The learning path is one of increasing complexity, with building blocks to construct the EMV knowledge, and practical exercises and quizzes to keep students engaged. The course contains 15 practical exercises with the guided analysis of 50+ transaction logs.
The Contactless EMV Module 1 course starts with a reminder of the EMV notions that are still relevant for contactless, including its transaction flow and how tags, TLV and DOLs work.
The contactless journey then starts, with an introduction on contactless payment and its different outcomes, with a review of the specifications involved and with a quick dive on how it works at a low level. You will also learn about how the different card brands manage their transaction flow. And you will see how EMV tries to create a unique payment experience with display messages, light and audio.
The Contactless EMV Module 2 course starts with a reminder of the cryptographic concepts that are still relevant for contactless, including transaction authorization and offline data authentication. It then introduces and looks into the technicallities of contactless transaction authorization for mag-stripe and EMV modes, and of how fDDA works.
The journey continues with a deep dive into contactless mag-stripe mode, from the high-level concept all the way to the APDUs involved and how terminals retrieve the magstripe track for the online authorization message. This chapter is supplemented with practical exercises.
This module ends with a look at the common elements of contactless EMV mode, introducing the high-level concept, discussing the Cardholder Verification Methods applicable to contactless, and reviewing the kernels' Outcome parameters.
The Contactless EMV Module 3 course starts with a deep dive into the transaction flow and the APDUs for TTQ-driven kernels (VISA, Discover, UnionPay). It looks at the new tags introduced specifically for contactless, which help transactions be processed faster. It explains how CVM selection is performed on those kernels, and how processing restrictions are enforced. It also briefly looks at how issuer scripts can be processed on those kernels.
The course then provides similar coverage of the other kernels (MasterCard, American Express and JCB). The transaction flow and the overall process is different, and the course highlights those differences and takes the student through how the APDUs are used with those kernels to complete transactions.
In the final chapter, the course provides a guided method to perform transaction analysis and troubleshooting, which includes a couple of diagrams that the student can download and print. This method is based on the instructor’s 10-year experience performing such analysis. The course also takes the student through 5 examples of contactless transactions being analysed with those troubleshooting diagrams.