EMV应用程序开发问题 [英] EMV application development Questions
问题描述
我是EMV的新手，目前我有一个紧急EMV应用程序开发项目，任何人都可以帮助我回答以下问题:
I am new to EMV, currently I have an emergency EMV application development project, anybody could help me answer the below questions:
-
什么是EMV L2应用程序内核?是API还是可执行的EMV应用程序?
what is EMV L2 application kernel? Is an API or just an executable EMV application?
在EMV付款交易过程中，需要从Chip& Pin卡中捕获什么样的数据(消息)信息，以便它可以提交给银行卡发卡行以进行授权.付款交易数据应使用哪个ISO规范.
During an EMV payment transaction, what kind of data(message) information need to be captured from Chip&Pin card so that it could submit to bank card issuer for authorization. Which ISO specification that the payment transaction data should apply for.
EMV终端与收单方之间的连接方式如何? IP还是串行端口?
what kind of connectivity between EMV terminal and acquirer? IP or Serial Port?
是否有用于EMV应用程序开发的测试工具?例如收单方主机模拟.
Any testing tools for EMV application development? Such as acquirer host simulation.
5.开发EMV应用程序需要花费多少时间?
5.How much time it will take for an EMV application development?
推荐答案
1] 什么是EMV L2应用程序内核?是API还是可执行的EMV应用程序?
它不是应用程序而是API.该软件将使用底层硬件与您的EMV卡进行通信，并管理所有EMV应用程序级别协议(APDU).如果您要开发特定的支付终端，则必须与制造商联系以购买其内核(例如:Ingenico，VeriFone).如果您是为PC解决方案开发的，则可以购买一些通用内核(例如: EmvX ).您可能不想编写自己的内核，此博客估算了这样做的成本:
It is more an API than an application. That's a piece of software that will use the underlying hardware to communicate with your EMV card, and will manage all of the EMV application level protocol (APDUs). If you're developing for a specific payment terminal, you'll have to contact the manufacturer to buy its kernel (ex : Ingenico, VeriFone). If you develop for a PC solution, you can buy some generic kernel (ex : EmvX). You probably don't want to write your own kernel, this blog estimates the cost of doing so :
EMV建议花大约18个月的时间来开发和认证联系人内核. [...]正常值在20万至40万欧元之间.
2] 在EMV付款交易期间，需要从Chip& Pin卡中捕获什么样的数据(消息)信息，以便可以将其提交给银行卡发卡行以进行授权.付款交易数据应采用哪种ISO规范.
有关EMV协议的文档可在 EMVco.com 上公开获得. EMV卡是芯片卡，这意味着您不会从卡中捕获信息，以后再将其提交给银行(收款人).在(非常简短)中，您的卡将向您的应用程序提供其特征，并需要一组可变的参数(例如:金额，日期，小费等).您的应用程序将回复所需的信息，然后卡将最终决定是脱机接受交易，在线接受(由发行人验证)还是拒绝交易.
The documentation for the EMV protocol is publicly available at EMVco.com. An EMV card is a chip card, meaning you don't capture info from the card to later submit it to your bank (acquirer). In (very brief), your card will provide its characteristics to your application, and require a variable set of parameters (ex : amount, date, tip, etc.). Your application will reply with the required info and the card will then eventually decide if it accepts the transaction offline, accepts it online (after validation by the issuer), or rejects it.
3] EMV终端与收单方之间的连接方式如何? IP还是串行端口?
在终端和收单方之间，大多数情况下是拨号连接(2012年美国有60％的商家)或IP连接.
Between terminal and acquirer, it's a dial-up connection most of time (60% of merchants in the U.S. in 2012), or IP connection.
4] 是否有用于EMV应用程序开发的测试工具?例如收单方主机模拟.
一堆.您将需要一个发卡行模拟器(Visa，万事达卡等)，一个收单行(银行)，一个取决于您所使用的收单行的模拟器(在加拿大，可能是Base24).然后，您将需要使用工具来解决应用程序和EMV卡之间的通信问题(例如: SmartSpy )，并最终准备认证的工具(例如:来自 ICC解决方案，或Fime )
A bunch. You'll need a card issuer simulator (Visa, Mastercard, etc.), an acquirer (bank), simulator which will depend on the acquirer you're working with (in Canada, it could be Base24). You'll then need tools to troubleshoot communication problems between your application and EMV card (ex : SmartSpy), and eventually tools to prepare for certification (ex : from ICC Solutions, or Fime)
5] EMV应用程序开发需要花费多少时间?
很多.在我工作的地方，一支拥有6名在EMV交易和支付应用程序方面具有丰富经验的开发人员团队花了仅仅一年多的时间，从头开始为Ingenico终端编写新的支付应用程序，并准备好进行认证.最痛苦的部分之一就是要成功进行认证测试. 以PC环境为目标可能会使开发更容易(更轻松的调试，更多的在线资源和文档等)，但是没有内部技能和经验将大大增加成本
A lot. Where I work, it just took a little bit more than 1 year to a 6 developers team with a strong experience in EMV transactions and payment applications to write a new payment application from scratch for an Ingenico terminal and to get it ready for certification. One of the most painful part is to succeed certification tests. Targeting a PC environment may make development easier (easier debugging, more online resources and documentation, etc), but not having in-house skills and experience will increase significantly the cost
这篇关于EMV应用程序开发问题的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
