Deploying EMV Issuance Solutions With Enhanced Security and Efficiency

Campuses deploying Europay Mastercard Visa (EMV) technology will need to follow a number of critical best practices for issuing contact and/or contactless EMV cards with the highest possible security assurances, while also enabling instant issuance capabilities at thousands of branch offices and other locations.

Published: May 12, 2013Author: CS Staff

To optimize effectiveness, the distributed issuance model requires high-duty-cycle printing solutions that are easily scalable, decrease operational and service costs, and maximize output of finished credentials with any combination of physical, electronic or visual personalization. One option is to structure a system in a grouped configuration, in which multiple printer/encoder units can be networked in a single location to produce moderate to increasingly larger volumes in continuous batch runs. Alternatively, a geographically dispersed, securely networked configuration can be used, in which the printer/encoder infrastructure shares one or more common or centrally-managed databases. This also delivers the added benefit of ensuring there is redundant equipment in case one printer experiences a malfunction and must be repaired. A third option is to adopt a hybrid of the two approaches and combine geographically dispersed groups of printer/encoder units, which delivers the added benefit of site redundancy.

Using the distributed model, financial institutions can create a complete and secure instant issuance system for its many branch locations, and maintain and control this issuance infrastructure via a central security center. Key to this configuration is choosing a solution that uses a single connection for all printing and encoding functions. Many printer/encoder solutions feature one interface for the printer functionality and another for the smart card encoder functionality inside the box. For instance, the printer might use an Ethernet or USB interface, while the smart card encoder might use a USB or serial interface. This configuration requires multiple cables and workstations, and can be difficult to manage. The optimal approach is to manage all printing and encoding functions within the solution via a single-wire Ethernet connection. Each printer can be connected to the network and remotely managed via this single Ethernet link, resulting in easier installation and management.

Other key printer/encoder selection criteria for distributed issuance include system reliability and performance, as well as operational convenience and system scalability. To optimize the versatility and flexibility of distributed card issuance systems, it is important that field-upgradeable modules are available to meet current or future specialized credential needs.

EMV technology is on its way. To ensure the highest levels of security, these solutions will need to use re-transfer technology to support EMV’s multi-dimensional card validation elements, and employ multi-layered security management to protect the integrity of the issuance system. Solutions will also need to support the remote, instant-issuance requirements of many branches. This requires using a distributed model that combines the reliability and advanced credentialing features of centralized printer/encoder solutions with the low cost and small footprint of desktop units that deliver the convenience of single-wire connectivity capabilities.

——Article Continues Below——