Apple may be integrating tokenization technology in its forthcoming mobile payments solution, reports Bank Innovation. Citing sources close to the matter, the report notes that the company will look to utilize token technology to address security and fraud concerns as integrates the service with the iPhone 6 and iWatch.
Financial institutions — card issuers and networks — prefer token technology because it replaces primary account numbers, those 16-digit card numbers on the front of credit and debit cards. Instead, the tokenization technology uses complex codes that are easily transmittable over the air and between devices, but that are used only once, so even if they are intercepted, are of no use to fraudsters.
An Apple patent discussing token technology has also been discovered, as the application was granted last month and filed for in 2009. In its example, Apple discusses a token system as a method for two devices to communicate sensitive data with disposable, one-time use codes.
/article-new/2014/08/easypay_concept.jpg?lossy)
The report also once again discusses the NFC capabilities in the iPhone 6 and iWatch, stating that chip-maker NXP will be rolling out NFC chips to the iWatch and the iPhone 6. Apple Stores and Apple retail partners are also said to be gearing up to utilize NFC technology, as a number of retail locations will be using the NFC-enabled Verifone MX 915 terminal.
Prior reports have stated that Apple's payment service will be supported by a number of credit card companies including Visa, MasterCard, and American Express. The company is also said to be partnering with a number of retailers for the service, including Walgreens, CVS, Nordstrom, and more.
Apple is expected to announce its mobile payments solution at this Tuesday's media event, which will likely be shown off alongside the iPhone 6 and iWatch.
Top Rated Comments
(View all)Apple can you please include the sears store. I shop a lot at sears.
Ah... so you're the one!
:D
Prime example: PCI standards allows someone handling such data to only display the first six and last 4 digits of a PAN (your credit card) in their database. For a merchant to retrieve the full data for research (your full card number), the people holding the data would encrypt the middle digits of your PAN number, create a token, store it in a database with your encrypted card information.
The merchant then would be presented with a token. They submit the token, the entity holding the PCI data has their application check the token against what they have in their database. If they match, the people holding your data returns back the full card number to use. That way, at no point does either the holder or the merchant have all 16 digits of your credit card number.
I've maintained PCI databases, and it's one of the easiest, and secure ways to store your data. For Apple to be looking at this is a good thing, especially if rumors are true about using NFC in their next iPhone.
BL.
Just to scare everyone, I could easily setup a capture at the fuel pump and grab your swipe. I'm curious on how 'they' can make this secure, possibly include a manual PIN?
You state that you have been writing token payment code for two years, yet you don't know how it can be secure? You mean you write code for a technology that you don't understand?
Wut?!