You are on page 1of 36

Chip Card Acceptance Device

Testing and Approval Requirements


Version 4.0

Effective: June 2010


Classification: Visa Public
DOCUMENT HISTORY

Document History

Author Version Date Description

Approval Services 4.0 June 2010 Release

Section 2: New Approval Services Agreements section


Section 3: Updated the questionnaire submission process

Approval Services 3.0 March 2010 Release

June 2010 Visa Public


TABLE OF CONTENTS

Table of Contents

About This Guide .............................................................................................................. 1


Purpose of Document.................................................................................................................. 1
Visa Recognized Laboratories .................................................................................................... 1
Specifications and Requirements................................................................................................ 1
Support and Contact Information ................................................................................................ 1
Disclaimer.................................................................................................................................... 2
Section 1: Device Testing Overview........................................................................... 3
EMVCo Device Testing and Approval - Contact Devices .......................................................... 3
EMVCo Device Testing and Approval - Contactless Devices.................................................... 4
Section 2: Approval Services Agreements ................................................................. 5
Approval Services Testing Agreement (ASTA)........................................................................... 5
Visa Secure Access Service Agreement..................................................................................... 5
Section 3: Forms and Scheduling............................................................................... 6
Approval Services Questionnaire................................................................................................ 6
Scheduling................................................................................................................................... 7
Required Forms for Testing ........................................................................................................ 8
Submit Testing Materials............................................................................................................. 8
Section 4: Test Plans and Test Tools....................................................................... 10
Test Plans ................................................................................................................................. 10
Commercial Test Tools and Test Scripts .................................................................................. 10
Enhancements and Modifications ............................................................................................. 10
Quality Assurance Testing ........................................................................................................ 10
Section 5: Functional Testing ................................................................................... 11
Sharing of Test Results............................................................................................................. 11
Visa Contactless Payment Testing ........................................................................................... 12
Scope Testing and Approval – Contactless .............................................................................. 13
PCDR ........................................................................................................................................ 13
PCDA ........................................................................................................................................ 13
PCDI.......................................................................................................................................... 14
Intelligent Contactless Readers ................................................................................................ 14
Laboratory Test Results ............................................................................................................ 16
Section 6: Approval Process .................................................................................... 18
Legal Conditions and Restrictions............................................................................................. 18
Visa Approved Products List ..................................................................................................... 19
Section 7: Renewal of Approval ............................................................................... 21
Renewal Criteria........................................................................................................................ 21
Renewal Process ...................................................................................................................... 21
General Conditions and Exceptions.......................................................................................... 21
Section 8: Changes to Previously Approved Device ............................................... 23
Proprietary Application .............................................................................................................. 23
Application Porting .................................................................................................................... 23
Antenna Changes...................................................................................................................... 23

June 2010 i Visa Public


TABLE OF CONTENTS

Section 9: Changes That Require Full Testing......................................................... 24


Appendix A: Specifications and Requirements ............................................................. A-1
Visa Contactless Payment .......................................................................................................A-1
Appendix B: Testing Available by Laboratory ............................................................... B-1
Appendix C: Laboratory Contact Informationn .............................................................. C-1
Appendix D: Glossary ................................................................................................... D-1

June 2010 ii Visa Public


TABLES

Tables

Table 1: Approval Services Contact Information............................................................... 1


Table 2: Check Eligibility of Card Acceptance Device ...................................................... 6
Table 3: Overview of Scheduling ...................................................................................... 7
Table 4: Forms Required for Testing ................................................................................ 8
Table 5: Contactless Device Configuration ..................................................................... 12
Table 6: Testing Required by Contactless Device Configuration.................................... 13
Table 7: Testing for Antenna Changes ........................................................................... 23
Table 8: Changes That Require Full Testing .................................................................. 24
Table 9: Specifications for Visa Contactless Payment.................................................. A-1
Table 10: Testing Available by Laboratory.................................................................... B-1
Table 11: Laboratory Contact Information..................................................................... C-1

Figures

Figure 1: Visa Testing and Approval Process ................................................................... 3


Figure 2: Intelligent Reader (PCDA) connected to another device (e.g. terminal) .......... 14
Figure 3: Testing and Approval for PCDA’s Compliant to the Visa Contactless Reader
Implementation Notes ..................................................................................................... 15
Figure 4: Combination Approval for PCDAs not Compliant to Visa Contactless Reader
Implementation Notes ..................................................................................................... 16

June 2010 iii Visa Public


ABOUT THIS GUIDE

About This Guide About This Guide

Purpose of This document provides an overview of the device testing process for
Document products tested at a Visa-recognized laboratory. It includes information
needed by device vendors, as well as Visa personnel, to understand the
testing that is required for all devices that will support chip card products
that carry the Visa brand.

Visa Recognized To facilitate the testing of devices, Visa has recognized a number of
Laboratories independent laboratories to functionally test devices containing Visa
payment applications on behalf of Visa.
The functions of a Visa recognized laboratory (hereafter referred to in
this document as “Laboratory”) are discussed throughout this document.

Specifications and Device manufacturers are responsible for developing their products
Requirements according to the appropriate Visa specifications and requirements.
Visa specifications and requirements require a technology license
agreement. Technology license agreements can be attained by
contacting PartnerNetwork@visa.com. Appendix A provides information
about selected specifications and requirements.

Support and Visa’s goals are to provide a formal, standardized process for testing
Contact devices that support Visa payment applications, and to enhance
communication between all participants in the device testing and
Information
approval process. Visa Approval Services (hereafter referred to as
“Approval Services”) provides a single point of contact, both for device
vendors and for Visa personnel, on the testing process.
Table 1: Approval Services Contact Information
Email address: ApprovalServices@visa.com

Web site: www.visa.com/ApprovalServices

Facsimile: +1 650 554 6092

Postal Address: Visa Inc


Approval Services
Mailstop M4-2D
PO BOX 8999
San Francisco, CA 94128-8999
United States of America

Postal Address (when using a Please contact Approval Services


courier):

June 2010 1 Visa Public


Disclaimer Visa’s testing services and policies are subject to change by Visa at any
time without notice to any party. This document does not create any
binding obligations for Visa or any third party regarding testing services
or Visa approval, or which obligations exist (if at all), pursuant to
separate written agreements executed by Visa and such third parties. In
the absence of a written binding agreement by which Visa has agreed to
perform testing services for a card acceptance device vendor, no device
vendor should detrimentally rely on this document, nor shall Visa be
liable for any such reliance.
This document is provided on an “as is”, ‘where is”, basis, “with all faults”
known and unknown. To the maximum extent permitted by applicable
law, Visa explicitly disclaims all warranties, express or implied, regarding
this document, including any implied warranty of merchantability, fitness
for a particular purpose and non-infringement.
In no event shall Visa, its principals, members, officers, employees,
affiliates, contractors, subsidiaries, or parent organization, be liable to
you for any special, consequential, incidental, or punitive damages,
including, without limitation, any damages for loss of business profits,
business interruption, loss of business information, or other monetary
loss, whether or not Visa has been advised of the possibility of such
damages.

June 2010 2 Visa Public


DEVICE TESTING OVERVIEW

Section 1: Devi Device Testing Overview


ce Testing
Overview
This section provides an overview of the Visa testing and approval
process for card acceptance devices. The steps shown in Figure 1 are
described in the sections that follow.
Figure 1: Visa Testing and Approval Process

Visa oversees testing of card acceptance devices that support Visa


Contactless Payments. This process allows Visa to ensure that the
devices are developed to Visa specifications and will support Visa
applications.
If the device is successfully tested, Visa issues a letter of approval to the
device vendor that submitted the device for testing. The approval applies
internationally, unless restrictions are specified in the letter of approval.
Note: Approval is not transferable from one vendor’s product to another.

EMVCo Device For contact devices that support Visa Smart Debit/Credit (VSDC):
Testing and  Visa does not require that these devices be submitted to Visa for
Approval - testing and approval.
Contact Devices
 Visa recognizes and supports approval by EMVCo for EMV Level 1
(interface module) and EMV Level 2 (application kernel). Visa
requires that contact devices accepting VSDC chip card products
have EMVCo approval for EMV Level 1 and 2.
EMVCo specifications, type approval administration documentation, test
requirements, and test cases for EMV Level 1 and Level 2 may be
obtained from the EMVCo website at: www.emvco.com.

June 2010 3 Visa Public


DEVICE TESTING OVERVIEW

EMVCo Device Analog and Digital Testing


Testing and
Approval - EMVCo has developed the EMVCo Contactless Communication Protocol
Contactless Specification for the contactless interface (Analog and Digital)
Devices functionality.
For contactless devices:
 Testing and approval to EMVCo’s Contactless Communication
Protocol Specification v1.1 will still be handled directly by Visa.
 Visa recognizes and supports testing and approval to EMVCo’s
Contactless Communication Protocol Specification v2.0 (and higher)
by EMVCo. Visa requires that all contactless devices accepting chip
card products developed to v2.0 (and higher) of the EMVCo
specification have EMVCo approval for the contactless interface
prior to submitting the product to Visa for Visa-application testing.
EMVCo specifications, type approval administration documentation, test
requirements, and test cases for EMV Contactless Interface may be
obtained from the EMVCo website at: www.emvco.com.

Entry Point Testing

The EMVCo Contactless Specifications for Payment Systems – Entry


Point Specification defines the terminal requirements necessary to select
an EMV Contactless Application in an international interchange
environment and provides for backward compatibility with already
existing legacy contactless applications. The Entry Point is designed
around the use of a PPSE as the selection mechanism. For multi-brand
acceptance, this allows a terminal to quickly obtain all the available
brands and applications with a single command and to make an
immediate choice based on priority and kernel availability.
Visa will recognize and support the Entry Point Specification testing done
by EMVCo when it becomes available.

June 2010 4 Visa Public


APPROVAL SERVICES AGREEMENTS

Section 2: Appr Approval Services Agreements


oval Services
Agreements
Test plans and commercial test tools with associated test scripts are
available to assist eligible vendors in quality assurance (QA) testing prior
to submitting chip card products for official testing.
Successful completion of all the test scripts by the eligible vendor does
not imply approval, nor does it depict Visa’s full testing process for the
Visa applications. Rather, it provides the eligible vendor with insight into
the chip card product testing process. Visa reserves the right to develop
and run additional tests that are not part of the current test plan. Testing
at the Laboratory may include subjecting the chip card product to
additional physical and situation specific tests as needed.

Approval Services Before a chip card acceptance device testing can begin the device
Testing Agreement vendor must sign the current Approval Services Testing Agreement with
Visa. This is an agreement between Visa and the product manufacturer
(ASTA)
regarding testing and approval.

Visa Secure Eligible Vendors upon signing the Visa Secure Access Agreement are
Access Service provided access to the secure Visa Partner Network site. This site
provides access to test plans, bulletins, query system, request system
Agreement
and other confidential testing-related information.

June 2010 5 Visa Public


FORMS AND SCHEDULING

Section 3: Form Forms and Scheduling


s and
Scheduling
Device vendors obtain testing information and test requirements, as well
as contractual agreements and other forms, directly from one of the
Laboratories listed in Appendix B, and submit their card acceptance
devices and forms directly to the Laboratory.
Note: With the exception of the Approval Services Questionnaire (discussed in
section Approval Services Questionnaire), the Laboratory will provide the device
vendor with all necessary forms to be completed.
This section discusses the forms that are required for each card
acceptance device to be tested, as well as requirements for scheduling.

Approval Services For each card acceptance device that a device vendor wishes to have
Questionnaire tested, the device vendor must submit an Approval Services
Questionnaire. Visa will use the questionnaire to determine whether the
device is eligible for testing and what testing is required, whether a
request to share test results from a currently approved product is
accepted, and whether changes to an approved product are allowed.
Table 2 outlines the process.
Table 2: Questionnaire Submission Process
Device Vendor 1. Request a VTF number from the Query
System located on the Visa Partner Network.
Log on at
https://partnernetwork.visa.com/vpn/jsp/comm
on/Login.jsp and navigate to Testing and
Approval > Query Application. Submit a
request for a Visa Reference Number.
2. Complete the Questionnaire found at
www.visa.com/devicequestionnaire.
3. Submit the completed questionnaire to each
of the Lab(s) chosen to perform testing.
Ensure that the VTF number obtained from the
Query System has been entered on the
Questionnaire.
Note: All questionnaires submitted to a Lab(s)
must have a VTF number assigned and
populated on the form.

Laboratory(s) Review questionnaire.


 If the product is not eligible for testing,
advise the eligible vendor.
 If the product is eligible, provide written
confirmation of the testing requirements to
the eligible vendor.
Note: Testing may not begin until the eligible
vendor has received confirmation from the

June 2010 6 Visa Public


FORMS AND SCHEDULING

Lab(s) regarding the testing requirements.

Eligible Vendor If the product is eligible for testing, schedule


testing and complete all required forms as
described in section Scheduling through
section Required Forms for Testing.

If there is any dispute in testing requirements between the eligible vendor


and the Laboratory, the Laboratory should contact Approval Services.

If different Laboratories are being used for testing, the eligible vendor
must have written acceptance confirmation from all Laboratories prior to
any testing being performed i.e. testing should not commence until the
questionnaire has been accepted by all Functional Laboratories.
If any problems occur during testing that would not allow the device
product to successfully complete testing:
 Approval Services must be notified immediately
 Official testing shall stop
 The problem found in testing must be corrected and the product
resubmitted for both functional and risk testing.

Scheduling The eligible vendor and Laboratory are responsible for scheduling testing
once the eligible vendor has received testing confirmation from all
Laboratories performing testing. Visa does not take part in or responsible
for any scheduling between the Laboratories and device vendors.
Questionnaires are valid for 90 days from the date testing is
authorized. If testing is required and a product has not started any
testing within 90 days, the testing authorization expires and a new
questionnaire must be submitted for review.
Table 3: Overview of Scheduling
Device Vendor Contact a laboratory to schedule functional
testing1.

Testing Laboratory Provides:


 forms that must be completed in full and
submitted to the laboratory prior to the
start of functional testing
 a testing date and estimated time to
complete testing

Device Vendor Notify the Laboratory directly of any delay in


submitting a chip card acceptance device for
testing.

1
It may be necessary to contact more than one Laboratory, depending on the characteristics of
the card acceptance device and the testing available at various Laboratories.

June 2010 7 Visa Public


FORMS AND SCHEDULING

Required Forms Testing will not begin until the Laboratory has received all of the forms
for Testing described in Table 4. All of these forms must be submitted for each test
cycle, that is, if the card acceptance device fails testing or is withdrawn, a
new version of each form must be completed and submitted when the
device is submitted for retesting.

Forms Required Before Testing Begins

Table 4: Forms Required for Testing


Form Description

Exhibit A: Request for Signed by the eligible vendor and by Visa.


Testing Services Form Establishes Visa’s right to review results
(addendum to ASTA) submitted by the eligible vendor, following
testing at a Laboratory.

Implementation Detailed information regarding the Visa


Conformance payment application, platform, or interface.
Statement
A separate statement is required for each
application supported by the device:
 Visa Contactless Payment Application
(included as a part of the device
questionnaire)
 Analog/Digital (EMVCo Contactless
Specification v1.1 only)

Forms Required After Testing

Form Description

Request for Approval Official request for Visa to begin the approval
Form process for a product tested at a Laboratory.

Submit Testing This section lists requirements when submitting card acceptance devices
Materials for testing (in addition to the forms discussed in section Forms and
Scheduling).

Device

The device vendor must send three complete sets of identical devices to
the Laboratory. The Laboratory will send two of the devices to Visa.

Other Approval/Compliance Requirements

Visa Contactless Payment

The device must comply with the Visa Contactless Payment


Specification, including any associated documents referenced within that
specification.

June 2010 8 Visa Public


FORMS AND SCHEDULING

Applications

Applications must be in compliance with Visa’s specifications, as listed in


Appendix A2. Applications must be final versions, in the state that they
will be issued into the marketplace.

Peripherals

All device vendors must supply a terminal/acquirer simulator on CDROM.


This is especially relevant for contactless readers. The simulator must be
able to show, in a readable format, the data being sent from the reader to
the terminal or the terminal to the acquirer. The simulator must be able to
perform online approvals or declines for Quick Visa Smart Debit/Credit
(qVSDC) devices. The simulator is required so that any required data
elements being sent from the reader/terminal may be reviewed to
determine whether the data has been formatted according to Visa
specifications when specified.

Operating Manual

The device vendor’s operating manual, describing the operation of the


device, must accompany the device at each test cycle submission. A
softcopy is acceptable on CDROM.

2
Visa does not test proprietary or domestic applications as part of the testing process. In
particular, the following are outside the scope of Visa device testing:
a. Non-Visa applications (e.g., cash, loyalty, coupons, refunds, etc.)
b. Specific message formats, record layouts, and protocol handling from the device to an Acquirer
host system.

June 2010 9 Visa Public


TEST PLANS AND TEST TOOLS

Section 4: Test Test Plans and Test Tools


Plans and Test
Tools
Test plans and test scripts are available to assist vendors in quality
assurance (QA) testing prior to submitting card acceptance devices for
official testing.
Successful completion of test plans by the device vendor does not imply
approval, nor does it depict the full testing process required by Visa,
rather, it provides the device vendor with insight into the device testing
process. Visa reserves the right to develop and implement additional
tests that are not part of the current test plan. Testing at the Laboratory
may include subjecting the device to additional physical and situation
specific tests as needed.

Test Plans Before requesting test plans, the device vendor must sign the Approval
Services Testing Agreement, discussed in section Approval Services
Testing Agreement and must sign any applicable license agreements.
Test plans are available online once the device vendor has completed
the required user agreement and created an account.
The following test plans are available from Approval Services:
 Test Plan for Visa Contactless Magnetic Stripe Data (MSD)
Application
 Test Plan for Visa Contactless qVSDC Application
Visa grants a device vendor permission to use the test plans solely for
purposes of developing and testing products for a Visa application
subject in all respects to the terms and the continued effectiveness of the
applicable license agreement between the device vendor and Visa. Test
plans and all intellectual property subsisting therein are the property of
Visa. These materials are provided on an “as is” basis “with all faults.”
Visa disclaims all warranties pertaining to these materials, expressed or
implied, including the implied warranties of merchantability, fitness for
purposes, or non infringement.

Commercial Test Commercial test tools and test scripts are available from test tool device
Tools and Test vendors. Contact details are available at
http://www.visa.com/approvalservices.
Scripts

Enhancements Test plans and test scripts are subject to enhancements and
and Modifications modifications at any time. Test plan revisions will be accumulated and
made available to device vendors with new releases as determined by
Visa. It is the device vendor’s responsibility to ensure that they have the
most current test plan available. Device vendors should contact their tool
supplier to obtain any test script updates.

Quality Assurance Laboratories performing functional testing may offer quality assurance
Testing testing that can be completed prior to submitting a card acceptance
device for official testing. However, quality assurance testing and the
results will not be recognized as part of Visa’s official testing and
approval process.

June 2010 10 Visa Public


FUNCTIONAL TESTING

Section 5: Func Functional Testing


tional Testing

Visa’s testing process requires each card acceptance device to complete


a test cycle with successful results. A test cycle is defined as completion
of all applicable test scripts performed on a single version of the device
vendor’s application, with no issues discovered.
Testing differs depending on the product being submitted. Devices are
fully tested according to Visa specifications.
Visa’s testing and approval process focuses solely on the components
and application that are defined by Visa specifications. This testing is to
ensure that Visa products fully comply with applicable global Visa
requirements and specifications. Other software or components that also
exist in the reader or terminal are considered out of scope for testing
consideration. Visa does not test vendor proprietary software. Whether
the reader or the terminal is tested, Visa’s approval is limited to
components and software that support Visa specifications. In addition,
there may be additional regional requirements that may apply, such as
Visa Asia-Pacific’s VisaWave™. Please contact a regional Visa
representative for further information.
Visa performs additional testing on each acceptance device product
submitted to Visa for type approval testing. As a part of the normal
functional testing, each device is tested for analog, digital and Visa
application compliance. In addition, each device product is tested against
approved Visa cards. This testing, referred to as cross-testing, is
performed to ensure any device submitted for type approval will function
against approved Visa cards. This way, Visa can check that approved
devices should not introduce interoperability problems with already
approved Visa cards in the field. Cross-testing is a part of the official
testing process and the performance during this testing will go into the
final approval consideration. Devices that fail to communicate with Visa
cards may not be eligible for approval.

Sharing of Test Eligible device vendors that have signed the Approval Services Testing
Results Agreement May 2006 (or later) will have the opportunity to leverage
functional test reports from previously approved products.
Note: If Visa discovers a defect in a previously approved component, all
device vendors involved in the sharing consent to Visa's communication
of all relevant information to each affected device vendor and its
customers, including an explanation of the nature of the defect and
products at issue.
Shared test results are permitted only if:
 The products have at least a contactless interface
 All device vendors involved in the sharing have signed the
appropriate agreements allowing reports to be shared.
 The components being leveraged have been tested and approved
with no issues.
 The components being leveraged are not already sharing test

June 2010 11 Visa Public


FUNCTIONAL TESTING

results from another product.


A product using shared results will be tied to the original approved
product:
 The new product will receive the same expiration date as the
product from which the results are shared.
 If for any reason the original product is not renewed, any product
sharing testing results will not be renewed either.
 If the original product is revoked, then all products sharing testing
results will be revoked.
 If the original product is modified and/or updated, then all products
sharing testing results may require additional testing.
Note: If a product is submitted for full testing, it receives an independent
approval and its expiration date is not tied to any other product.
Note: The Sharing of Test Reports Questionnaire is part of the
Questionnaire.

Visa Contactless Visa Contactless Payment allows devices to perform a Visa payment
Payment Testing transaction over radio frequency (Type A and Type B). A contactless
device may be submitted for testing in one of the configurations
described in Table.
Note: Beginning March 1, 2010, all devices submitted for approval to
VCPS 2.1.1 must either be IRWIN compliant (Reader Implementation
Notes version 1.1) or a full terminal supporting all VCPS requirements.
Other combinations of terminal and/or readers will not be accepted for
2.1.1 approval testing.
Table 5: Contactless Device Configuration

Proximity Coupling Device Reader A contactless reader that supports


(PCDR) only the contactless interface.
Note: This is not a valid
configuration for VCPS 2.1.1.

Proximity Coupling Device with A contactless reader that supports


Application (PCDA) the contactless interface with a
qVSDC and/or MSD application.

Proximity Coupling Device A device that supports a qVSDC


Integrated (PCDI) and/or MSD application and is
connected to or contains a
contactless reader (PCDR) that
supports the contactless interface.

The testing required for Visa Contactless Payment varies depending on


the device configuration as described in Table 6.

June 2010 12 Visa Public


FUNCTIONAL TESTING

Table 6: Testing Required by Contactless Device Configuration

PCDR PCDA PCDI

Analog Testing Tests the physical layer   


for magnetic field
generation

Digital Testing Tests the logical layer   


for protocol/contactless
interface

Application Tests the functionality of  


Testing the Visa payment
transaction

Scope Testing and Visa’s testing will encompass requirements defined in Visa Contactless
Approval – Payment Specification including any associated documents referenced
within the specification.
Contactless
The contactless reader will be tested to ensure that the application
complies with the requirements in Visa's specification. The analog and
digital processing will be tested to ensure that it complies with the
associated contactless specification referenced within Visa's
specification. These requirements are mandatory whether the
component supports any Visa application or whether it is only a
contactless reader.
Any changes to the antenna or to the firmware and software that operate
the approved contactless reader would negate Visa’s approval. The
device vendor would be required to resubmit the product to Visa and/or
EMVCo for testing and approval. See section Changes to Previously
Approved Device for details on changes to previously approved
products.

PCDR PCDR’s are generally the reader component that handles the contactless
interface (analog and digital). Such devices are tested and approved to
the ISO OSI presentation layer protocol (ISO/PP) requirements to ensure
they can safely and consistently power and communicate with a
contactless card.
As these types or readers do not support the qVSDC or MSD application,
they must be connected to some type of device (terminal, POS, EPOS),
in order to perform a contactless transaction. Device vendors developing
devices with the qVSDC and/or MSD application may reduce the amount
of required testing by using an approved PCDR. See Sharing of Test
Results section for details.

PCDA PCDA’s contain all the components to perform a payment transaction


(i.e. qVSDC and/or MSD application with the contactless interface). This
type of configuration is generally, but not limited to the following types:
 A stand alone device (i.e. terminal, POS, EPOS) that supports all
the components for the contactless transaction
 A reader type device that supports all the components for the

June 2010 13 Visa Public


FUNCTIONAL TESTING

contactless transaction, is meant to be connected to another device


(i.e. terminal, POS, EPOS), to carry out the transaction. Such
readers are generally referred to as “intelligent readers.”
Device vendors may utilize intelligent readers that support MSD only
without the need to perform any additional testing. Device vendors that
are using an intelligent reader that supports qVSDC may be required to
perform additional testing due to the interaction of the reader and
terminal during a qVSDC transaction. See section Intelligent Contactless
Readers for details. However, device vendors developing the terminal to
connect to the intelligent reader may reduce the amount of required
testing by using an approved PCDA. See section Sharing of Test Results
for details.

PCDI PCDI’s make up the other half of the contactless transaction when
connected to a PCDA. Such devices are generally terminals, POS, or
EPOS that only contains the qVSDC and/or MSD application. These
devices are connected to the PCDA which supports the contactless
interface. As previously stated in the PCDR section, device vendors
developing a PCDI solution may reduce the amount of required testing
by using an approved PCDR. See section Sharing of Test Results for
details.

Intelligent As of August 2008, Visa offers a testing process for intelligent qVSDC
Contactless readers (PCDA). This addresses only the ‘intelligent reader’ PCDA
model, which is described as ‘A reader type device that supports almost
Readers
all of the components for the contactless transaction, but needs to
connect to another POS device to carry out a complete transaction.’
Figure 2: Intelligent Reader (PCDA) connected to another device (e.g.
terminal)

As shown in Figure 2, the full qVSDC application that is tested and


approved by Visa comprises the 95% of the qVSDC application on the
reader plus the 5% of the application on the terminal.
This is optional for VCPS 2.0.2 intelligent PCDA-readers and mandated
for VCPS 2.1.1 intelligent PCDA-readers. Reader types that are eligible
for this process must meet each of the following criteria:
 An intelligent reader (PCDA) that supports qVSDC with or without
MSD support.
 Supports the majority of the transaction functionality within the
reader as defined in the Visa Contactless Reader Implementation
Notes v1.0.1or higher
 Is dependent on another POS device for such functionality as online

June 2010 14 Visa Public


FUNCTIONAL TESTING

support, receipt handling, cardholder verification functionality (PIN


or Signature) and fallback to back-up interfaces, such as magnetic
stripe or contact VSDC
Intelligent qVSDC readers that meet the above criteria will be tested for
the specific functionality directly supported, excluding functionality not
implemented in the intelligent qVSDC reader. Readers receiving an
Intelligent qVSDC Reader approval for VCPS with Visa Contactless
Reader Implementation Notes, will be identified on the Visa Approved
Intelligent Readers Compliant to the Visa Contactless Reader
Implementation Notes (IRWIN or IRWIN compliant) list at
www.visa.com/deviceapls.
Using this new process, vendors will submit their IRWIN Compliant
Reader (as defined above) with all appropriate equipment to operate and
test the reader (i.e. power cables, PC cables, device/host simulator
software). Device/host simulation software must include clear
instructions and the ability to configure and operate the reader. The
software must also be able to display the data being sent by the reader
(i.e. cryptogram information, Track 1 or Track 2 for qVSDC and/or MSD
depending on the reader's capabilities), as well as approve or decline
online transactions.
Figure 3: Testing and Approval for PCDA’s Compliant to the Visa
Contactless Reader Implementation Notes

When a reader is tested and approved as indicated in Figure 3 as IRWIN


compliant and subsequently connected to a terminal or other device
supporting the remaining 5% qVSDC functions, the terminal/device
combination will no longer be required to be submitted to Approval
Services for additional testing unless changes are made to the reader
itself. Any additional integration testing between the Intelligent Reader
and the Terminal will be managed through the globally mandated ADVT
(Acquirer Device Validation Toolkit) qVSDC Device Module during User
Acceptance/End to end testing. Please contact your regional
representative for any local testing requirements.
With the development of this new testing process, intelligent readers will
be in effect more “plug n play” as device vendors will not be required to
submit the various terminal and reader combination to Approval Services
for additional testing. This is provided that the approved intelligent reader
remains the same and is not changed when connecting to different
terminals. Any changes to the approved intelligent reader may require
additional testing and device vendors must contact Approval Services if

June 2010 15 Visa Public


FUNCTIONAL TESTING

changes are being made to an already approved reader to the Visa


Contactless Reader Implementation Notes (IRWIN Compliant Reader).
Figure 4: Combination Approval for PCDAs not Compliant to Visa
Contactless Reader Implementation Notes

For non IRWIN-compliant intelligent readers, as shown in Figure 4, these


PCDA’s are tested with each combination of terminal and reader. When
the approved reader component is connected to any terminal, the
combination must be submitted to Approval Services for qVSDC
regression testing to ensure the 5% of the application on the terminal is
compliant and is interoperable with the intelligent reader.
In summary, all other non IRWIN-implementations, PCDR’s, PCDI’s or
PCDA’s that are not compliant to the Visa Contactless Reader
Implementation Notes will maintain the same testing process they go
through today.

Laboratory Test When functional testing is complete, the Laboratory will provide the
Results device vendor with a report outlining the test results. There are two
possible outcomes from functional testing:

Card Acceptance Device Fails Testing

The laboratory sends a report to the device vendor identifying the tests
that failed and the reasons for the failures. Visa does not accept test
reports for review with test failures.
If the device vendor intends to resubmit the product, the device vendor:
 Corrects the discrepancies
 Submits a new Approval Services Questionnaire
Prepares new versions of the forms listed in section Required Forms for
Testing and the materials listed in section Submit Testing Materials.
 Contacts the laboratory for a new test date

June 2010 16 Visa Public


FUNCTIONAL TESTING

Card Acceptance Device Passes Testing

 The laboratory sends a final report to the device vendor.


The device vendor determines whether they wish to submit the results of
application testing to Visa. If so, the device vendor completes and signs
the Request for Approval form and submits it to the laboratory,
authorizing the laboratory to send an electronic copy of the results to
Approval Services for review.
Test results may be submitted to Approval Services for evaluation up to
90 days from the date testing is completed by the laboratory. Test results
older than 90 days are expired and cannot be submitted for evaluation.
Application re-testing is required to create a current test report if the
validity period is exceeded and Approval Services evaluation is desired.

June 2010 17 Visa Public


APPROVAL PROCESS

Section 6: Appr Approval Process


oval Process

Prior to issuing an approval, Approval Services ensures that all needed


agreements, tests, and reviews have taken place. In particular, Approval
Services ensures that:
 The card acceptance device has passed testing as described in this
document.
 The device vendor has completed all required agreements and
forms and submitted them to the Laboratory (which passes them to
Visa).

Legal Conditions Visa’s approval applies only to products that are identical to the product
and Restrictions tested by a Laboratory. A product should not be considered approved by
Visa, nor promoted as approved, if any aspect of the product is different
from that which was tested by a Laboratory, even if the product conforms
to the basic product description contained in the letter of approval. For
example, if a product contains applications or operating systems that
have the same name or model number as those tested by a Laboratory,
but that are not identical to those tested by a Laboratory, then the
product should not be considered or promoted as approved by Visa.
Visa’s approval is granted solely in connection with a specific product
and to the submitting device vendor. Such approval may not be
assigned, transferred, or sublicensed, either directly or indirectly, by
operation of law or otherwise. Only those device vendors receiving a
Visa approval for a device product may claim that they have the
approval.
No device vendor or other third party may refer to a product, service, or
facility as “Visa-approved”, nor otherwise state or imply that Visa has, in
whole or part, approved any aspect of a device vendor or its products,
services, or facilities, except to the extent and subject to the terms and
restrictions expressly set forth in a written agreement with Visa, or in a
letter of approval provided by Approval Services. All other references to
Visa approval are strictly and actively prohibited by Visa.
When granted, Visa approval is provided by Visa to ensure certain
security and operational characteristics important to Visa’s systems as a
whole. However, approval does not, under any circumstances, include
any endorsement or warranty regarding the functionality, quality, or
performance of any particular product or service. Visa does not warrant
any products or services provided by third parties. Approval does not,
under any circumstances, include or imply any product warranties from
Visa, including, without limitation, any implied warranties of
merchantability, fitness for purpose, or non-infringement, all of which are
expressly disclaimed by Visa. All rights and remedies regarding products
and services that have received Visa approval shall be provided by the
party providing such products or services, and not by Visa. Unless
otherwise agreed in writing by Visa, all property and services
contemplated in this document that Visa provides to any third parties are
provided on an “as-is” basis, “with all faults”, with no warranties
whatsoever. Visa specifically disclaims any implied warranties of

June 2010 18 Visa Public


APPROVAL PROCESS

merchantability, fitness for purpose, or non-infringement.


The issuance of the letter of approval is conditioned upon the device
vendor having executed all necessary agreements, including without
limitation, the applicable license agreements with Visa International, and
shall be of no force and effect unless such agreements have been
executed contemporaneously with or prior to the issuance of the letter.
Note: As described in the Intelligent Contactless Readers section, the
approval granted for qVSDC Contactless Reader Components (non-
IRWIN compliant) is for the portion of the Visa Contactless Payment
Specification to which the Product has been tested. Due to the nature of
this Product (i.e. a reader component that connects to a terminal), some
requirements cannot be validated against the Visa Contactless Payment
Specification as the reader was tested without a terminal.
Visa Contactless Payment Specification global approval is contingent
upon the Product being combined with a terminal that provides the
remaining required functionality. Each combination of the Product and
terminal must undergo additional testing at a Laboratory to ensure full
Visa Contactless Payment Specification functionality is supported if the
reader is not compliant to the Visa Contactless Reader Implementation
Notes.
Each combination must be submitted for additional testing in order to
receive full approval. Approved Contactless Reader Components have
all received a Visa approval with a noted limitation described in the
device vendor's letter of approval under the heading of Scope of
Approval and this limitation should be shared with the buyer.
Intelligent Readers approved to the Visa Contactless Reader
Implementation Notes (IRWIN Readers) are exempt to the above note.

Visa Approved Upon successful completion of official testing, the card acceptance
Products List device will appear on one of the three Approved Acceptance Device
Products Lists located at www.visa.com/deviceapls.
 Visa Approved Chip Card Devices Supporting Visa Contactless
Payments
 Visa Approved Chip Card Reader Components Supporting Visa
Contactless Payments
 Visa Approved Intelligent Readers Compliant to Visa Contactless
Reader Implementation Notes
Contactless Reader Components supporting qVSDC that were tested
without a terminal and that are not compliant to the Visa Contactless
Reader Implementation Notes will appear on the Visa Approved Chip
Card Reader Components Supporting Visa Contactless Payments list.
This is to clearly emphasize that full qVSDC implementation has not
been verified because there was no attached terminal during testing.
These readers require further testing at a Laboratory when combined
with a terminal and whose combination is not currently approved.
Intelligent contactless readers supporting qVSDC that are compliant to
the Visa Contactless Reader Implementation Notes (IRWIN Readers) will
appear on the Visa Approved Contactless IRWIN Readers list. This is to
clearly emphasize that full qVSDC implementation has not been verified
because there was no attached terminal during testing. These readers

June 2010 19 Visa Public


APPROVAL PROCESS

require further testing at the Acquirer using the Acquirer Device


Validation Toolkit (ADVT) qVSDC Device Module when combined with a
terminal.

June 2010 20 Visa Public


RENEWAL OF APPROVAL

Section 7: Rene Renewal of Approval


wal of Approval

This section describes the requirements and process of renewing the


approval of a card acceptance device.

Renewal Criteria Device products eligible for renewal must meet all of the following
criteria:
 The device complies with Visa’s then current versions of
specifications and requirements as described in Appendix A.
 The product’s letter of approval contains no comments/specification
deviations; that is, there are no items identified during testing that
are required to be corrected in the next version of the product.
 The product has successfully completed any additional testing that
may be required.

Renewal Process When a device product is approved by Visa, it is assigned a renewal


date which is communicated to the device vendor in the letter of approval
and also appears on the Visa Approved Products List.
Note: The renewal date is typically two years after the date of approval
unless otherwise noted.
As a device approaches its renewal date, Visa reviews the product
details to ensure that it complies with all current Visa policies and
includes a payment application(s) that Visa continues to support. Visa
current renewal policies are available from Approval Services.
When the device is approaching its renewal date, if it is eligible for
renewal (based on the renewal criteria listed in section Renewal Criteria),
Approval Services will contact the device vendor and ask that a request
for renewal form be completed. In completing and signing the form, the
device vendor confirms that no changes have been made to the
approved product and that the device vendor continues to support the
product.
Once the device vendor has confirmed that no changes have been made
to the product, and Visa confirms that the product meets Visa’s Current
polices, the product will continue to be listed on the relevant Visa
Approved Products List.
Effective January 1st 2009, new testing procedures for 2.0.2 application
device testing was introduced to the Laboratories. Any product that was
approved prior to January 1st 2009, which the device vendor wants
renewed, will be required to go through renewal testing at a laboratory
using the enhanced methodology of testing.

General If a card acceptance device does not meet the renewal criteria outlined in
Conditions and section Renewal Criteria.
Exceptions  The device vendor will not be sent a notice advising that the product
is not eligible for renewal. It is the device vendor’s responsibility to
track renewal dates for its approved products and take actions

June 2010 21 Visa Public


RENEWAL OF APPROVAL

appropriate.
 The product will be removed from the Approved Products List the
month following the renewal date.
Renewals are linked to the conditions contained in the letter of approval
sent to the device vendor. If problems are identified with the product after
an approval (or extension if a renewal is granted) Visa may revoke the
approval and/or extension of renewal. Visa reserves the right to revoke
the approvals or extensions at any time.
Visa reserves the right to amend this policy without prior notice. The
effective date of any such change will be communicated to Visa
personnel and device vendors.

June 2010 22 Visa Public


CHANGES TO PREVIOUSLY APPROVED DEVICE

Section 8: Chan Changes to Previously Approved Devices


ges to
Previously
Approved
Device
Device vendors may make certain changes to a device product on the
Visa Approved Products List (see sections below for qualified changes).
The device product must be currently approved and has completed all
required testing. The product must not contain any comments or
specification deviations in the Approval Letter.
To initiate a Change request, the device vendor must submit a
questionnaire at www.visa.com/devicequestionnaire.
Note: Device vendors that have received a letter of approval from Visa
that identified in the comment/specification deviations section issue(s)
that must be corrected in the next version of the product submitted for
testing may not use the process outlined in this section to make changes
to the approved product.

Proprietary The change is to add/change proprietary application(s) on a previously


Application approved product. The device vendor intends that the original product
will no longer be supported as tested. That is, the product that was
approved and appears on the Visa Approved Products List will have
different components than were originally tested.
Note: Visa does not test or approve proprietary applications or applets
but must ensure that changes being made to the product do not
negatively impact the application approved by Visa.

Application The device vendor must not have made changes to the Visa approved
Porting application and must not add new components to the product.

Antenna Changes Table 7: Testing for Antenna Changes

Testing Required

Analog Digital MSD/VSDC


Change in: Application

Inlay Full Selected/Full None/Selected

Inlay Selected/Full Selected/Full None/Selected


Manufacturer

Material Full Selected/Full None/Selected

Note: For other changes to contactless devices the vendor may contact
Approval Services to determine whether the changes may be considered
for the approval process. If EMVCo handled the Contactless Level 1
testing, the vendor should also contact EMVCo to determine if further
testing is required to maintain the EMVCo approval.

June 2010 23 Visa Public


CHANGES THAT REQUIRE FULL TESTING

Section 9: Chan Changes That Require Full Testing


ges That
Require Full
Testing
Certain changes to a previously approved device product require full
testing, as described in section Device Testing Overview. The device
vendor may update/change the original product with the intent that the
original product will no longer be supported as tested. Alternatively, the
device vendor may intend to support both the existing product and the
new product being submitted. The list below is not exhaustive, but
provides examples of commonly questioned scenarios.
If a device vendor wants to make a change that is not listed below,
Approval Services should be contacted to help determine which process
the device vendor may utilize.
Note: Device vendors that have received a letter of approval from Visa
that identified in the comments section issue(s) that must be corrected in
the next version of the product submitted for testing must correct the
identified issue(s) during submission of the changed product.
Table 8: Changes That Require Full Testing
Change Requiring Full Testing Description

Operating System (OS) Changes Adding, deleting, or modifying


code in the OS that directly
impacts the functionality of the
device.

EMV Level 1 Changes Modifications that affect the


electrical and protocol
characteristics.

Visa Payment Application Adding, changing or deleting


Changes functionality in the Visa payment
application.

Analog/Digital Changes Modifications to a contactless


terminal or reader that affect the
magnetic field, protocol, and anti
collision aspects.

June 2010 24 Visa Public


This page is intentionally left blank

June 2010 Visa Public


SPECIFICATIONS AND REQUIREMENTS

Appendix A: Specifications and Requirements


Specifications and
Requirements
This appendix lists specification and requirements that apply to the card
acceptance devices tested by Laboratories, and indicate where each may
be obtained.

Visa Contactless Card acceptance devices that support Visa Contactless Payments must
Payment support the Visa Contactless Payment Specification listed below. The
Reader Implementation Notes is optional for VCPS 2.0.2 intelligent PCDA-
readers and mandated for VCPS 2.1.1 intelligent PCDA-readers. One of
EMVCo’s Contactless Level 1 specifications is required to develop the
analog and digital functionality required by Visa.
Table 9: Specifications for Visa Contactless Payment
Specification Available Through:

Visa Contactless Payment PartnerNetwork@visa.com


Specification 2.0.2 or higher

Visa Contactless Reader PartnerNetwork@visa.com


Implementation Notes v1.0.1 or
higher

PayPass ISO/IEC 14443 www.emvco.com


Implementation Specification v1.1

EMVCo Contactless www.emvco.com


Communication Protocol
Specification v2.0 or higher

June 2010 A-1 Visa Public


TESTING AVAILABLE BY LABORATORY

Appendix B: Testing Available by Laboratory


Testing Available
by Laboratory

Table 8 indicates which device testing is available at which Laboratory. The


remainder of this appendix provides addresses and contact information for
each Laboratory.
Note: The Laboratory establishes the pricing for testing.
Please contact an appropriate Laboratory for current pricing, forms and
contractual agreements, and to obtain information on scheduling testing.
The Laboratories listed below for Analog and Digital are for testing to the
EMVCo v1.1 Contactless Specification. Refer to EMVCo’s website for a list
of laboratories who perform testing to the EMVCo v2.0 (or higher)
Contactless Specification.
Table 10: Testing Available by Laboratory
Testing Laboratory Analog Digital MSD qVSDC

Applus+   

FIME    

ICT Korea Co., Ltd.  

RFI Global Services Ltd.   

TUV SUD Japan Ltd.  

June 2010 B-1 Visa Public


LABORATORY CONTACT INFORMATION

Appendix C: Laboratory Contact Information


Laboratory
Contact
Informationn
Table 11: Laboratory Contact Information
Applus+ Contact: Xavier Vilarruba
Campus de la UAB, Email: xvilarruba@appluscorp.com
Apt Correus 18, Telephone: +34 93 567 2000
08193 Bellaterra, Barcelona, Facsimile: +34 93 567 2001
Spain Web: www.appluscorp.com

FIME Contact: Mr. Vincent Poty


Parc d'activite de la Folie Email: sales@fime.com
Couvrechef,
Telephone: +33 164 533 678
8 rue J.H. Hallet,
Facsimile: +33 870 199 2025
14000 Caen, France
Web: www.fime.com

ICT Korea Co., Ltd. Contact: Sangjun Hong


nd
2 Floor, Blue-vill-Town 528, Email: sangjunh@ictk.co.kr
Gojan-2Dong, Danwon-Gu, Telephone: +82-31-485-8254
Ansan-si, Kyung-gi-Do Facsimile: +82-31-485-9246
425-868, South Korea Web: www.ictk.co.kr

RFI Global Services Ltd. Contact: Barry Gilbert


Pavilion A, Ashwood Park, Email: barry.gilbert@rfi-global.com
Ashwood Way, Sales contact: enquiries@rfi-smart.com
Basingstoke, RG23 8BG, Telephone: +44 1256 312000
United Kingdom Facsimile: +44 1256 312001
Web: www.rfi-smart.com

TUV SUD Japan Ltd. Contact: Klaus Kaehler


Tokyo Laboratories E-mail: smartcard@tuv-sud.jp or
klaus.kaehler@tuv-sud.jp
4F, 2-8-20, Kurigi, Asao-ku
Telephone: +81/ (0)44 - 980 - 1670
Kawasaki-shi, Kanagawa
Facsimile: +81/ (0)44 - 980 – 1671
215-0033, Japan
Web: www.tuv-sud.jp

June 2010 C-1 Visa Public


GLOSSARY

Appendix D: Glossary
Glossary

This appendix defines selected terms used in this document.

Agreements See section Approval Services Testing Agreement (ASTA).

Analog Testing For devices supporting contactless cards: Ensures that the magnetic field
characteristics are able to carry the communication.

Application Testing Ensures that the device correctly supports the functionality of the Visa
payment transaction.

Digital Testing For devices supporting contactless cards: Ensures that the timing, anti
collision, and protocol characteristics are able to carry the communication.

EMV EMV Integrated Circuit Card Specifications for Payment Systems,


developed by EMVCo.

EMV Level 1 EMV Level 1 testing addresses the mechanical, electrical and protocol
aspects of the interface module of the card acceptance device.

EMV Level 2 EMV Level 2 testing addresses the application kernel.

EMVCo A consortium comprised of American Express Company, JCB


International, MasterCard International, and Via Inc that manages,
maintains, and enhances the EMV Integrated Circuit Card Specifications
for Payment Systems.

Exhibit A A form, signed by the device vendor and by Visa, that establishes Visa’s
right to review results submitted by the vendor, following testing at a
laboratory; must be submitted before testing begins.

Forms See section Required Forms for Testing.

Implementation See section Required Forms for Testing.


Conformance
Statement / ICS

Intelligent Reader See section Visa Contactless Payment Testing. An Intelligent Reader
Component Component differs from an Intelligent IRWIN Reader in that the Reader
Component is not developed to the Visa Contactless Reader
Implementation Notes.

June 2010 D-1 Visa Public


GLOSSARY

IRWIN Reader or See section Visa Contactless Payment Testing. An IRWIN Reader differs
IRWIN-Compliant from an Intelligent Reader Component in that the IRWIN Reader is
Reader developed to the Visa Contactless Reader Implementation Notes.

Laboratory In this document, refers to a Visa-recognized laboratory that tests chip


card products or devices in preparation for approval by Visa.

Letter of Approval An acknowledgement by Approval Services that a specific chip card


product has successfully completed functional and risk testing at a
Laboratory.

MSD Magnetic Stripe Data, a Visa payment application for contactless cards.

Official Testing In the context of this document, refers to testing conducted by a


Laboratory with the intention of obtaining Visa approval of a card
acceptance device.

Proximity Coupling A device that supports VSDC, and/or MSD, and/or qVSDC application and
Device Integrated / is connected to or contains a contactless reader (PCDR) that supports the
PCDI contactless interface.

Proximity Coupling A contactless reader that supports only the contactless interface.
Device Reader /
PCDR

Proximity Coupling A contactless reader that supports the contactless interface and MSD
Device with and/or qVSDC application.
Application / PCDA

qVSDC Quick VSDC. A Visa payment application for contactless cards.

Test Plan See section Test Plans for a list of test plans available from Approval
Services.

Test Script See section Commercial Test Tools and Test Scripts for information about
obtaining test scripts.

Test-cycle The initial submission of a card acceptance device for testing and, if the
Submission device fails testing initially, each subsequent submission for testing.

Testing Agreement See Approval Services Testing Agreement.

VIS Visa Integrated Circuit Card Specification. See Appendix A.

Visa Approval Provides a single point of contact, both for vendors and for Visa
Services personnel, on the Visa testing and approval process for card acceptance
devices.

June 2010 D-2 Visa Public


GLOSSARY

Visa Approval A form that enables Approval Services to determine whether a device
Services product is eligible for Visa testing and approval.
Questionnaire

Visa Approval An agreement between Visa and the card manufacturer or chip supplier
Services Testing regarding testing and approval.
Agreement

Visa Approved A listing of card acceptance devices that have passed testing as
Products List described in this document.

Visa Payment Any of:


Application
 Visa Smart Debit/Credit (VSDC)
 qVSDC - contactless only
 Magnetic Stripe Data (MSD) - contactless only

Visa Smart Visa service offerings for chip-based debit and credit programs which are
Debit/Credit / VSDC based on EMV and VIS specifications and are support by VisaNet
processing, as well as by Visa rules and regulations.

Visa-recognized A laboratory that is recognized by Visa to test chip card products and
Laboratory devices in preparation for approval by Visa.

June 2010 D-3 Visa Public

You might also like