Friday, October 3, 2014

Cryptogram calculation clarity for CBP



This is the key concept and change between EMV and what is required for CBP cryptograms.
Effectively the cryptogram in the CBP payment is created half in the cloud and then the other half when you tap the phone.

The reason for this is because the network connectivity may not allow a scenario like the left side of the diagram below as the UN would get cut off from transmitting from the POS to the calculation space, or it would be subject to network latency and create a "Tap and Hover" effect that would be an awful user experience.

The CBP cryptogram allows all components to be used as before and exposes a "relay threat" only to the android app after the SUK is received, but not to the POS terminal.   It also allows the Phase 2 calculation to happen independent of cloud availability at tap time.  The Phase 1 calculation and delivery to the phone from the cloud is expected to be preformed prior to tapping the phone, but not during the tap itself.

The thought is to offset the relay threat with in app security and sensor rich android OS.

It becomes a net neutral from a security standpoint really, IMO.


20 comments:

  1. Thanks for your post. I’ve been thinking about writing a very comparable post over the last couple of weeks, I’ll probably keep it short and sweet and link to this instead if thats cool. Thanks. do my pre calculus homework

    ReplyDelete
  2. As obvious as this may be, many people still make the mistake of plagiarizing their work, intentionally or unintentionally. You must never plagiarise any content while writing a thesis, since this will really diminish your chances of getting acceptance. See more accounting formulas cheat sheet

    ReplyDelete
  3. Aw, this was a really nice post. In idea I would like to put in writing like this additionally? Taking time and actual effort to make a very good article? But what can I say? I procrastinate a lot and by no means seem to get something done.
    drastic ds emulator apk download

    ReplyDelete
  4. I recently came across your blog and have been reading along. I thought I would leave my first comment. I don't know what to say except that I have enjoyed reading. Nice blog. I will keep visiting this blog very often. catasto genova

    ReplyDelete
  5. If you have a Quickbooks Desktop and you are thinking about shifting to QBO then you should take assistance from Quickbooks Premier Support Number for better migration. They will assist you to import your files completely without losing data.

    ReplyDelete
  6. QuickBooks provides accounting solution software which is available at different levels of business depending upon your needs.these software is easy to use and understandable. If while using it, you are facing any kind of issues then you can Contact QuickBooks Enterprise

    ReplyDelete
  7. Are you writing an essay? Examine this persuasive essay outline and get tips for successful writing.

    ReplyDelete
  8. Gay agreeable drug rehabs are drug rehabs who are commonly fit for tending to the requirements of the gay, lesbian, androgynous or transgender network. By gay benevolent, we allude to drug rehabs whose staff are prepared in the territories of homophobia, disguised homophobia, sexual direction, just as, have managed any their issues identifying with partiality, separation and distance.
    motivational quotes for addicts
    rehab quotes

    ReplyDelete
  9. I found free pre written essays. I started ordering different learning materials. I often use an essay writing service. He helps me.

    ReplyDelete
  10. Very much innovative and descriptive content and also hope the comment useful for accounting firm like QuickBooks is a accounting tool for preparing financial statements and it has a doctor named QuickBooks FILE DOCTOR
    for rectifying bugs and errors.

    ReplyDelete
  11. The reason for this is because the network connectivity may not allow a scenario like the left side of the diagram below as the UN would get cut off from transmitting from the POS to the calculation space, or it would be subject to network latency and create a "Tap and Hover" effect that would be an awful user experience. crushed velvet sofa covers , velvet plush fitted bed sheet ,

    ReplyDelete
  12. This program is quite convenient and easy to use. Now you do not need to spend a lot of time on numerous calculations. I have time to study the field of cryptocurrencies because I actively cooperate with https://essaysservice.com/help-with-writing-synopsis.html

    ReplyDelete
  13. A CBP cryptogram use is a great theme to discuss in the nursing essay about new computerized apps. I would like to welcome the author of this post to our company to get more information about this programming field.

    ReplyDelete
  14. today in the era of technology every work is done through the application just like QuickBooks software in the field of the accounting but issues are come in every software similarly QuickBooks face error which are shown on screen along with error code which can be sum up in quickbooks error code list.

    ReplyDelete
  15. Obviously, QuickBooks is the most well known bookkeeping and monetary administration programming that we can depend on for complex business bookkeeping. Regardless of how wonderful programming is, there are consistently mistakes and errors in it. QuickBooks is no special case and infrequently experiences mistakes that interfere with any continuous undertaking and some of the time even keep QuickBooks from running assuming this is the case there is an article for all of you go through it for once quickbooks error code 6147 .

    ReplyDelete
  16. There are a number of different versions, including TurboTax Deluxe, TurboTax Premier, etc. TurboTax is available for both federal and state income tax returns turbo tax download

    ReplyDelete
  17. your Blog is very informative and this information really helpful for readers Cryptogram is good payment gateway solution having some half of cloud service and half of in phone tap service with network issue and same with QuickBooks software, QuickBooks is a effective Accounting software but some time its QuickBooks error 6123 create a issue but you easily troubleshoot this error

    ReplyDelete
  18. Thanks for sharing this knowledgeable post. What an excellent post and outstanding article. Thanks for your awesome topic. Really I got very valuable information here. If Roadrunner Password Recovery please contact roadrunner support team for solution.

    ReplyDelete