Demystifying Apple Pay

Transcript

1. @stepanhruda Demystifying Apple Pay
2. @stepanhruda Principal Engineer stepanhruda !  stepanhruda ! Stepan Hruda
3. @stepanhruda  Pay
4. @stepanhruda cards loyalty apps NFC  Pay  "  
5. @stepanhruda 
6. @stepanhruda  210 bits per inch, alphanumeric (7-bit) = 79 characters 75 bits per inch, numeric (5-bit) = 40 characters
7. @stepanhruda  Track 1 Track 2 %B6011898748579348^HAMMER/ MC^16059821000123456789? ;6011898748579348=16059821000123456789? delimiters format card number cardholder name expiration date service code optional data
8. @stepanhruda  '    # $ merchant processor  & network issuer acquirer cardholder  ;6011898748579348 6059821000123456789?
9. @stepanhruda Bonus round: chip cards  more secure sloooooow
10. @stepanhruda cards loyalty apps NFC  Pay  "  
11. @stepanhruda " NFC
12. @stepanhruda 4485 7324 779 55409 4916 7376 5076 7686 4716 9818 4679 5670 4556 4371 1208 0993 4012 8888 8888 8888    &  4111 1111 1111 1111 " 4012 8888 8888 8888  issuer network key 
13. @stepanhruda "  secure element " NFC controller CPU  4012 8888 8888 8888 network key  transaction count/ID … ;4012888888888888 =16059821000123456789?
14. @stepanhruda   &   # $ merchant processor network issuer acquirer ;4012888888888888 6059821000123456789? " cardholder  4485 7324 779 55409 4716 9818 4679 5670 4012 8888 8888 8888 4111 1111 1111 1111 4111 1111 1111 1111
15. @stepanhruda cards loyalty apps NFC  Pay  "  
16. @stepanhruda  apps
17. @stepanhruda Naturally, step 1: “I  provisioning” – no iOS developer ever 
18. @stepanhruda   I’d like to accept payments, here’s my public key Cool story bro, here’s your public key with fluff around it so we know that it’s legit
19. @stepanhruda StoreKit  PassKit N 
20. @stepanhruda  PKPaymentRequest • supported networks • shipping • billing • country • currency • line items PKPayment PKPaymentToken PKPaymentAuthorizationViewController init(paymentRequest:) PKPaymentAuthorizationViewControllerDelegate (didAuthorizePayment:completion:)
21. @stepanhruda live demo 
22. @stepanhruda PKPaymentToken  { "data": “2DzU9u6byIY4qCs3lW4KgK3JWC6Ac+x28Ck5PLCjQP…”, "header": { "ephemeralPublicKey": “MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtM…”, "publicKeyHash": "spzGX6upCJhx5UD8vCo1+LcIi7+fkxEUaVmhbX18cJM=", "transactionId": “79ccd07eb432f80067d8e5bbc4c38ee1def7fcc1827f…” }, "signature": “MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABg…“, "version": "EC_v1" }
23. @stepanhruda PKPaymentToken’s decrypted data  { "applicationExpirationDate": "200233", "applicationPrimaryAccountNumber": "4012888888888888", "currencyCode": "840", "deviceManufacturerIdentifier": "XXXXXXXXXX", "paymentData": { "emvData": “UD8vCo1…” }, "paymentDataType": "EMV", "transactionAmount": 20 }
24. @stepanhruda not in all countries  less work N  secure user has to use Apple Pay familiar UX
25. @stepanhruda cards loyalty apps NFC  Pay  "  
26. @stepanhruda  loyalty
27. @stepanhruda  "  credit card loyalty card single read 
28. @stepanhruda Wallet - The home for Apple Pay and more WWDC 2015: Session 701  { “serialNumber”: “0003461” “"passTypeIdentifier" : “pass.stepanhruda.com.loyalty" “nfc”: { “message”: “2545354543643” “encryptionPublicKey”: “MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQc…“ } } pass.json speculation ahead s
29. @stepanhruda "  pass.foo.com.loyalty  secure element pass.foo.com.loyalty 3423454534634 pass.bar.com.loyalty 897097780980 4012 8888 8888 8888 
30. @stepanhruda cards loyalty apps NFC  Pay  "  
31. @stepanhruda Sources https://developer.apple.com/library/ios/ApplePay_Guide/ProcessPayment.html#//apple_ref/doc/uid/TP40014764-CH5-SW4 http://www.apple.com/apple-pay/ http://www.chyp.com/wp-content/uploads/2015/01/GSMA-HCE-and-Tokenisation-for-Payment-Services-paper_WEB.pdf http://www.planetbiometrics.com/creo_files/upload/article-files/apple_pay_-_what_do_we_know.pdf http://www.virtusa.com/blog/2014/09/applepay-an-attempt-to-demystify-apples-new-service/ https://www.emvco.com/specifications.aspx?id=263 http://www.imore.com/apple-pay-rescue https://github.com/beatty/applepay_crypto_demo
32. @stepanhruda t
33. @stepanhruda