Next Up: Google Pay Octopus or Garmin Pay Octopus?

Apple Pay Octopus launch day was a big success, so successful that Octopus apologized for their servers buckling under the demand. What’s next for Octopus, Google Pay? There are some possibilities but when it comes to Android there is the matter of the Secure Element (SE), where it resides and what transaction protocols are supported.

From the NFC hardware angle everything has been ready to go on all smartphone hardware for years, NFC A-B-F is required for NFC certification. The problem has been on the SE side, the black box where all the transaction magic happens. From Global Platform the SE certification organization:

A SE is a tamper-resistant platform (typically a one chip secure microcontroller) capable of securely hosting applications and their confidential and cryptographic data (for example cryptographic keys) in accordance with the rules and security requirements set by well-identified trusted authorities.

There are different form factors of SE: embedded and integrated SEs, SIM/UICC, smart microSD as well as smart cards. SEs exist in different form factors to address the requirements of different business implementations and market needs.

Global Platform Introduction to Secure Elements

SE Wars and Google HCE ‘SE Pie in the Sky’
In the pre-Apple Pay mobile carrier hardware era, carriers used SE SIM or embedded Secure Elements (eSE) + SIM combos that chained customers to service contracts for the privilege of using mobile payments. This is the classic Osaifu-Keitai textbook maneuver pioneered by NTT Docomo: leave those pesky SIM Free whiners in the cold world of plastic cards and hard cash, or crippled digital wallets until they give up and buy an overpriced carrier SIM. This brain dead approach is one reason why Mobile FeliCa ended up being ridiculed as ‘galapagos technology’ even though everybody copied it with inferior crappy me-too products.

This carrier SE hostage situation, i.e. the Mobile Wallet SE Wars, led Apple and Google to follow different strategies to address the problem.

The Apple Pay Way
Apple’s answer of course was Apple Pay. A unique in house strategy of putting a Global Platform certified Secure Element in their A Series/S Series chips then building it out from there. Most eSE go on the NFC controller, but doing it the Apple in-house way has advantages over a NFC chip vendor bundle: control of the eSE applets and ability to update them and the Apple eSE for new protocols in iOS updates. We saw this in action with the addition of FeliCa in 2016, PBOC in 2017 and MIFARE in 2018. We may even see the addition of Ultra Wideband (UWB) Touchless in iOS 14.

What iOS 14 could look like with QR and UWB support

The Google Pay Way
Google’s answer to the carrier owned SE problem was the more convoluted evolution from Google Wallet (2011) to Android Pay (2015) and finally Google Pay (2018). Google first salvo was Host Card Emulation (HCE): “NFC card emulation without a secure element” hosted on Google’s cloud. Later on Google attempted to do the same for FeliCa with HCE-F.

But then something happened that put an end to all this: Google decided to get into the hardware business. And now we have Google Pay and Google Pixel with it’s own embedded Secure Element (eSE). With Pixel, Google decided they didn’t want to be the Secure Element cloud provider for every Android OEM out there especially when the Chinese OEMS are all rolling their own eSE based digital wallet services anyway, completely ignoring HCE. Sure, HCE/HCE-F is still there in the Android developer documentation but it’s a dying vestigial relic of the SE wars.

But Google Pixel depends on vendor bundled eSE + NFC controllers and this makes global NFC support more complicated because Google doesn’t ‘own’ the eSE, at least not in the Apple sense of making their own all in one design. This is one reason why Pixel 3/4 only support FeliCa in Japanese models even though all worldwide models have the same NFC A-B-F hardware.

The end result of all this is the Android market is a very fragmented landscape, there are no global NFC Android smartphones: a device that supports EMV, FeliCa, MIFARE, PBOC out of the box in one globally available package.

Google Pay Octopus and the Android Global NFC Installed Base
Back to our original question, can Google Pay Octopus happen? We already have Google Pay Suica right? Let’s assume that Octopus Cards Limited (OCL) has everything in place for it to happen. Here we run into the problem just described: there are’t any global NFC Android smartphones available globally. Samsung sells them in Japan and Hong Kong, Google only sells them in Japan along with Huawei, Oppo, Sharp, etc.

For OCL this means the potential Google Pay installed base that can support Hong Kong Octopus consists of Samsung Galaxy smartphones that are already using Smart Octopus in Samsung Pay; not exactly a mouth watering business opportunity worth the support expense. If Google Pixel 5 goes deep instead of cheap Hong Kong would have a potential Octopus non-Samsung Android device, but that’s only one new device not an installed base. I only see Google Pay Octopus happening if Google foots the entire support expense.

There is a way forward however for OCL: Garmin Pay Suica. The same Garmin APAC models that support Suica can also support Octopus, the recharge backend is entirely Google Pay. Garmin smartwatches work with any Android 5 and higher smartphone, a much larger installed base that bypasses the fragmented Android landscape. Garmin Pay Octopus would offer Android users a way in, who want to use Octopus on a mobile device but who don’t want to use Samsung or Apple devices.

The conclusion: forget Google Pay Octopus for the time being. Hong Kong is a golden opportunity for Gamin Pay Octopus….if Garmin can get Garmin Pay clearance from Hong Kong authorities and banks, and cut a deal with OCL. It’s certainly in Octopus’ best interest for OCL to help turn the negotiation wheels. It’s also in Google’s interest as Google Pay would supply the recharge backend as it does for Garmin Suica. Big hurdles all, but I hope it happens.

Advertisements

If you need to enter your passcode

A reader asked me about using face masks with Express Transit. The great thing about Express Transit with Suica and Octopus is that the user doesn’t need Face ID or Touch ID to use transit or buy stuff. It’s very convenient to have, especially in our face mask era. iOS 13.5 added a small Face ID tweak for easier passcode entry when wearing a face mask. It helps with the basic unlock but for me regular Apple Pay authentication is still a pain.

The reader wanted to know if the iOS 13.5 Face ID tweak affected Express Transit. It does not. You don’t need Face ID to use Apple Pay Express Transit. But Face ID needs to be ‘on’ in order for Express Transit to work and finding the right information on Apple support pages is a little confusing. The reference page you want is If Face ID isn’t working on your iPhone or iPad Pro>If you need to enter your passcode:

The key sentences are outlined in red. Wearing a face mask is not a problem with Express Transit and Face ID turned on. However, “five unsuccessful attempts to match a face,” turns off Face ID and Express Transit. You need to enter your passcode to turn on Face ID and Express Transit again.

Unfortunately turning off Face ID wearing a face mask with five unsuccessful attempts without realizing it is easy to do and trips up a lot of Express Transit users who are not aware of it. That’s why I suggest turning off the ‘Raise to Wake’ option in Settings > Display & Brightness. Doing so reduces the chance of ‘five strikes’ and makes Face ID with face mask life a little easier.

Apple Pay Octopus Launch Meltdown

Anybody could have seen this one coming. When Apple Pay Suica launched in 2016 we had 2 things: the iOS 10.1 update and the Apple Pay Japan service launch all coming at the start of a Tokyo commute weekday. Lots of iPhone users decided to upgrade and add their Suica to Apple Pay. By 7am local Tokyo time Mobile Suica and Apple Pay iCloud servers were overloaded and not responding.

This time we had 3 things: Apple Pay Octopus, the iOS 13.5.1 update and Apple Maps Hong Kong Transit all launching at the same time. By 11 am Octopus servers were overloaded and not responding, the usual ‘small number of users’ were complaining on Twitter far earlier than that. Duh, so much for anticipating iPhone user demand. Octopus Cards Limited has posted an apology and instructions to fetch Octopus cards lost in the cloud. It a simple matter of adding the Octopus card to Wallet again. In some cases Octopus customers are getting refunds.

At least we know the launch was a success in that lots of iPhone and Apple Watch Hong Kong users apparently want to use Apple Pay Octopus. I guarantee this will drive mobile payments use far more than regular bank cards. Riding the transit and buying stuff with Express Transit is a no brainer.

Rakuten Pay Suica

One year after the tie-up was announced, the Rakuten Pay Android app was updated yesterday and now supports adding a Rakuten branded Suica card and recharging that earns Rakuten Points, all done within Rakuten Pay. Each ¥200 of a recharge earns 1 Rakuten Point.

Outside of the Rakuten Pay app is confusing: red Rakuten Suica is only seen in Rakuten Pay but everywhere else it looks and acts like a regular green Suica (in Google Wallet, Mobile Suica, Osaifu Keitai app). But the Rakuten Point earning recharge is limited to Rakuten Pay app recharge which only sees the red Rakuten Suica and nothing else. Whew. Details are outlined clear as mud in the Rakuten Suica English press release.

Plugging Suica into the Rakuten Point empire is the whole point of the JR East/Rakuten tie-up but the current implementation is still missing an important point: free Suica recharges with Rakuten Points. This is promised in a future update. Up until now JR East has kept free Suica recharge exclusively for their own JRE POINT system where registered users earn JRE POINT with Suica then use points for free Suica recharge and Green Seat upgrades. The advantage for JR East is that Rakuten Point users outside of JR East’s transit region now have an incentive to use Suica for purchases and local transit as part of the Rakuten Payment experience.

There is no reason why Rakuten Suica couldn’t also work on Apple Pay but Rakuten probably wants to keep their branded Suica in their own app which is not allowed by Apple. Rakuten Suica would have to reside in Wallet just like the Mizuho Suica that recharges via its own app or Apple Pay. If Rakuten can live with that, Rakuten Suica has an Apple Pay future. For now, iOS users can earn Rakuten Points when recharging Suica with a Rakuten credit card but the sign-up process is convoluted and only good for 30 days before you have to sign up again.

Garmin Pay Suica aka Google Pay on iOS

Garmin Pay Suica went live May 21, effectively breaking the 4 year Apple Watch/Apple Pay Suica monopoly. As any Apple Watch user in Tokyo will tell you, Apple Pay Suica is the killer Apple Watch app. The real secret of course is Express Transit payments. Even now I get the occasional oh and ah from store staff when I hold Apple Watch up to the reader. They really appreciate the speed and social distance. So do I.

Since Garmin only does smartwatches, there are inherent limitations and big differences from Apple Pay Suica: (1) there is no way to transfer a plastic Suica to Gamin Pay, users have to create an account and a new virtual Garmin Pay Suica card, (2) Garmin Pay Suica does not support Suica Commuter Passes, (3) Garmin Pay Suica can only be recharged with Google Pay, (4) Garmin Pay Suica is limited to Japanese Garmin models, it is not global NFC like iPhone and Apple Watch.

Outside of that Garmin Pay Suica is a regular Suica with ‘Rapid Pass’ instead of Express Transit, different name, same thing. It can be registered for SmartEX and Ekinet Shinkansen eTicket travel. iOS users setup and recharge via the Garmin Connect Mobile app.

Garmin Pay Suica limitations limit its appeal for iPhone users who already have the full range of Mobile Suica service on Apple Watch. It’s a boon for Android users who have lusted after a Suica smartwatch. It very weird that it has taken 4 years for Android based device makers to even attempt matching the killer combo of Apple Watch and Apple Pay Suica. I hope Garmin works to improve the service and remove the limitations. Android users would really appreciate having the full Mobile Suica experience on a smartwatch.

UPDATE: there’s some gray area whether all Asian models support Suica or just the devices sold in Japan. I’ll update any discoveries here. Other limitations like Suica Commuter passes are also interesting and suspect they shed some light on the Google Pay~Osaifu Keitai relationship. In many ways Google Pay Suica is a UI skin on top of the Osaifu Keitai stack. In the case of Garmin Pay, no Osaifu Keitai stack means no Commuter Pass support even though it depends on Google Pay for recharge.

UPDATE: All APAC models support Suica