Home > Product Approval/Evaluation > Card Consumer Device Processes > Common Core Definition (CCD) Approval Process

Common Core Definition (CCD) Approval Process

CCD (Common Core Definition) approval is granted to a card product with an embedded payment application. The CCD approval process attests the compliance of the card application to the EMV CCD Specification. It also includes a security evaluation of the IC (integrated circuit) and the card on which the CCD-compliant application is installed.

Search approved CCD Products

The Approval Process

STEP 1 PROVIDER

Downloads & signs registration form and business review form to receive a contract and registration number (Product Provider & IC Provider).

STEP 2 PROVIDER

Selects a laboratory & declares the product. Completes a conformance statement. Also selects a security laboratory.

STEP 3 LAB

Tests the product and submits a test report to the product provider (Laboratory and Security Laboratory).

STEP 4 PROVIDER

Selects an EMVCo qualified auditor to perform an evaluation of the non CCD features (Conditional).

STEP 5 EMVCo

Evaluates the test reports and issues a 3-year Letter of Approval (LOA).

Process Summary

This summary describes the standard process for the approval of a new CCD product. Specific processes may apply for a product change, a derivative product submission, or a product renewal. These additional processes are described in the administrative process.

Obtain the detailed CCD Administrative process

Obtain the card type approval update bulletins

Obtain the detailed Security Evaluation process

Obtain the CCD reference specifications: EMV Book 1

Obtain the CCD reference specifications : EMV Book 2

Obtain the CCD reference specifications : EMV Book 3

Obtain the specification bulletins

1 of 5 Step 1 Registration

The Integrated Circuit (IC) provider and the product provider shall:

fill out the Registration form
download and submit a Business Review form to EMVCo.Once EMVCo reviews and accepts the forms, the IC and product provider will receive a contract.

Once the contract is signed, EMVCo will assign both an IC provider registration number and a product provider registration number. Registration is a one-time process.

Registration Form

Obtain the Business Review Form

2 of 5 Step 2 Product Declaration

The product provider shall select a laboratory and execute bilateral, required agreements and contracts. The product provider shall complete an Implementation Conformance Statement (ICS) document in which it provides detailed information about the product and supported features. The laboratory will validate and submit the ICS to EMVCo for verification.

The product provider shall also select a laboratory to perform a Security Evaluation of the card product.

Obtain the CCD ICS Form

Obtain the list of EMV accredited laboratories for CCD testing

Obtain the list of EMV accredited laboratories for card security evaluation

3 of 5 Step 3 Product Validation

Once EMVCo has accepted the ICS, CCD Level 1 and Level 2 testing will be performed. The test results are documented in test reports that the laboratory submits to the product provider.

The security evaluation of the card product is also performed, with results being sent to product provider.

Obtain the CCD Card Images Requirement Specification

Obtain the activation and deactivation date of the test cases

4 of 5 Step 4 (Conditional): Audit the Owner Specification

If the CCD product also supports non-CCD features, the product provider shall select an EMVCo-qualified auditor, which will perform an evaluation to determine that (1) the mandatory CCD requirements are included in the owner specification, (2) the optional CCD requirements in the owner specification are compliant with EMV specifications, and (3) the non-CCD components of the owner specifications do not conflict with the CCD specifications. The auditor will also review the non-CCD level 2 test cases.

Obtain the list of EMV accredited auditor for CCD

Obtain the Request For Review – Owner Specification Form

Obtain the request for review of non CCD test cases Form

5 of 5 Step 5 Product Approval

Upon receipt of the test reports from the laboratory, the product provider decides if it will submit the product to EMVCo for approval. Assuming so, the product provider shall complete a Request for Approval form and ask the laboratory to send EMVCo both the test reports and the card security evaluation report. EMVCo will grant a Letter of Approval (LOA) when a test report demonstrates sufficient product conformance. Applicable fees must be paid before the LOA is granted.

Obtain the CCD Request for Approval Form

Prerequisites

Prior to starting the CCD approval process, the IC provider must request a Security Evaluation of the IC in order to obtain an IC Certificate Number (ICCN).

Chip and Platform Approval Process

Fee Structure

For each submission of a CCD product for approval (either for a new product, a renewal or update), specific fees shall be paid to EMVCo, as detailed in CTA Bulletin 26. Additional information on fees may be found in the CCD Administrative Process.

Note: EMVCo Accredited Laboratories will have a fee structure for laboratory testing services. EMVCo is not responsible for laboratory testing fees.

Obtain the CCD approval fees