Rubean and CCV, in partnership with Intertrust and Riscure, today announced the launch of a jointly developed contactless payment application that transforms Android handsets running 8.0 Oreo or later into contactless payment terminals, supporting PIN entry with no additional hardware.
Developed to PCI CPoC standards and certified to Visa and Mastercard brand pilot-programs, PhonePOS will launch first in Germany and then roll-out more broadly throughout Europe. The solution will be deployed through European-based acquiring banks, and also offered as a service through CCV.
“This has been an enormous technical team effort,” said Bill Horne, general manager of the Secure Systems product group at Intertrust. “Combining whiteCryption, our world-class application shielding for zero-trust environments, with Riscure’s penetration testing and certification, has brought down barriers for Rubean and CCV to deliver streamlined payment capabilities to the market.”
By making commerce even more frictionless, millions of merchants can now safely and easily accept card payments from anywhere. The solution brings card acceptance and enhanced business opportunities to millions of micro-merchants. It enables them to accept credit cards for goods and services using only PhonePOS and their Android handset. It requires no additional hardware, removing the expense and hassle of the card-readers and dongles necessary with alternative solutions. PhonePOS is also being tested for deployment onto professional retail tablets with full terminal-management capabilities, extending support to larger retailers.
“The challenge of delivering a software-only solution has revolved around protecting the confidentiality and integrity of payment account data on consumer-grade mobile phones and tablets,” said Hermann Geupel, chief executive officer at Rubean. “With PhonePOS, we have developed a highly secure—and at the same time broadly usable—payment acceptance solution.”
Rubean and CCV have worked together to develop and deploy the seamless solution. Rubean’s security and monitoring software meets the high requirements of a smartphone-based card terminal. CCV’s acCEPT PaaS (Payment-as-a-Service) ecosystem, proven in thousands of live installations worldwide, is the optimum solution for the new tap-on-phone system as it deploys most parts of the POS functionality to the cloud. This makes PhonePOS a lightweight app with increased security and flexibility.
Günther Froschermeier, chief technology officer of CCV Germany, commented, “PhonePOS is an important breakthrough for electronic payments. As cashless payments explode, the benefits of POS integration are becoming paramount. For example, instead of using additional hardware micro-merchants can use their Android smartphone for card acceptance, hospitality providers can integrate electronic payments within their ordering devices, and even large corporations can extend their business with home delivery solutions.”
“Using smartphones as payment terminals means security is crucial,” added Tim Hartog, Director of Mobile Payments at Riscure. “A collaborative effort with Rubean and CCV through the development and certification process leveraged our powerful expertise and track record in mobile-payment security. PhonePOS makes optimal use of best-in-class software security to protect the solution, including secure PIN-entry through hardware-backed TEE technology.”
Intertrust’s whiteCryption solutions have been employed to protect the encryption keys and provide application hardening, bringing a higher level of tamper resistance to the application itself. Riscure provided sophisticated penetration testing and certification.
Rubean AG is a FinTech company listed on the Munich Open Market (Symbol R1B:GR) and has developed the softPOS solution PhonePOS together with partner CCV. Additional information is available at rubean.com.
CCV Group, the family-owned European payment solutions provider services over 600,000 businesses with end-to-end payment solutions in Europe. Our extensive portfolio includes a processing and settlement platform, online and closed loop payments, acquiring services and a wide range of instore and unattended payment terminals. CCV’s focused partnership strategy and direct SME offerings enabled us to take leading positions in all home markets: the Netherlands (HQ), Germany, Belgium and Switzerland. Our success is based on innovation and a long-term customer-focused commitment via partnerships and SME businesses. Additional information is available at ccv.eu or follow us on LinkedIn.
Riscure is a leading vendor of security tools and training for edge devices. We help customers around the world to build robust hardware and software solutions, and implement the best secure development practices. If you are interested in applying Riscure experience to your development, please get in touch with us via firstname.lastname@example.org.
Intertrust provides trusted computing products and services to leading global corporations – from mobile, consumer electronics and IoT manufacturers, to service providers and enterprise software platform companies. Additional information is available at intertrust.com, or follow us on Twitter or LinkedIn.