Beyond Cards and Terminals: Considerations for Testing Host-to-Host EMV Processing

Issuer EMV processing considerations

Issuers face more challenges than the other entities in the EMV transaction processing flow. Not only do Issuers face the difficulty of simulating their various endpoints during testing, they must also ensure their EMV messages are properly formatted and contain the correct content, including managing the cryptogram. In addition, current card management systems and risk management systems must be evaluated and updated to accommodate the new chip cards and associated EMV processing.

Your organization will likely need to develop tests that address needs such as:

• Ensuring your host correctly processes transactions regardless of the terminal’s capability to accept chip cards
• Ensuring your EMV message is properly formatted and that its contents are valid
• Testing your validation of the cryptogram sent in the request message, and ensuring your host security module (HSM) generates the correct cryptogram for the response
• Testing the management of the keys on the card and on the host
• Testing your ability to process Issuer scripts (that can potentially damage your test cards)
• Ensure your card management system and fraud/risk management system have been successfully updated to support chip card transactions

Copyright © 1996-2010, Paragon Application Systems