EMVCo Publishes New Guidance for Merchants and Issuers on Using FIDO Authentication with EMV® 3-D Secure for Improved Online Payment Experiences

Whitepaper developed in collaboration with FIDO Alliance outlines how use of FIDO Authentication Data in 3DS messages can streamline e-commerce checkout while reducing friction for consumers

28 October 2020 – Global technical body EMVCo has published a white paper which provides guidance to merchants, card issuers, acquirers and processors on how FIDO Authentication Data can be used in EMV® 3-D Secure (3DS) messages to reduce fraud and friction in the payment process for consumers.

EMV 3DS is a payment messaging protocol that enables consumers to authenticate themselves with their card issuer when making e-commerce purchases. The ‘Use of FIDO Data in 3DS Messages’ white paper focuses specifically on EMV payment use cases to demonstrate how FIDO Authentication Data can be leveraged to attest that merchant-initiated strong consumer authentication has taken place prior to an EMV 3DS transaction. This can reduce the need for issuers to authenticate cardholders for every transaction when shopping online and streamline processes for merchants, card issuers, acquirers and processors.

The ‘Use of FIDO Data in 3DS Messages’ white paper focuses on the newly defined FIDO attestation data set. Using this defined data set, merchants can deliver a structured set of data elements and present the card issuer with a consistent set of values for the same user or device (along with other data they would receive as part of an EMV 3DS transaction), reducing the need for repeated consumer authentication.

The white paper is an output of an ongoing collaboration between EMVCo and FIDO Alliance, focused on evaluating how FIDO Authentication standards can support EMV payment use cases to help reduce fraud globally, while maintaining and optimising the consumer experience. This includes efforts to define how EMV 3DS messages may be used to pass FIDO authenticator attestation data.

“Outlining exactly how the data can be used by card issuers to analyse merchant-initiated FIDO Authentication as part of their risk evaluations, can increase authorisation approval rates, streamline online checkout and reduce fraud,” comments Junya Tanaka, Chair of the EMVCo Executive Committee. “Analysing the use of FIDO data in EMV 3DS transactions is just the first step in the joint work efforts between EMVCo and FIDO Alliance, and we look forward to continued collaboration to enable consistency, convenience and additional security for EMV payment use cases and beyond.”

“This paper, as well as FIDO Alliance’s complementary technical note, provides essential information on how FIDO can be used alongside EMV 3DS to provide higher levels of security, enhanced user experiences, and better overall approval rates for e-commerce merchants,” said Christina Hulka, Executive Director and COO of the FIDO Alliance. “These papers are part of our longstanding relationship with EMVCo and our shared focus on providing answers to the questions we often receive on how our FIDO Alliance standards and EMVCo specifications can work together.”


– ENDS –

For further EMVCo media information please contact David Amos / Chloe Smith – Tel: +44 113 3501922 or email: david@iseepr.co.uk / chloe@iseepr.co.uk

View PDF

Notes to Editors

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

About EMVCo

EMVCo creates and manages EMV Specifications and programmes that enable seamless and secure card-based payments for businesses and consumers worldwide.

EMV Specifications support technologies including EMV Chip Contact, EMV Chip Contactless, Mobile, QR Code, Secure Remote Commerce (SRC), 3-D Secure (3DS) and Payment Tokenisation and are widely used by the payments industry to develop products and services that deliver trusted and convenient in-store, online and remote card-based payments.

As a global technical body, EMVCo is collectively owned by American Express, Discover, JCB, Mastercard, UnionPay and Visa. Hundreds of payments stakeholders, including merchants, banks and technology providers, participate as EMVCo Associates and Subscribers to develop, evolve and enhance flexible EMV Specifications that support innovation and address marketplace needs. All EMV Specifications are available royalty free on the EMVCo website.

www.emvco.com | EMV® Insights | LinkedIn | Twitter | Podcast | An Introduction to EMVCo | YouTube