Alcinéo Level 2 contactless kernels
EMV acceptance kernels for embedding in POS systems, payment terminals and card readers. They span contact (CT1 and CT2) and contactless (CL1 and CL2), with Level 2 kernels for each scheme and tools to support certification.
What is supplied
The EMV contactless kernel itself, for embedding in SoftPOS and terminals, with certification support. Supplied for embedding in terminals and SoftPOS, as an implementation that has passed certification.
Specifications and certifications
What Kardia Payment Suite contains
A complete set of EMV acceptance software for contact and contactless. It is not a standalone POS application but an embedded library that performs the EMV processing between card and terminal.
| Layer | Role | Relationship to certification |
|---|---|---|
| CT1 | The contact card communication layer: insertion detection, power, cold and warm reset, ATR, PPS, T=0 and T=1, APDU exchange and removal detection | EMV Contact Level 1 |
| CT2 | Contact EMV payment processing: application selection, offline data authentication, CVM, risk management, Generate AC and issuer scripts | EMV Contact Level 2 |
| CL1 | The contactless communication and card activation layer: RF control, polling, Type A and B detection, anticollision, RATS and ATS, FWT and collision handling | EMV Contactless Level 1 |
| CL2 | Scheme-specific contactless transaction processing, with a separate kernel for each scheme | Scheme Level 2 type approval |
Merchant management, ISO 8583 host communication, settlement, receipts and the user interface are implemented by the terminal vendor or the payment provider.
Schemes supported by the contactless kernels (CL2)
Where contact CT2 is comparatively common across schemes, contactless is handled as a separate kernel for each scheme.
| Scheme | Kernel or programme | Main use |
|---|---|---|
| Visa | VCPS / VCTKS / VRTPKS | Retail / Transit / Tap to Phone |
| Mastercard | The M/Chip Contactless family | Retail / Transit / SoftPOS |
| American Express | Expresspay | Retail / SoftPOS |
| Discover | D-PAS / D-PAS Connect | Contactless / Wallet / SoftPOS |
| JCB | J/Speedy 1.6 / Tap on Mobile | Retail / SoftPOS |
| UnionPay | QuickPass / SoftPOS Application | Retail / SoftPOS |
| Pure | Pure Contactless | Domestic and private-label schemes |
| CPACE | CPACE Contactless | A common basis for European domestic schemes |
Relationships are indicated with domestic and regional schemes such as Interac Flash, eftpos, Bancontact, girocard and CB. Three things are, however, distinct: that a kernel exists in the portfolio; that a particular version is implemented; and that there is a valid Letter of Approval for particular hardware. Porting to a new terminal means type approval is required again for that terminal. When considering this, please confirm the specification version for the scheme concerned and the currently valid LoA.
Tools that support certification
Alongside the kernels, supporting software is provided to help terminal manufacturers obtain Level 2 certification.
| Category | Detail |
|---|---|
| For testing | A test application for type approval, and automated test interfaces for Visa and Mastercard |
| Settings | Help with preparing the ICS, an EMV parameter configuration tool, and a tool for loading kernel settings |
| Analysis | Debug traces, APDU logs and kernel event logs |
| Development | Sample code, an integration guide, API documentation, builds for the certification laboratory, and engineering support during certification |
Relationship to test tools
Alcinéo supplies the EMV kernel; ICC Solutions and others supply the test tools that verify it. They are not competitors.
| Role | Responsible party |
|---|---|
| Supplying the Level 2 kernel | Alcinéo |
| Certification test tools and test scripts | ICC Solutions and others |
| Formal type approval testing | Accredited laboratory |
| Reviewing the report, approving it and issuing the Letter of Approval | Each scheme |
Choosing the right Alcinéo stack
Alcinéo does not make test equipment. It supplies software that is embedded in the device under test. The scope of certification differs by product, so the schemes covered and the extent of any valid approval are confirmed individually. Completeness increases along the path from component kernel, to SDK, to operations, to an industry-specific stack.
| Product | If you are considering |
|---|---|
| ★ Level 2 contactless kernels (this page) | You want to embed an EMV kernel in your own terminal or SoftPOS, as a component |
| MPoC Software SDK | You want to implement software-based payment aligned with PCI MPoC |
| SoftPOS SDK | You want to turn a standard smartphone into a contactless payment terminal |
| A&M Backend Services | You want attestation and monitoring for SoftPOS operation, run from a backend |
| SoftPOS for transit | You want a complete stack for gates and transit operators |
To verify this device under test
A terminal with this runtime embedded — the device under test — is tested at Level 1, Level 2 and Level 3 with the testers below. What is verified is not the runtime on its own but the device under test with the runtime embedded.