The payment ecosystem faces disruptive changes: the Digital Card replaces more and more the physical card. Cardholders ask for a digital customer experience and a digitized card in a mobile application.
Schemes centralized Token Service Providers (TSPs, now a standard), like Visa VTS and Mastercard MDES, ensure secure card digitization and replace a PAN (Primary Account Number) by a token dedicated to a specific use case. This increases control possibilities for the user and significantly reduces fraud.
DIGITAL CARDS AND INSTANT ISSUING ARE THE NEW NORMAL, TOKENIZATION BECOMES A STANDARD
However, for financial institutions, it may be a challenge to follow this rhythm of innovation around the digital card, especially for banks who struggle with the technical context: legacy CMS, gaps between debit, credit and prepaid systems, complex ISO integration, multi-scheme support and frequent evolutions mandated by schemes …
Schemes tokenization onboarding and Token Management are often very complex for banks, even more so when they have in-house debit systems and Credit+Prepaid at different 3rd party processors. That’s why they need the support of digitization and digital card experts, such as Entrust (formerly Antelop Solutions).
BANKS NEED A UNIFIED SERVICE FOR DIGITAL CARDS ACROSS SYSTEMS AND PROCESSORS
It enables them to move from Card Management to Token Management, regardless of the evolution of their traditional card systems. Even more when Digital Cards are included in banking apps, like the now mandatory Apple Pay push provisioning.
THE ENTRUST ISSUER TSP HUB PROVIDES UNIFIED AND CERTIFIED APIS FOR BANKS TO ONBOARD SCHEMES TOKENIZATION AND OEM PAYS IN A SIMPLIFIED WAY
The Entrust PCI DSS platform offers a unified certified set of APIs (~10 APIs) enabling banks to launch all Digital Cards use cases and flows (OEM NFC wallets, issuer wallets and e-commerce tokens) through a simplified connection. This also allows enriching existing banking applications.
It handles all Digitization messages from schemes (inbound and outbound) for banks:
from standard user initiated provisioning to complex Apple Pay push provisioning (including PAN encryption and cryptographic keys management)
managing ID & V processes between banks systems and schemes TSPs:
checking card eligibility
from green, to yellow and red path covered, adapting to your business and risk rules
routing the right authentication methods in case of step-up
connecting to your SMS/mail gateway for OTP activation
generating push provisioning data and managing in-app enrollment and authentication …
routing all notifications from schemes
THE ENTRUST ITSP HUB OFFERS A HOLISTIC APPROACH AND NATIVELY INCLUDES ADVANCED TOKEN LIFECYCLE MANAGEMENT FUNCTIONALITIES
It allows you to:
manage tokens (suspend, unsuspend, delete) in a unified, multi-scheme and multi-use case way
benefit from web Back-office tools or APIs version as an extension of your CMS
allow your back-office card teams to have an aggregate view of tokens per client (CardID, Devices, Tokens, Use cases…) across schemes and CMS
Reassign a new PAN to existing token when the PAN is updated (e.g. stolen, lost or card renewal)
UPGRADE THE ITSP HUB WITH OUR UNIQUE TOKEN MANAGER
The Entrust Token Manager is an extra set of APIs exposed to the bank app for users to manage their tokens: The Entrust Token Manager offers a consolidated view and allows clients to push and control all of their digital cards stored into different e-commerce merchants and NFC wallets. It enables banks to bring more convenience and self-care to users’ card management through the bank app. The Token Manager natively supports Apple Pay push provisioning required for banks:
THE ENTRUST ITSP IS CERTIFIED VISA VTS, MASTERCARD MDES AND CB FOR ISSUERS
The solution is hosted in a certified PCI-DSS environment in the European Union (GDPR-compliant). The Entrust Issuer TSP Hub is already live with several banks and processors in the EU, LATAM and MEA.
It is certified for all available use cases (e.g. Apple Pay, Samsung Pay, Google Pay, Garmin Pay, FitBit Pay, e-commerce tokens …).
Banks can launch Apple Pay in the fastest way (about 3 months) through the Entrust APIs
Even more, it enables banks to:
leverage card schemes with the latest innovations and digital wallets
reduce time-to-market and costs through a simplified and flexible integration
avoid legacy card-system and processors dependency
benefit from transparent schemes evolutions and latest mandates
rely on high-availability (99.9%, 24/7) high-scalability PCI DSS SaaS platform with the highest security standards (encryption) and certifications
Multi-scheme, multi-CMS, multi-use case, there are no complex projects with schemes as all API connections to schemes are already certified and managed by Entrust . The scheme project complexity is reduced and certification processes are simplified.
ENTRUST CAN ALSO PROVIDE SPECIFIC ISSUER ADAPTORS
These Adaptors can be used to adapt the solution to issuer’s specific architecture, such as multiple processors, split databases, PCI DSS constraints …
As an example, an Issuer Adaptor can request the issuer’s platform with the customer identifiers – instead of its PAN – or adapt formats to request the issuer’s platform using existing issuer APIs.
A HOLISTIC APPROACH TO A DIGITAL CARD EXPERIENCE
Overall, via a simple set of unified APIs, the Entrust Issuer TSP Hub allows banks to easily launch Apple Pay, Google Pay, …and to manage digitization and lifecycle management messages from schemes TSPs in a unified and simplified manner. Banks can provide a mobile-first, digital card experience to their customers.
HOW CAN I GET APPLE PAY, … THROUGH ENTRUST?
You are a bank and want to launch Apple Pay, Google Pay, Samsung Pay, … any Pay? Here’s how it works: