The payment ecosystem faces disruptive changes: the Digital Card replaces more and more the physical card. Cardholders ask for a digital customer experience and a digitized card in a mobile application.

Schemes centralized Token Service Providers (TSPs, now a standard), like Visa VTS and Mastercard MDES, ensure secure card digitization and replace a PAN (Primary Account Number) by a token dedicated to a specific use case. This increases control possibilities for the user and significantly reduces fraud.

DIGITAL CARDS AND INSTANT ISSUING ARE THE NEW NORMAL, TOKENIZATION BECOMES A STANDARD

Now, banks only need to connect to schemes’ TSPs to onboard any digital payment innovation like OEM Pays (Apple Pay, Google Pay, Samsung Pay …), NFC Issuer wallets, e-commerce tokenization …

However, for financial institutions, it may be a challenge to follow this rhythm of innovation around the digital card, especially for banks who struggle with the technical context: legacy CMS, gaps between debit, credit and prepaid systems, complex ISO integration, multi-scheme support and frequent evolutions mandated by schemes …

Schemes tokenization onboarding and Token Management are often very complex for banks, even more so when they have in-house debit systems and Credit+Prepaid at different 3rd party processors. That’s why they need the support of digitization and digital card experts, such as Entrust (formerly Antelop Solutions).

BANKS NEED A UNIFIED SERVICE FOR DIGITAL CARDS ACROSS SYSTEMS AND PROCESSORS

It enables them to move from Card Management to Token Management, regardless of the evolution of their traditional card systems. Even more when Digital Cards are included in banking apps, like the now mandatory Apple Pay push provisioning.

THE ENTRUST ISSUER TSP HUB PROVIDES UNIFIED AND CERTIFIED APIS FOR BANKS TO ONBOARD SCHEMES TOKENIZATION AND OEM PAYS IN A SIMPLIFIED WAY

 

tokenization icons

The Entrust PCI DSS platform offers a unified certified set of APIs (~10 APIs) enabling banks to launch all Digital Cards use cases and flows (OEM NFC wallets, issuer wallets and e-commerce tokens) through a simplified connection. This also allows enriching existing banking applications.

It handles all Digitization messages from schemes (inbound and outbound) for banks:

  • from standard user initiated provisioning to complex Apple Pay push provisioning (including PAN encryption and cryptographic keys management)

  • managing ID & V processes between banks systems and schemes TSPs:

    • checking card eligibility

    • from green, to yellow and red path covered, adapting to your business and risk rules

    • routing the right authentication methods in case of step-up

    • connecting to your SMS/mail gateway for OTP activation

    • generating push provisioning data and managing in-app enrollment and authentication …

  • routing all notifications from schemes

THE ENTRUST ITSP HUB OFFERS A HOLISTIC APPROACH AND  NATIVELY INCLUDES ADVANCED TOKEN LIFECYCLE MANAGEMENT FUNCTIONALITIES

Image233.png

It allows you to:

  • manage tokens (suspend, unsuspend, delete) in a unified, multi-scheme and multi-use case way

  • benefit from web Back-office tools or APIs version as an extension of your CMS

  • allow your back-office card teams to have an aggregate view of tokens per client (CardID, Devices, Tokens, Use cases…) across schemes and CMS

  • Reassign a new PAN to existing token when the PAN is updated (e.g. stolen, lost or card renewal)

UPGRADE THE ITSP HUB WITH OUR UNIQUE TOKEN MANAGER

The Entrust Token Manager is an extra set of APIs exposed to the bank app for users to manage their tokens: The Entrust Token Manager offers a consolidated view and allows clients to push and control all of their digital cards stored into different e-commerce merchants and NFC wallets. It enables banks to bring more convenience and self-care to users’ card management through the bank app. The Token Manager natively supports Apple Pay push provisioning required for banks:

The Antelop Token Manager offers to any cardholder a secure and unique digital banking and card management experience. More information about our Token Manager can be found here. 

The Entrust Token Manager offers to any cardholder a secure and unique digital banking and card management experience. More information about our Token Manager can be found here

THE ENTRUST ITSP IS CERTIFIED VISA VTS, MASTERCARD MDES AND CB FOR ISSUERS

Image28.png

The solution is hosted in a certified PCI-DSS environment in the European Union (GDPR-compliant). The Entrust Issuer TSP Hub is already live with several banks and processors in the EU, LATAM and MEA.
It is certified for all available use cases (e.g. Apple Pay, Samsung Pay, Google Pay, Garmin Pay, FitBit Pay, e-commerce tokens …).

Banks can launch Apple Pay in the fastest way (about 3 months) through the Entrust APIs

Even more, it enables banks to:

  • leverage card schemes with the latest innovations and digital wallets

  • reduce time-to-market and costs through a simplified and flexible integration

  • avoid legacy card-system and processors dependency

  • benefit from transparent schemes evolutions and latest mandates

  • rely on high-availability (99.9%, 24/7) high-scalability PCI DSS SaaS platform with the highest security standards (encryption) and certifications

Multi-scheme, multi-CMS, multi-use case, there are no complex projects with schemes as all API connections to schemes are already certified and managed by Entrust . The scheme project complexity is reduced and certification processes are simplified.

ENTRUST CAN ALSO PROVIDE SPECIFIC ISSUER ADAPTORS

These Adaptors can be used to adapt the solution to issuer’s specific architecture, such as multiple processors, split databases, PCI DSS constraints …

As an example, an Issuer Adaptor can request the issuer’s platform with the customer identifiers – instead of its PAN –  or adapt formats to request the issuer’s platform using existing issuer APIs.

A HOLISTIC APPROACH TO A DIGITAL CARD EXPERIENCE

Overall, via a simple set of unified APIs, the Entrust Issuer TSP Hub allows banks to easily launch Apple Pay, Google Pay, …and to manage digitization and lifecycle management messages from schemes TSPs in a unified and simplified manner. Banks can provide a mobile-first, digital card experience to their customers.


HOW CAN I GET APPLE PAY, … THROUGH ENTRUST? 

You are a bank and want to launch Apple Pay, Google Pay, Samsung Pay, … any Pay? Here’s how it works:

Image1.png