Overview

• Facebook Demo (Roy McElmurry)
• Progress since Singapore (April)
• Discussion

Progress since Singapore

• UPDATED: Tokenized Card Payment
• NEW: Payment Method Encryption, which may be used by different payment methods to encrypt the response data; tokenization uses it.

Improvements to Tokenized Card Payment

• Clear use cases: one-time, recurring, card-on-file
• Three payment methods (with updated data models):
  • tokenized-card: first transaction, full data
  • token-reference: first transaction, minimal data (where there is a backend integration for the rest of the data)
  • token-cryptogram: cryptogram request for subsequent transactions
• NEW: algorithms (compare to Basic Card), flow diagrams, introduction

Discussion

Who will use this in the ecosystem?

• Option 1: Convince "*Pay" apps to converge on this data mode
• Option 2: Banks, card networks, other third party payment handlers support
• Option 3: Mediators (e.g., browsers, Facebook) leverage

Next steps:

• Get implementation experience
• Understand card network expections w.r.t. 3DS, SRC
• Evolve spec based on experience