Reputation: 19
I'm working on e-payment mobile application and he need some answers for the following questions:
Upvotes: 1
Views: 522
Reputation: 1418
First of all, contactless payments are standardized by an organization called EMVCo, so it is never a bad idea to spend some time reading the documentation. You can start here: https://www.emvco.com/specifications.aspx
Some quick answers to your questions:
Card details are the ones you can see printed on a card, plus secret keys and credentials. They are as good as encrypted: the Secure Element will not yield data without a mutual authentication procedure, and those data will be encrypted.
You need the permission/collaboration of the card's issuing organization (typically a bank or financial institution). Remember, card details are very well protected 😉
Yes, if by "the NFC" you mean the contactless reader at the point of sale, which will initiate the transaction.
Upvotes: 1