Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Process Enhancements
Version 1.1
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
Legal Notice
This document summarizes EMVCo’s present plans for evaluation services and related
policies and is subject to change by EMVCo at any time. This document does not create
any binding obligations upon EMVCo or any third party regarding the subject matter of this
document, which obligations will exist, if at all, only to the extent set forth in separate written
agreements executed by EMVCo or such third parties. In the absence of such a written
agreement, no product provider, test laboratory or any other third party should rely on this
document, and EMVCo shall not be liable for any such reliance.
No product provider, test laboratory or other third party may refer to a product, service or
facility as EMVCo approved, in form or in substance, nor otherwise state or imply that
EMVCo (or any agent of EMVCo) has in whole or part approved a product provider, test
laboratory or other third party or its products, services, or facilities, except to the extent and
subject to the terms, conditions and restrictions expressly set forth in a written agreement
with EMVCo, or in an approval letter, compliance certificate or similar document issued by
EMVCo. All other references to EMVCo approval are strictly prohibited by EMVCo.
Under no circumstances should EMVCo approvals, when granted, be construed to imply any
endorsement or warranty regarding the security, functionality, quality, or performance of any
particular product or service, and no party shall state or imply anything to the contrary.
EMVCo specifically disclaims any and all representations and warranties with respect to
products that have received evaluations or approvals, and to the evaluation process
generally, including, without limitation, any implied warranties of merchantability, fitness for
purpose or non-infringement. All warranties, rights and remedies relating to products and
services that have undergone evaluation by EMVCo are provided solely by the parties
selling or otherwise providing such products or services, and not by EMVCo, and EMVCo
will have no liability whatsoever in connection with such products and services.
This document is provided "AS IS" without warranties of any kind, and EMVCo neither
assumes nor accepts any liability for any errors or omissions contained in this document.
EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR
IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-
INFRINGEMENT, AS TO THIS DOCUMENT.
EMVCo makes no representations or warranties with respect to intellectual property rights of
any third parties in or in relation to this document. EMVCo undertakes no responsibility to
determine whether any implementation of this document may violate, infringe, or otherwise
exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual
property rights of third parties, and thus any person who implements any part of this
document should consult an intellectual property attorney before any such implementation.
Without limiting the foregoing, this document may provide for the use of public key
encryption and other technology, which may be the subject matter of patents in several
countries. Any party seeking to implement this document is solely responsible for
determining whether its activities require a license to any such technology, including for
patents on public key encryption technology. EMVCo shall not be liable under any theory for
any party's infringement of any intellectual property rights in connection with this document.
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
Revision Log – Version 1.1
The following changes have been made to the document since the publication of
Version 1.0.
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
Add Document references table in section
1.3
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 5 / 34
Contents
1 Background ................................................................................................................... 7
1.1 Audience ................................................................................................................ 7
1.2 Document Organization .......................................................................................... 8
1.3 EMVCo L3 related documents ................................................................................ 8
1.4 Glossary ................................................................................................................. 8
2 L3 Testing Overview ................................................................................................... 16
2.1 Objectives ............................................................................................................ 16
2.2 Scope ................................................................................................................... 17
2.3 Current Payment system Processes ..................................................................... 18
2.3.1 Process References............................................................................... 18
2.3.2 Test Execution Tools ............................................................................. 18
2.3.2.1 Tool Qualification and Availability to Users .............................. 19
2.3.3 Testing Process Steps ........................................................................... 20
3 EMVCo Process Enhancements (Phase I) ................................................................. 23
3.1 Test Tool Developments and Automation ............................................................. 23
3.1.1 Machine-readable Test Card Images ..................................................... 23
3.1.1.1 Key Stakeholder Benefits ........................................................ 24
3.1.2 Test Case Pass/Fail Criteria .................................................................. 24
3.1.2.1 Key Stakeholder Benefits ........................................................ 25
3.1.3 Common Card Terminal log Format ....................................................... 25
3.1.3.1 Key Stakeholder Benefits ........................................................ 26
3.1.3.2 Other Benefits.......................................................................... 26
3.1.4 Common Online Message Format ......................................................... 26
3.1.4.1 Key Stakeholder Benefits ........................................................ 27
3.1.4.2 Other Benefits.......................................................................... 27
3.2 Test Execution...................................................................................................... 27
3.2.1 L3 Test Plan Template ........................................................................... 27
3.2.1.1 Key Stakeholder Benefits: ....................................................... 28
3.2.2 Common Terminology Glossary ............................................................. 28
3.2.2.1 Key Stakeholder Benefits ........................................................ 29
3.2.3 L3 Testing/Retesting Criteria .................................................................. 29
3.2.3.1 Key Stakeholder Benefits: ....................................................... 30
3.3 Test Results Submission and Validation ............................................................... 30
3.3.1 Test Report Guidelines .......................................................................... 30
3.3.1.1 Key Stakeholder Benefits: ....................................................... 31
4 Further EMVCo Efforts (Phase II) ............................................................................... 32
4.1 EMVCo Technical and Administrative Support ..................................................... 32
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 6 / 34
Figures
Figure 2-1: Chip Tool Development Life Cycle ........................................................ 19
Figure 2-2: Payment system Process Models ......................................................... 22
Tables
Table 2-1: Type Approval vs Terminal Integration Testing ...................................... 17
Table 2-2: Payment system References.................................................................. 18
Table 3-1: Machine-readable Card Image Benefits ................................................. 24
Table 3-2: L3 Test Case Criteria Benefits................................................................ 25
Table 3-3: Common Card to Terminal Log Format Benefits .................................... 26
Table 3-3: Common Online Message Log Format Benefits ..................................... 27
Table 3-4: L3 Test Plan Template Benefits ............................................................. 28
Table 3-5: Common Terminology Glossary Benefits ............................................... 29
Table 3-6: L3 Testing Criteria Benefits .................................................................... 30
Table 3-7: Common Report Requirements Benefits ................................................ 31
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 7 / 34
1 Background
The Terminal Integration Task Force (TITF) was established by EMVCo in September 2013,
to examine the Payment Systems’ testing processes for the integration of EMV contact and
contactless acceptance devices into their payment environments. The task force’s mission
was to determine the feasibility of standardizing key elements of these individual processes,
thereby delivering a more streamlined integration testing experience to Chip acquirers and
acquirer processors (Testers) that support multiple Payment Systems.
The charter defined by EMVCo for the task force required a detailed review of the various
processes that Testers encounter to meet individual Payment Systems’ requirements for a
terminal that has been approved by EMVCo and is ready for deployment in the field. The task
was to determine the possibilities of creating standardized, consolidated processes,
leveraging the EMVCo infrastructure as necessary. If opportunities were identified, the task
force would present a proposal to the EMVCo Board for approval to implement as necessary.
The task force’s initial efforts concluded that many elements of the individual processes could
indeed be standardized for better efficiencies. This document, re-released as the EMVCo
Level 3 Testing Framework – Process Enhancements – v1.1:
• Outlines the initial findings on synergies and differences across the various processes.
• Describes the intended standardization areas, as identified by the six participating
Payment Systems that are members of EMVCo.
• Provides details of the next steps that would need be taken by the TITF to achieve a
more standardized L3 testing process.
• Provides a timeline estimate on stages related to delivery of the Phase II initiatives.
Note: Details on specific Payment System’s testing policies and requirements remain out
of scope of the task force’s assignment and are not included in this Framework document.
Policy areas will remain the responsibility of the respective Payment Systems to define,
apply and manage as necessary.
1.1 Audience
This document is intended as a reference for all participants and stakeholders in the EMV L3
Testing Processes, which includes Merchants, Acquirers, Payment Systems, Payment
Processors and third-party test tool and service providers.
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 8 / 34
1.4 Glossary
Below is a working glossary of common L3 testing process terms and abbreviations.
A
A Alpha
AAC Application Authentication Cryptogram
Acquirer Financial institution which passes on transaction data from
merchant to payment system.
ADA Application Default Action
ADF Application Definition File
ADVT Acquirer Device Validation Toolkit. The Visa Inc and Visa Europe
terminal integration testing process.
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 9 / 34
C
CAM Card Authentication Method
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 10 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 11 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 12 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 13 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 14 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 15 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 16 / 34
2 L3 Testing Overview
EMV Terminal Integration Testing (now referred to as L3 Testing) encompasses all the testing
activities and processes required of Testers by each of the respective Payment Systems. It is
a prerequisite to the deployment of any chip acceptance device that will accept payment
products associated with those Payment Systems. This section provides a:
• General overview of the current process, including its scope and objectives.
• High level overview of each of the respective Payment Systems’ current processes.
2.1 Objectives
Although elements of each of the respective Payment Systems’ L3 testing processes may
differ, the overall objectives are largely consistent and all include requirements to:
• Validate the terminal’s ability to process Chip data, specifically for products designed to
interoperate with the Payment Systems’ networks.
• Apply pre-emptive steps to identify and resolve terminal misconfiguration cases prior to
deployment, which if uncorrected, could ultimately lead to interoperability issues.
• Ensure, in many cases, end-to-end validation of online transaction request and response
messages, specifically related to the transportation of Chip data.
• Enable validation of compliance with each Payment System’s terminal configuration
rules, requirements and recommendations.
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 17 / 34
2.2 Scope
As EMVCo currently administers Type Approval processes for testing and approval of
terminals in accordance with both the EMV Level 1 and Level 2 specification requirements, it
is important to delineate these processes from the L3 terminal integration processes described
in this framework document.
The table below provides this delineation:
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 18 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 19 / 34
The chart below illustrates the Chip Tool development and readiness cycle.
(3) Tool
Qualification/Confirmation
by Brands
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 20 / 34
Some Payment Systems may post a list of card simulator tools confirmed or qualified in
accordance with their requirements on their web sites.
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 21 / 34
• Client Service Provider: Some Payment systems are beginning to establish a third-party
service provider model. Acquirers/processors can enlist the services of a Payment system-
accredited third-party to assist with the required test execution and results submission
steps. This option is considered very valuable to acquirers/processors that may not have
the necessary technical expertise in-house to complete the required tasks.
• Payment Systems Service Provider: A number of Payment System-enlisted service
providers are available globally that have extended their services to accommodate some
of the L3 testing requirements of the Payment systems. These include, but are not limited
to, services such as the validation of test results on behalf of the Payment systems’.
• Payment system-provided service: Some Payment systems have established internal
support teams for the purposes of assisting clients and processors in each of the required
L3 testing steps.
Note: Similar to the L3 test tool qualification process, Payment Systems generally have in
place a Service Provider accreditation process for entities wishing to offer L3 supports
services to either clients or to the Payment Systems themselves. This generally entails a
demonstration by the prospective Service Provider their ability to perform the services
desired by the Payment System.
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 22 / 34
The chart below provides an illustration of the models currently adopted by each of the six
studied Payment systems for each of the respective process steps.
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 23 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 24 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 25 / 34
[L3FIG] section 3.6 provides details of the standardized Card Terminal log format defined by
EMVCo.
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 26 / 34
As submission of these online message logs is a requirement for some results submission
processes, developing a dedicated log for online messages will result in a simplified and
consistent development effort for the chip tool vendors.
[L3FIG] section 3.7 provides details of the standardized online message log format.
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 27 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 28 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 29 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 30 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 31 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 32 / 34
Use of a centralized portal will ensure information consistency and that stakeholders have
access to the latest documents, templates and guidelines for their respective requirements or
processes.
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 33 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.
EMV® Level 3 Testing Framework
Process Enhancements v1.1 Page 34 / 34
October 2016
© 2016 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to
the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark
of EMVCo, LLC in the United States and other countries.