non$payments,nfc,use,cases · !single use drivers. !commercial vehicle (trucks, busses, taxis)...

Non-‐Payments NFC Use Cases Deborah Baxley Capgemini October 8, 2015 – NFC SoluAons Summit

Financial Services

Deborah Baxley Principal

Cards & Payments Practice

Capgemini Financial Services USA Inc. 623 Fifth Ave., 33rd Fl

New York, NY 10022 USA Mob. +1 914.646.4732 Twitter: @debbaxley

[email protected] www.capgemini.com

Coming soon…

NFC Non-Payments Use Cases A SMART CARD ALLIANCE MOBILE & NFC COUNCIL WHITE PAPER

October 8, 2015 – NFC Solutions Summit

Agenda

§  Use Cases

§  MarkeAng, Loyalty & Couponing §  IdenAty & Check-‐In §  Healthcare §  TickeAng, Transit & Events §  Gaming

•  Security & Implementa<on Considera<ons

October 8, 2015 – NFC SoluAons Summit 3

Loyalty solu<ons transmit loyalty card data along with payments in a single tap transac<on


Marketing, Loyalty & Couponing

Definition of Use Case

Value Proposition

Ecosystem Participants

Implementation Considerations

Real-World Examples

§  Mobile Wallets (or apps) which present loyalty cards via NFC separately or concurrently with an NFC payment tap.

§  NFC POS terminals capable of reading “value added” data separately or during an NFC payment tap.

§  Speed of check-out.

§  User convenience §  Loyalty cards

always available to assure discounts

§  Improved CRM accuracy.

§  Merchants §  OEMs §  Loyalty programs §  MNOs §  GSMA §  Payment terminal

& POS manufacturers

§  Card emulation + SE §  Storage limit on SE §  Same Security Domain as

payment §  Protection from modification

using std trust techniques §  Loyalty app ISO registered

Application Identifier (AID). §  Lack of a standard §  Ecosystem & POS impact

§  Softcard §  GSMA Value

Added Services §  Android Pay §  Samsung Pay

Loyalty

Customers ac<vate coupons & tap to redeem, or redeem concurrently with payments transac<on


Marketing, Loyalty & Couponing


Value Proposition Ecosystem Participants

Implementation Considerations Real-World Examples

§  Mobile Wallets (or apps) which present coupons via NFC separately or concurrently with an NFC payment tap

§  NFC POS terminals capable of reading “value added” data separately or during an NFC payment tap.

§  Speed of check-out §  User benefit of never

leaving a coupon at home

§  Merchant benefit of highly targeted marketing & engaging consumers

§  Able to track redemption tap to a specific phone, user, service provider, date, time, etc

§  Merchants §  OEMs §  MNOs §  GSMA §  Payment

terminal & POS manufacturers

§  Card emulation + SE §  Customer notification of discounts ->

digital coupon stored in mobile app §  Storage limit on SE §  Same Security Domain as payment §  Protection from modification using

std trust techniques §  Loyalty app ISO registered

Application Identifier (AID). §  Lack of a standard §  Ecosystem & POS impact

§  Softcard §  GSMA Value

Added Services

Coupons & Offers

Hotel customers skip front desk by checking in ahead of <me via SMS+link which provisions NFC key to mobile phone


Identity & Check-In




Real-World Examples

§ Use of NFC readers in hospitality setting for access & tracking § Limit access to hotel room, hospitality suite, VIP access

§ Faster service – skip front desk § Credentialing § Appropriate staffing, § Capacity/Crowd control § Security countermeasures against common attacks, eg mutual authentication, message authentication, data encryption

§ Hotels § Amusement parks §  Entertainment §  Hospitality for special events

§ Need for contactless readers § Guest with NFC-enabled devices to store room key credentials to be read by NFC readers

§ Amusement parks § Hotels

Hospitality Check-In

Airline passengers use NFC phones to iden<fy at security, board planes & access airport lounges


Identity & Check-In

Definition of Use Case Value Proposition Ecosystem Participants


Real-World

Examples § Bag drop § Self-service document check § New boarding pass for cancelled or delayed flights § Automated self-boarding § Identify at self-service kiosks & baggage counters § Lost bag report § Ground transportation ticketing § Access airport lounges & priority security lanes

§ Faster boarding § Shorter/Fewer lines § Hassle-free flexibility § Ease-of-use to passengers § Common solution across sales channels, airlines & handsets § Paper elimination § More reliable scanning vs. bar codes § No need for battery or connectivity

§ Airlines § MNOs § International Air Transport Association § SITA § GSMA

§ Secure element or HCE § Store tokens in UICC/SIM each SD w/ unique encryption keys § Peer-to-peer mode § Implementation of multi-model transportation requires collaboration

§ JAL + MNOs § Orange, Air France & SITA Pilot § SAS (using HCE)

Boarding Passes

Mobile ID eliminates wait for badges, streamlines issuing processes & works with exis<ng reader infrastructures


Identity & Check-In



Real-World

Examples § Door opener, mobility ticket, time & attendance tracker § Commercial / Corporate / Institutional badges § Universities/Dormitories § Homes/Apts

§ Convenience – no need to wait for visitor badge § Streamlined ID issuing § OTA Provisioning, Just-in-Time Credentials § Inventory & management cost § Secure storage of IDs

§ OEM handset makers § TSM’s § Tokenization service providers § Security systems integrators § Local distributor/servicers

§ ISO 14443 readers § Integrating NFC readers w/existing physical access controls systems § Potential blue tooth beacons streamline app selection process § Access to SE vs HCE § Enrolling user credential & privileges

§ Quinnipiac § Villanova § ASU § Oberthur, Samsung upcoming Galaxy S6

Facility/Physical Access Control

Mercedes-‐Benz’s upcoming W213 E-‐Class car comes equipped with NFC to allow keyless entry & start



Real-World Examples

§ Tap NFC enabled phone on car door handle to lock /unlock door § Place NFC enabled phone on wireless charging plate to enable ignition

§ Improved convenience & security through fast & secure vehicle access & ignition control without physical keys or fobs § Secure transfer of user data allows customized environment settings providing improved user experience: audio, temperature, seat & mirrors presets, etc. § Improved security reducing car theft

§ Private Car owners/drivers. § Single use drivers. § Commercial vehicle (trucks, busses, taxis) owners & drivers.

§ Secure SIM card § Enrolling user NFC phones in vehicle access system § Integration with vehicle ignition § Integration with vehicle locking system, environmental control, audio, temperature, seat & mirror presets § Severe low and high temperature environmental operation range

§ Mercedes-Benz’s upcoming W213 E-Class car


Identity & Check-In

Vehicle Access Control & Ignition

NFC streamlines & eliminates errors in healthcare tracking of equipment, pa<ents & data


Healthcare

Definition of Use Case Value Proposition

Ecosystem

Participants


Real-World Examples

§ NFC tags on wearables or wrist bands to identify patients with a small handheld device vs bulky scanner § Tracking visits to patient rooms § Hospital staff & equipment check-in/check-out with small NFC devices § Tracking patient movement in hospital § Tracking equipment use § Tracking procedures & distribution of medicine in hospitals § Registration & insurance verification § Records Access § Home based monitoring data collected by devices & transmitted using NFC on mobile device

§ Faster identification § Error elimination vs manual data entry or bar codes § Secure transfer of patient data § Better tracking of equipment, medicine & procedures

§ Hospitals § Clinics § Home healthcare providers

§ Lack of infrastructure in industry § Lack of common industry-wide standards § Cost of provisioning to secure element § Regulations & patient privacy concerns

§ PatientID+ § TapCheck § InfoSkin § Ergonomidesign § Impak Health § Sony – FeliCa NFC Healthcare Library § Health Portal Solutions § CliniCard

Healthcare

NFC drives down costs & improves traveler convenience in contactless transit fare systems


Ticketing, Transit & Events




Real-World Examples

§ Open & closed loop payments in contactless fare systems

§ Virtualized access credential, closed or open loop, drives down costs & improves traveler convenience § Convenient access to ticketing media § Lower costs of media distribution, § Added convenience in fare product purchases § Reductions in fare product sales costs § New promotional fare strategies

§ Transit Operators § Fare systems integrators § Card issuers § Retailers § Payment networks

§ Fragmentation of approaches § Cost of provisioning card or token profile into SE or HCE applet § State of in place fare system- card based, account based, closed loop, open loop § Supported technologies- Mifare, Calypso, contactless MSD, contactless EMV, § Agency capital planning

§ Chicago CTA § Philadelphia SEPTA § JR Railway mobile Suica § Seoul T-Money

Transit

NFC provides flexibility in delivery, presenta<on & valida<on for event <ckets


Ticketing, Transit & Events



Real-World Examples

§ Sales & distribution of tickets for special events, concerts, sports, etc. § Identification, assessment, selection, purchase, & presentation of tickets

§ Self service product ticket selection, real time inventory access, & payment. Instantaneous delivery to user device avoids queuing § Simplicity in ticket re-sales & re-allocation of unused inventory § Control of fraud associated with printed media & bar code § No dependence on battery power § Fast throughput at access points § Peer to peer transfer

§ Special Events boards § Sports teams § Sports leagues § Ticket sales agencies § Specialty systems suppliers

§ State of in place systems – complexity & immaturity § HCE vs. SE models § On-line vs. off-line authentication/ validation § OTA delivery, validation, cancelation

§ Manchester City FC (UK)

Events Ticketing

Bringing “toys to life” & enabling mul<-‐player games blurs line between virtual & physical worlds & adds an intui<ve "cause & effect" capability


Gaming



Real-World Examples

§ “Toys to Life:” places character figures on NFC device that "imports“ character into game as playable character § Figure remembers points or achievements earned

§ Blurs line between virtual & physical world. Brings toys to life & makes game more enjoyable. Makes game mobile by connecting to any network or device.

§ Game providers e.g. Xbox, PlayStation, Wii

§ Tradeoff between open loop ubiquity vs closed loop cost/security

§ Skylanders § Disney Infinity § Amiibo § U.B. Funkeys

§ Enable multiplayer games by simply bringing two devices (Android phones) into close proximity § “Touch to beam” attacks at another player

§ Enables real-time, social element that gamers previously only enjoyed in a console setting

§ Uses peer-to-peer mode

§ Gun Brothers § Near Field Ninja § The World of Yo-Ho

Gaming

Despite NFC’s inherent advantages, security, infrastructure and device challenges have some<mes driven the market to bridge technologies – BLE, QR codes


Considerations


AWracAveness to hackers generally lower vs. payments • Secure Element = at least as secure as a chip card, except for connecAvity to Internet which may necessitate limiAng access to approved apps

• HCE = depending on sensiAvity of app, security must be layered on, e.g. limited use credenAals aka tokens, TEE

• Security can be miAgated with system-‐level monitoring for suspicious paWerns

MulAple standards in place = MIFARE, contactless payments, iClass, Legic, Felica – causing compaAbility problems

Inconsistency in antenna placement, performance, baWery, presentaAon (e.g. screen lit?) challenges a common soluAon across broad number of devices

Security

Infrastructure

Devices

non$payments,nfc,use,cases · !single use drivers. !commercial vehicle (trucks, busses, taxis)...

Documents