Positive ONE Group corporate siteCorporate site
Contact us
ENEnglish

Select language — 18 locales

EnglishEN日本語JA简体中文ZH-HANS繁體中文ZH-HANT한국어KOไทยTHTiếng ViệtVIBahasa IndonesiaIDBahasa MelayuMSFilipinoFILहिन्दीHITürkçeTRالعربية (السعودية)AR-SAالعربية (الإمارات)AR-AEالعربية (قطر)AR-QAالعربية (الكويت)AR-KWالعربية (البحرين)AR-BHالعربية (عُمان)AR-OM
Positive ONE GroupNFC, EMV and magnetic stripe testingCertificationBureau Veritas ICTK
EMVCo accredited test laboratory

Bureau Veritas ICTK

An accredited test laboratory carrying out payment security testing for the EMVCo, Visa, JCB, American Express, Discover and KLSC programmes. Founded in 2001 in Gyeonggi Province, Korea, and acquired in 2017 by Bureau Veritas, itself founded in 1828. With around 20 years of experience, it provides type approval testing for cards, mobile devices, acceptance devices and 3-D Secure.

EMVCo / Visa / JCB / AMEX / Discover / KLSC Part of the Bureau Veritas group Korea, founded 2001
How this relates to Positive ONE

After verification during development on the test equipment we supply, from KEOLABS, ICC and others, this is the accredited laboratory where formal conformance testing takes place. The laboratory carries out the testing and produces the test report, and the final approval, such as the Letter of Approval, is issued by EMVCo or the payment system, depending on the programme. When the development bench and the accredited laboratory share the same class of test platform, the difference in test conditions narrows.

Certification services, in four areas

The testing and certification services BV ICTK offers, taken from its published service list. The laboratory carries out the testing; formal approval is issued by each payment scheme.

Cards

payment card certification

Level 1 and application testing for contact and contactless payment cards, and durability testing.

  • EMVCo Contact / Contactless Card Level 1
  • EMVCo CCD / CPA
  • VISA VIS / VCPS / Multi-Access / Prepaid
  • VISA Biometric Sensor-on-Card / Performance
  • JCB Contact Card Level 1
  • AMEX Contact AEIPS / Contactless XPAY
  • DISCOVER Contact / Contactless / Interoperability
  • KLSC Contactless / Interoperability
  • Card Durability (ISO 7816 & ISO 14443)

Mobile

mobile payment certification

Testing for mobile payment products in one place. Wearables are treated as mobile products.

  • EMVCo Mobile Level 1
  • EMVCo CMP / PPSE
  • VISA VMPA (Mobile Payment Application)

Acceptance devices

terminal certification

Level 1 and Level 2 testing for payment acceptance devices such as POS terminals, including scheme-specific contactless terminal testing.

  • EMVCo Contact / Contactless Terminal Level 1
  • EMVCo Contact / Contactless Terminal Level 2
  • VISA Contactless Device
  • AMEX Contactless Device
  • DISCOVER Contactless Device
  • KLSC Contactless Device

3-D Secure

e-commerce fraud prevention

EMVCo 3-D Secure testing for fraud prevention in e-commerce, using the Atomworks Testing Platform. Pre-conformance and conformance review each take about five days.

  • 3DS Server (3DSS)
  • Directory Server (DS)
  • Access Control Server (ACS)

The certification process

The usual course from enquiry to certification and the issue of the Letter of Approval.

1
Request
Enquiry
State the test service required, the dates you would like, and whether the work is type approval or consulting.
→
2
Review
Confirmation
ICTK confirms whether the work is possible under those conditions and finds a suitable slot.
→
3
Contract
Contract
Quotation, then acceptance of the order, then invoicing. Registration and contracting with EMVCo happen once, at the start, and the ICS is submitted to BV ICTK.
→
4
Testing & Report
Testing and reporting
Pre-conformance testing, where the vendor tests online and ICTK verifies the results, followed by conformance testing once the ICS has been submitted to EMVCo and approved.
→
5
Certification
Certification
EMVCo issues the Letter of Approval.

Common questions

How many sample cards do I need to submit?
It depends on the test scope. Please ask, stating the payment scheme concerned.
How is the test scope decided?
A new product is generally tested in full. For a derivative product the scope follows what has changed. The payment scheme makes the final decision.
What is the difference between type approval and debug?
In debug you can adjust and tune the sample, but the report cannot be used for certification. In type approval the customer does not take part in the testing, and the report is submitted to the payment scheme and used for certification.
Which tools are used for terminal Level 2 testing?
Tools from Galitt, ICC Solutions, Fime and others are supported.