part 1
  • Contactless readers according to BSI TR-03150 Part 2

In case of a passed compliance test, our customers have the option (by submitting the test report issued by cetecom advanced) to apply for a certification (according to Technical Guideline BSI TR-03150) of their product directly at the German Federal Office for Information Security (on request, we gladly support our customers with the handling of this certification process).

In addition, cetecom advanced offers tests according to the international standard CEN/TS 16794:2017 – tests for both contactless media and contactless readers are available here as well.

cetecom advanced SmartCard Technologies Competence Center

Whether you are in banking, telecommunications, transportation, healthcare, security or other areas, Smart Card Technology is a fast-growing market that has become common place in our culture and daily lives.

As a leading and independent full service provider for SmartCard, RFID and NFC related solutions, cetecom advanced’s SmartCard Technologies Competence Center offers a wide range of services to implement the type approval process for mobile payment applications, ICC cards, wearables and terminals.

Tools

Our development team handles individual testing solutions for our own usage. At this, the competence of our networked team members reaches from software engineers over hardware specialists to mechanical engineers. With our way of interdisciplinary work and our infrastructure for fast and flexible solutions, we have created our own competence center.

We offer our own testing solutions for challenging applications also to our customers. In addition to existing solutions, we offer individual development within the area of our core competence, testing and certification. The scope of development projects can contain everything from consulting up to turnkey ready solutions. As a laboratory, we are close to our own products and understand the needs of our customers quite well. After a comprehensive needs analysis, we create a plan with test solutions that fit your individual needs. Let us introduce our expertise and some of the solutions we offer.

Over the last 10 years, we were able to gain experience in a wide area:

  • Software driven test automation
  • Test automation using robotic systems
  • Quality assurance solutions
  • Accreditation and validation solutions
  • Automation interfaces to devices under test
  • Downscaling of comprehensive lab solutions to product vendor requirements

Besides our own testing solutions, we were able to satisfy our customer requirements by individual solutions: 

  • Visa Terminal Cross Test Testbench
  • Visa Card Cross Test Testbench
  • Visa Cross Test Auditing solutions
  • Visa Middleware Reporting and Validation
  • Visa VCAS Interface validation
  • Visa Terminal Simulator Auditing Device

Contact

Michael Türnau
Account Manager
michael.tuernau@cetecomadvanced.com
+49 681 598-8120

Bernhard Mommenthal
Account Manager
bernhard.mommenthal@cetecomadvanced.com
+49 681 598-8190

Allen Kim
Team Manager Smart Card Korea
allen.kim@cetecomadvanced.com
+82 70 4710 9581

Further topics

News on the topic of Smart Card testing

Stay up to date.
The cetecom advanced newsletter is sent out about once a month. No constant follow-up mails.
Only selected content from our experts.